Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/2twrda83BOqPMtqIZ4UOPX0Gh24.roa
File: 2twrda83BOqPMtqIZ4UOPX0Gh24.roa (raw, json)
Hash identifier: ctXh7R1dKQttR5bRDiuaT/DCVMF0OeZ4gNvo0ksAGMc=
Subject key identifier: DA:DC:2B:75:AF:37:04:EA:8F:32:DA:88:67:85:0E:3D:7D:06:87:6E
Certificate issuer: /CN=63d92b8256159894d2b9b25f4d85986c172723c3
Certificate serial: 018B904449AB4FCA07384584A9D2D8014882
Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/2twrda83BOqPMtqIZ4UOPX0Gh24.roa
Signing time: Thu 02 Nov 2023 13:41:16 +0000
ROA not before: Thu 02 Nov 2023 13:41:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29033
IP address blocks: 81.20.32.0/20 maxlen: 20
81.20.41.0/24 maxlen: 24
81.20.40.0/24 maxlen: 24
185.129.176.0/22 maxlen: 22
2a00:1fd0:ecc1::/48 maxlen: 48
2a00:1fd0:ecc2::/48 maxlen: 48
2a00:1fd0:ae00::/40 maxlen: 48
2a00:1fd0:ec00::/48 maxlen: 48
2a00:1fd0:ecc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:44:49:ab:4f:ca:07:38:45:84:a9:d2:d8:01:48:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3
Validity
Not Before: Nov 2 13:41:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dadc2b75af3704ea8f32da8867850e3d7d06876e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:67:d3:24:0a:fa:37:3d:21:5b:42:d5:b6:
e6:5f:76:ce:ae:6b:27:51:51:a7:28:87:8d:36:16:
50:21:75:f8:1c:a2:00:f6:a6:88:b8:8a:ba:b4:48:
c3:a5:eb:f9:ac:e0:ef:c2:b1:7e:54:92:5c:bc:9d:
61:c7:c5:a6:23:00:ee:7b:2c:b7:5d:b1:8d:9c:53:
84:d1:81:32:16:05:87:b4:32:b8:d1:76:d5:95:40:
39:c1:92:0b:b6:f0:01:c2:89:26:89:e9:89:3c:2e:
af:32:fe:c3:b9:a9:3f:07:7f:44:4e:51:a0:04:28:
07:e0:d6:45:00:ed:4b:2b:1d:a8:d5:ec:8a:df:a2:
a8:73:ff:6e:ff:a8:de:9f:3b:21:ad:b1:f1:00:d2:
88:72:c9:ac:5f:26:08:31:c6:a5:b2:f3:a6:ed:2a:
6b:67:a7:6f:88:4c:3a:9f:63:27:3e:d0:d1:43:b5:
93:c1:18:57:02:7d:76:8c:d4:7c:9e:42:18:fd:ba:
cf:c8:25:5b:98:48:21:03:d1:3f:18:7c:41:ce:2f:
be:a3:37:eb:e1:dd:de:7e:da:c1:3c:6b:36:b5:dd:
bf:6e:c1:ed:85:6f:fd:4d:19:78:ab:0c:45:f5:0e:
25:b3:03:f2:33:48:9d:6b:27:05:6e:21:29:91:2b:
ec:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DC:2B:75:AF:37:04:EA:8F:32:DA:88:67:85:0E:3D:7D:06:87:6E
X509v3 Authority Key Identifier:
keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/2twrda83BOqPMtqIZ4UOPX0Gh24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.20.32.0/20
185.129.176.0/22
IPv6:
2a00:1fd0:ae00::/40
2a00:1fd0:ec00::/48
2a00:1fd0:ecc0::-2a00:1fd0:ecc2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
40:cd:91:68:5e:66:16:5b:57:67:c1:55:e8:02:7a:d7:d2:03:
25:23:3a:56:0d:eb:1d:1d:c7:f7:ef:f7:11:18:0d:ce:a1:46:
89:b3:1a:34:5e:bd:44:e5:3e:fb:9d:5e:c7:1f:e7:51:a8:32:
c3:43:ea:c6:7d:bf:e4:9e:50:68:ca:ba:a0:ac:a2:b2:8b:59:
79:ee:eb:e2:6e:11:57:5e:81:cf:ba:63:88:36:f4:69:f5:53:
89:a1:cc:e0:61:7e:40:a0:07:e9:ce:a5:a8:01:46:98:7b:d3:
64:8a:5f:e8:81:28:61:38:11:95:29:37:63:27:87:22:d7:2f:
d5:9d:b5:b9:82:b5:ab:6f:f3:01:ca:e5:08:6c:f3:63:df:13:
e3:68:46:d0:dc:8c:d1:12:20:d1:76:b1:85:cd:e9:66:37:01:
89:e8:1b:66:e7:8e:92:8e:76:6e:ab:b0:02:55:86:7a:e5:29:
8d:9f:9c:5c:24:39:15:f3:4e:0b:e5:1c:14:fa:39:9b:b6:b8:
aa:d9:8f:1a:c4:86:88:b0:fd:9a:82:1d:7e:67:2a:c1:99:74:
72:30:2c:14:06:36:b8:9f:b7:aa:7b:27:64:68:90:8f:e4:d0:
03:89:1d:96:07:e6:54:ea:29:9b:65:d4:11:c6:3d:c9:2f:c8:
4b:4c:ee:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:26 2024 by rpki-client on console-fra.rpki-client.org