Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/voOjTixcxrG9O7CxA7zcLN4DgGE.roa
File: voOjTixcxrG9O7CxA7zcLN4DgGE.roa (raw, json)
Hash identifier: xj86veXKoF9hwCMAQYjUSr3xRm7L2D1V7FwIE3mtQNk=
Subject key identifier: BE:83:A3:4E:2C:5C:C6:B1:BD:3B:B0:B1:03:BC:DC:2C:DE:03:80:61
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01856CB8339B44F6E9F64F9FAA456B5C9886
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/voOjTixcxrG9O7CxA7zcLN4DgGE.roa
Signing time: Sun 01 Jan 2023 09:44:49 +0000
ROA not before: Sun 01 Jan 2023 09:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2287
IP address blocks: 90.84.157.0/24 maxlen: 24
90.84.158.0/24 maxlen: 24
2a01:ceff:1::/48 maxlen: 48
2a01:ceff::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:33:9b:44:f6:e9:f6:4f:9f:aa:45:6b:5c:98:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 09:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be83a34e2c5cc6b1bd3bb0b103bcdc2cde038061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:4c:a5:d5:dc:0f:e9:b8:8e:68:b5:94:6f:
aa:b1:46:48:d4:68:a9:bf:2f:6d:13:f9:f9:bf:87:
00:15:0e:95:ca:04:ec:d3:3f:c2:aa:f6:fb:8f:76:
76:28:09:b5:e1:5f:d0:c1:c9:f9:c1:aa:8f:cb:e7:
19:eb:4e:f3:f7:5c:0c:af:ca:e3:8e:95:bf:ab:21:
39:a3:a7:92:71:43:f1:b8:e9:04:ae:74:a0:d0:01:
2f:e8:72:89:c4:f5:c3:ff:67:a5:6f:6d:9f:7a:22:
52:d4:74:98:05:2d:34:b6:54:e9:37:aa:1a:c1:b1:
d2:13:fb:1b:b7:55:05:dd:f4:f1:f6:d4:f4:ef:22:
41:ea:e3:60:23:55:71:e7:e6:80:f1:7f:e6:d4:cc:
21:dd:81:88:6e:05:88:90:67:dc:65:a1:33:5f:1d:
7d:6e:96:eb:26:76:76:ba:19:50:c6:b9:f5:3b:1e:
27:da:7b:9e:24:7a:00:e9:d0:75:2a:86:51:7c:db:
63:44:f1:fa:b1:ca:6f:8f:e4:c3:cd:fe:2d:4f:eb:
73:5c:33:bf:8e:07:87:87:ce:ad:d3:c5:29:65:2f:
da:ad:58:fd:2f:1f:eb:7b:96:44:da:3e:64:17:a4:
7f:3f:4b:6d:28:75:58:61:38:01:d9:45:25:a2:87:
14:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:83:A3:4E:2C:5C:C6:B1:BD:3B:B0:B1:03:BC:DC:2C:DE:03:80:61
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/voOjTixcxrG9O7CxA7zcLN4DgGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.84.157.0-90.84.158.255
IPv6:
2a01:ceff::/47
Signature Algorithm: sha256WithRSAEncryption
11:2a:80:f2:cf:5e:db:e0:87:8d:34:9b:ad:af:4c:47:1c:c5:
d7:df:94:d6:cf:13:2c:38:19:e2:6c:b8:17:23:65:45:1f:7e:
35:86:fb:86:c3:a3:ba:93:b3:15:6e:d2:99:9c:5b:84:19:84:
23:ab:c9:55:c6:2d:02:dd:24:9f:a5:b3:e7:a3:10:e4:c4:41:
d5:bf:81:08:97:e4:26:b5:05:be:60:10:1f:cf:24:c7:0c:49:
aa:46:36:00:3e:63:fb:a8:ff:29:c2:8b:76:67:48:78:4e:10:
1c:a4:59:c3:54:2d:c8:65:56:eb:5b:2e:41:57:d2:db:60:70:
da:55:14:a3:e6:e8:61:8e:6f:33:0a:b9:0f:ac:cb:c9:e6:9f:
37:b1:b1:ad:b2:8c:e9:f2:6d:01:cb:f1:19:9f:f4:51:23:47:
52:50:6f:81:86:b9:cc:b9:8a:33:20:a2:b5:30:3a:6b:e8:41:
cf:98:75:fd:d8:88:98:59:77:02:9c:55:78:0e:c6:b1:bd:92:
10:3c:42:19:6e:f6:a9:e3:4d:35:be:1b:1a:a0:4b:6c:21:38:
5b:93:de:20:5b:15:f9:b2:65:6c:40:54:d0:d9:72:42:17:79:
1d:19:ac:1d:30:8c:90:79:ea:48:f0:f9:04:3b:5a:58:a3:6a:
1a:8e:b4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:20 2024 by rpki-client on console-ams.rpki-client.org