Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/3grzgSJnmoGQN2hZNa6n5CXHiB0.roa
File: 3grzgSJnmoGQN2hZNa6n5CXHiB0.roa (raw, json)
Hash identifier: 0+C90/uuYYXcIYYGAkIhq9G/G0n68D2TLmoYg8rH1Sg=
Subject key identifier: DE:0A:F3:81:22:67:9A:81:90:37:68:59:35:AE:A7:E4:25:C7:88:1D
Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial: 01857014FFEC063B13072D81544F13632B7D
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/3grzgSJnmoGQN2hZNa6n5CXHiB0.roa
Signing time: Mon 02 Jan 2023 01:25:02 +0000
ROA not before: Mon 02 Jan 2023 01:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1754
IP address blocks: 141.34.0.0/16 maxlen: 16
192.76.172.0/24 maxlen: 24
131.169.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:14:ff:ec:06:3b:13:07:2d:81:54:4f:13:63:2b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Validity
Not Before: Jan 2 01:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de0af38122679a819037685935aea7e425c7881d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fa:69:f7:6f:1a:27:8f:22:4c:b5:ab:a0:1b:
04:d5:21:43:42:92:b6:83:fc:31:ad:4d:8e:bc:0f:
a5:7a:1a:19:92:31:4e:6f:15:d3:54:02:4a:46:a3:
8f:06:8c:07:28:12:e2:2e:80:ae:84:26:11:f0:b0:
fa:5b:6a:29:8f:18:16:cb:96:26:d1:2d:a5:59:42:
34:55:0e:2a:8d:e2:3e:2c:3b:23:97:a9:d9:7d:59:
95:97:34:ba:04:f7:63:2b:49:d9:fa:87:1a:c4:f7:
a9:e6:b5:b3:f8:ee:8d:c1:76:6b:9f:e4:4b:74:dd:
89:c7:df:cf:2f:ba:89:88:a0:60:fb:15:83:a4:f4:
ea:00:d8:28:93:27:4c:1e:ae:88:2d:03:68:bc:ea:
9f:a6:ca:17:09:76:c3:28:ca:5c:4b:7c:5c:1a:fa:
fd:89:d0:00:b9:f7:6f:d5:1a:d2:08:e3:a6:4a:ae:
93:2b:96:42:a1:8e:81:67:c8:1c:2c:69:5b:04:95:
c7:43:46:0a:0b:2d:1e:22:fe:a8:ea:07:4a:7f:5a:
ff:57:9a:b9:48:e1:5d:7d:8c:3c:0b:ab:d7:d0:40:
33:a9:6a:7b:5e:fb:86:1c:41:9c:6f:a3:d7:9a:6d:
53:62:21:4f:66:60:dc:cc:3a:74:f3:dd:9f:bb:aa:
e7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0A:F3:81:22:67:9A:81:90:37:68:59:35:AE:A7:E4:25:C7:88:1D
X509v3 Authority Key Identifier:
keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/3grzgSJnmoGQN2hZNa6n5CXHiB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.169.0.0/16
141.34.0.0/16
192.76.172.0/24
Signature Algorithm: sha256WithRSAEncryption
99:cf:ea:f2:24:1b:af:9b:b7:a9:b9:fe:e6:27:6f:7c:29:5d:
60:c8:b5:f1:db:cb:38:9c:6b:0c:d7:f7:dd:de:57:67:77:b1:
7a:a4:b1:ea:7a:38:3e:a0:c0:26:64:fb:2d:15:66:c6:61:b4:
80:88:07:d2:6b:b1:a3:24:31:f1:3c:37:a8:77:88:76:e3:5b:
90:a4:e0:80:2f:ef:8d:7b:2b:11:ad:4d:95:eb:38:2b:d3:ae:
df:d2:fa:ac:9b:50:df:ee:11:2c:a5:d2:5b:46:94:e4:26:f8:
a0:1a:91:fd:27:c9:95:01:6a:b2:cd:06:ce:08:a8:83:1c:bd:
59:04:48:ca:76:6f:91:53:38:de:68:04:cd:b4:e7:0c:4a:5b:
07:05:c2:ef:e4:d4:5c:4f:fb:e7:07:96:07:59:01:00:32:36:
a9:bf:31:bc:77:09:43:7e:fa:7b:25:e8:e5:06:6f:b4:7f:ab:
04:9a:38:9f:76:f1:e3:dd:e8:88:17:39:93:d7:e7:19:79:cc:
be:42:80:fc:4d:25:7a:5c:a7:86:7f:ce:0e:da:f3:cd:ae:83:
b4:01:12:b0:52:e7:cb:a9:55:52:24:8c:f3:55:01:98:40:af:
47:81:10:03:2c:1e:8f:41:72:16:cd:62:d2:b0:39:c3:05:50:
ad:12:44:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:20 2024 by rpki-client on console-ams.rpki-client.org