Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/o4LkBYCeDUPDrjT4BPORST3bbXA.roa
File: o4LkBYCeDUPDrjT4BPORST3bbXA.roa (raw, json)
Hash identifier: B+JYwa4o+2WN226mI+jUfPBjzzs/0Yu9YLLuxgPBYyQ=
Subject key identifier: A3:82:E4:05:80:9E:0D:43:C3:AE:34:F8:04:F3:91:49:3D:DB:6D:70
Certificate issuer: /CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Certificate serial: 01889ABD3853ADFD0852A936790D490E3842
Authority key identifier: A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/o4LkBYCeDUPDrjT4BPORST3bbXA.roa
Signing time: Thu 08 Jun 2023 11:21:11 +0000
ROA not before: Thu 08 Jun 2023 11:21:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6079
IP address blocks: 130.180.224.0/19 maxlen: 19
Validation: Failed, certificate revoked on Wed 13 Dec 2023 18:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:bd:38:53:ad:fd:08:52:a9:36:79:0d:49:0e:38:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Validity
Not Before: Jun 8 11:21:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a382e405809e0d43c3ae34f804f391493ddb6d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ce:85:d5:3f:26:b2:bd:bd:b4:9e:db:d4:30:
f1:48:80:eb:8e:72:b5:bf:61:75:4a:03:ad:45:a5:
7e:d5:68:b0:f2:82:53:91:43:b3:2f:8c:d4:62:d4:
f3:5f:73:64:08:a3:cb:41:1c:7d:0b:1a:87:d5:e1:
2d:b0:3e:10:bd:7f:15:63:aa:c4:e8:7c:67:15:8e:
7e:aa:a2:8f:b5:38:4b:4e:58:90:14:5d:5f:0d:42:
b7:70:c5:79:96:c3:4a:6f:e0:dc:14:af:70:59:5c:
cc:03:14:6b:f5:6d:f8:86:a8:40:b8:fb:b1:e4:ba:
73:8d:12:59:b7:54:3c:86:08:bd:62:ca:dd:55:e7:
9a:0c:84:05:fa:b6:44:b6:cd:eb:60:ff:23:31:24:
83:14:b7:7b:e7:ba:b2:fd:20:fb:6a:b6:15:e2:0a:
9f:2a:92:4e:d7:f3:25:c5:ce:f6:90:f0:94:72:b3:
46:cc:c0:bb:04:d8:c1:22:e9:32:e2:ba:d0:99:df:
3f:6d:b3:b1:b6:19:22:5e:1e:49:5f:ba:e3:61:3c:
df:8f:8f:49:6c:7a:cc:38:2a:47:75:b4:aa:96:f5:
34:53:fd:b2:39:00:d9:48:ca:e5:58:fc:17:34:39:
bd:59:30:87:f1:1e:ca:3a:4f:22:07:ed:d3:1f:9d:
8c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:82:E4:05:80:9E:0D:43:C3:AE:34:F8:04:F3:91:49:3D:DB:6D:70
X509v3 Authority Key Identifier:
keyid:A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/o4LkBYCeDUPDrjT4BPORST3bbXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.180.224.0/19
Signature Algorithm: sha256WithRSAEncryption
01:03:44:07:76:3b:90:33:64:df:c4:5d:04:50:9f:4a:e8:45:
a3:c3:6f:9f:0b:96:b3:df:03:17:22:2e:98:9c:8b:16:34:e0:
c5:33:fe:af:25:43:54:6c:d0:82:85:a9:1f:31:cb:25:02:41:
06:bb:21:ee:9d:05:5d:79:8f:56:90:b8:ff:96:0c:da:20:a8:
fb:a9:4c:15:4e:f8:eb:c4:d1:7a:88:71:69:29:f8:a5:3f:57:
94:9e:5f:68:cb:7e:dc:ee:64:78:8b:6b:07:a2:6d:b9:9b:15:
80:61:31:3e:76:7e:7c:28:bb:e8:09:4e:f8:a6:7b:04:5e:3e:
25:5d:a6:d9:ff:10:ee:10:13:47:19:e9:a5:33:b2:7e:e6:94:
21:e0:a6:6e:61:2f:b4:be:ee:4f:51:53:19:7b:51:3b:fa:7d:
1e:56:13:0c:c9:1e:a2:37:33:c0:bf:93:4b:f4:e4:0e:2c:b3:
74:74:36:f9:97:35:ca:b0:59:a0:b7:5d:58:f6:07:2c:a4:2f:
68:ca:ce:fd:35:e5:19:c9:43:bc:ee:0e:2a:09:a7:ad:c7:0a:
3e:5a:5d:05:0d:e9:96:43:1b:85:1c:99:be:24:b4:27:bd:17:
4c:ea:f8:ca:46:c9:b6:4e:5a:88:84:e2:3f:51:9f:c7:b9:8a:
1f:18:4f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:31 2024 by rpki-client on console-ams.rpki-client.org