Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/aSXbbORypYL9sHx4xssFS4o8rYA.roa
File: aSXbbORypYL9sHx4xssFS4o8rYA.roa (raw, json)
Hash identifier: Cb9R5UN4BBGgYwFCdhasUfR/hkC+eyyh/lmI7q2YXJI=
Subject key identifier: 69:25:DB:6C:E4:72:A5:82:FD:B0:7C:78:C6:CB:05:4B:8A:3C:AD:80
Certificate issuer: /CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Certificate serial: 0185718C2CE832E708F3DC77C229AE7B640B
Authority key identifier: 8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/aSXbbORypYL9sHx4xssFS4o8rYA.roa
Signing time: Mon 02 Jan 2023 08:14:49 +0000
ROA not before: Mon 02 Jan 2023 08:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34002
IP address blocks: 81.88.104.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:2c:e8:32:e7:08:f3:dc:77:c2:29:ae:7b:64:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Validity
Not Before: Jan 2 08:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6925db6ce472a582fdb07c78c6cb054b8a3cad80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:5d:11:2c:b6:a7:31:f6:c7:f2:79:a3:4d:
12:8a:1a:8c:50:47:2e:b1:20:f5:f2:cf:dc:d4:4f:
48:1f:0b:f5:be:10:76:3e:44:9a:93:cb:82:64:3b:
ca:6c:7f:54:03:cc:44:5a:15:54:f7:ba:49:c3:34:
99:62:14:ad:3f:bf:95:69:f2:a3:10:b1:1e:67:ec:
a5:5f:59:a0:a4:10:bd:57:6c:a9:da:ae:98:43:8f:
bd:36:2e:cb:53:7b:e5:56:37:16:6b:68:d1:c7:d0:
16:31:f0:27:e9:0b:bc:85:01:bc:72:11:18:ef:9b:
6e:6c:d0:c7:0d:6e:76:0b:c0:eb:6d:81:43:76:b0:
7a:b3:33:1b:02:45:85:bf:67:be:b2:f2:a4:de:f3:
5d:e0:ee:a1:83:46:cd:8f:77:33:1b:ee:98:20:7b:
5c:44:63:de:52:5b:85:f3:b2:ef:d9:a9:af:24:39:
9f:22:df:0a:df:b7:3c:cc:99:f3:83:89:a4:42:88:
36:69:80:2c:d3:d9:9a:e9:76:b4:12:7d:27:7f:88:
91:66:62:d1:bc:c6:8d:cf:1f:f3:06:8b:75:13:5d:
90:d0:25:41:58:d0:51:9b:95:e1:f7:8c:4f:0b:34:
8f:bd:88:43:10:43:39:ad:83:10:8f:17:b3:0c:19:
d1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:25:DB:6C:E4:72:A5:82:FD:B0:7C:78:C6:CB:05:4B:8A:3C:AD:80
X509v3 Authority Key Identifier:
keyid:8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/aSXbbORypYL9sHx4xssFS4o8rYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.104.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:0f:f5:0a:cb:a9:4d:d0:43:ce:22:c0:ec:07:5f:be:09:0b:
a3:8e:af:70:b7:81:9a:5d:e3:37:80:3d:10:06:77:9b:f9:e9:
2d:d7:5c:e6:b8:4d:0d:57:3b:6a:a2:7d:a5:a0:ed:0b:bf:2f:
bc:94:cd:77:a4:97:bd:66:d6:ee:85:89:d1:fa:e9:a7:81:92:
e7:ef:04:b6:08:a8:bf:95:c4:3e:b9:62:c8:6e:22:5b:51:22:
2f:c0:a3:73:2b:20:b0:53:6d:8a:16:ef:65:be:a7:de:0e:d2:
8e:f4:30:4b:f3:dc:64:6b:bf:88:d2:44:ac:ef:cb:b7:7a:9e:
43:b8:cb:eb:dc:82:98:d8:93:a0:23:5d:8d:70:bc:18:1d:8f:
e0:80:05:1f:23:af:21:2a:a1:fb:05:e6:3e:f9:73:b7:76:18:
c2:26:3e:65:19:c1:fe:73:85:08:7c:a8:d8:80:de:42:aa:93:
af:c0:c3:3e:83:94:7f:f9:ef:e5:ac:d9:33:09:1f:bb:02:ea:
18:48:ee:ca:1f:e8:9f:0a:cd:69:a5:fe:38:1b:85:b8:87:b2:
a4:1f:75:a7:51:ff:27:36:8f:b2:d9:d0:d5:ab:2a:6c:6b:9e:
4f:fe:58:95:c5:51:ed:3f:ef:19:b1:88:43:3d:9a:f8:74:d1:
6d:89:7c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:34 2024 by rpki-client on console-ams.rpki-client.org