Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/Exi--JEw7Qk0cyQVE6UN29ckoJo.roa
File: Exi--JEw7Qk0cyQVE6UN29ckoJo.roa (raw, json)
Hash identifier: CD7W/2ZZ/wM/Jlb7lsRcJ/HAcmEHTrPBZijFgOLByWA=
Subject key identifier: 13:18:BE:F8:91:30:ED:09:34:73:24:15:13:A5:0D:DB:D7:24:A0:9A
Certificate issuer: /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Certificate serial: 0187B49428B7EF70E3AFA041CC4720687CD9
Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/Exi--JEw7Qk0cyQVE6UN29ckoJo.roa
Signing time: Mon 24 Apr 2023 18:43:41 +0000
ROA not before: Mon 24 Apr 2023 18:43:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35280
IP address blocks: 132.66.0.0/16 maxlen: 16
132.67.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b4:94:28:b7:ef:70:e3:af:a0:41:cc:47:20:68:7c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Validity
Not Before: Apr 24 18:43:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1318bef89130ed093473241513a50ddbd724a09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:85:11:69:17:0f:a8:32:d2:5f:18:a2:a8:
ee:71:ef:1b:b3:a6:0f:b6:f8:f3:c1:87:45:10:1e:
f4:f4:38:18:43:af:87:22:8b:00:a8:86:d2:9c:09:
78:c1:be:0c:2c:c7:1c:36:b0:c7:ea:c2:2a:d3:c7:
e3:37:5b:28:c3:ed:2b:d1:2f:fc:6d:7b:c9:f2:98:
d2:80:23:83:1c:15:b4:f1:e0:62:77:25:e1:c1:92:
3f:e1:04:8e:2c:f2:0e:22:53:cc:79:16:99:8b:16:
12:5c:0e:c5:a3:e3:32:bf:b7:4a:1d:75:f0:a0:43:
1d:e8:1c:93:c5:13:7e:98:64:52:bb:6c:71:29:ef:
ae:f3:59:de:a7:e9:75:1a:ac:53:b6:a0:f0:51:55:
d6:e3:3f:b6:50:cf:47:93:40:47:61:36:b9:20:22:
2a:8c:ec:f3:a7:47:bd:8c:6f:22:cd:ba:3e:a8:8e:
6d:dc:f3:b4:e7:54:90:ed:b6:61:b9:ba:7e:76:b3:
14:21:fb:f6:06:de:15:04:be:e6:14:f0:05:60:9e:
85:cd:25:dc:7c:a4:63:6a:f7:59:5c:a3:d5:7c:44:
7e:74:75:55:4f:37:9a:01:43:50:96:b8:79:cd:11:
63:d5:2b:fa:1f:89:0a:9c:b2:21:56:33:f8:51:a5:
6e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:18:BE:F8:91:30:ED:09:34:73:24:15:13:A5:0D:DB:D7:24:A0:9A
X509v3 Authority Key Identifier:
keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/Exi--JEw7Qk0cyQVE6UN29ckoJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.66.0.0/15
Signature Algorithm: sha256WithRSAEncryption
46:82:ca:0e:28:90:49:e8:11:53:ce:48:2d:fe:e8:e3:e9:aa:
64:f8:1e:16:06:58:be:61:8e:b2:ca:cc:41:88:59:42:8b:96:
f9:9a:15:c1:53:b9:84:0b:00:b7:a4:74:56:86:6e:2d:70:65:
32:35:20:ef:71:3c:b6:ef:bf:48:d5:d6:ca:62:d9:50:03:36:
12:94:f7:b5:5f:17:9a:8a:49:dc:df:14:c2:a9:75:49:96:ac:
c6:2c:7e:a4:c6:b6:ce:ac:fb:5b:1f:59:3e:6c:31:8c:26:49:
e7:e7:4f:51:a6:83:5d:f9:05:79:97:91:54:9c:d8:4d:96:fb:
d7:e7:1d:5c:30:eb:d8:7d:ed:3b:0c:e2:b4:86:97:35:6c:c8:
85:28:8e:73:f6:b6:3d:25:6c:1c:3c:0b:94:09:01:49:09:54:
bb:a9:6a:4e:3a:79:d6:4a:9e:fd:00:d2:10:75:da:b0:f1:a3:
85:e1:87:ad:3e:a0:c3:ee:91:0a:e8:e3:b1:3d:5f:ba:fb:26:
2f:af:50:4b:2d:2d:d1:f1:27:74:66:7b:5a:0c:55:c2:f4:6a:
86:65:99:b4:f0:88:f4:61:4a:a9:c6:a8:78:78:91:44:1a:da:
fe:d5:3e:d2:c0:a4:38:b2:69:8e:cc:49:61:df:a3:b6:6f:86:
0d:7b:5d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:07 2024 by rpki-client on console-ams.rpki-client.org