Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/0okjOvfTslmlyxDj5Scjjl7Vcdc.roa
File: 0okjOvfTslmlyxDj5Scjjl7Vcdc.roa (raw, json)
Hash identifier: iXmyDhhvHq4LOckdR49AB3X+487BJ1V1u6y7DB2g36k=
Subject key identifier: D2:89:23:3A:F7:D3:B2:59:A5:CB:10:E3:E5:27:23:8E:5E:D5:71:D7
Certificate issuer: /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial: 018CC94DEFA45C0753A9BC561BFB5F810DA3
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/0okjOvfTslmlyxDj5Scjjl7Vcdc.roa
Signing time: Tue 02 Jan 2024 08:32:57 +0000
ROA not before: Tue 02 Jan 2024 08:32:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 83.138.0.0/21 maxlen: 24
212.25.192.0/20 maxlen: 24
212.25.208.0/23 maxlen: 24
212.25.212.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 13:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:ef:a4:5c:07:53:a9:bc:56:1b:fb:5f:81:0d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Validity
Not Before: Jan 2 08:32:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d289233af7d3b259a5cb10e3e527238e5ed571d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:46:24:d5:02:2f:10:cb:77:91:c7:f5:dd:
3f:eb:4c:e3:55:1f:74:6e:41:12:4d:a5:b7:a6:e0:
c8:b3:de:9a:ed:2e:94:8a:0e:8b:77:1d:7d:8b:16:
94:87:52:a9:9a:76:b4:2e:7a:b2:05:91:af:ab:34:
f5:f5:77:3f:88:13:21:61:bc:28:1d:a8:14:47:24:
10:be:54:9b:9b:3a:af:d1:d9:7c:5c:eb:78:86:76:
f1:ec:5d:81:5f:3f:b8:ea:7d:97:4e:0c:ac:9b:00:
8c:22:95:65:23:6d:17:e4:45:d7:85:fe:d8:8c:55:
8f:65:d5:81:15:19:b1:96:70:75:80:d7:f5:ee:99:
97:1a:32:39:20:09:42:8a:62:3e:b5:9e:00:ef:c3:
0f:af:9d:fb:d2:cb:8c:f9:13:66:71:cc:4b:56:8d:
5f:1a:0e:7a:10:cf:71:41:18:af:2b:46:55:ab:97:
d4:02:aa:62:b6:6c:4b:e9:e3:06:9e:f7:dc:0f:a8:
36:59:c1:40:9d:4c:2f:dd:c2:cd:b7:ae:50:6d:c6:
e6:ec:b7:82:4b:13:cf:5d:cd:9a:04:61:b2:ad:fa:
bc:df:72:5b:b1:3a:c4:c5:48:af:6d:ac:d5:ac:be:
80:dd:f9:0c:a9:6e:dd:39:af:b4:bd:88:88:49:f2:
ee:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:89:23:3A:F7:D3:B2:59:A5:CB:10:E3:E5:27:23:8E:5E:D5:71:D7
X509v3 Authority Key Identifier:
keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/0okjOvfTslmlyxDj5Scjjl7Vcdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.0.0/21
212.25.192.0-212.25.209.255
212.25.212.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:c3:09:94:ed:f9:16:73:ea:e0:5b:a9:d0:e6:1b:78:1b:08:
a2:e9:bd:9b:9f:35:85:70:3b:37:4e:ac:ff:0f:bb:3e:67:e4:
01:32:00:21:93:75:01:b0:3c:30:68:0a:72:e7:2d:9b:60:91:
54:6b:07:3b:5e:b8:6f:98:42:af:54:bc:fa:ea:e0:6b:3a:5d:
6c:93:31:c7:9c:d1:98:77:24:70:1e:55:1f:9d:50:84:91:71:
c0:57:fd:24:48:29:bb:7f:85:8e:97:e1:cc:23:26:11:5d:22:
39:cd:44:c6:d3:c5:64:4b:54:47:59:b8:66:78:b2:11:02:78:
d2:54:08:db:b7:7e:8b:41:a4:a3:8f:e0:3b:22:1f:82:14:39:
9e:47:a5:60:5f:a0:28:91:23:a8:4b:f2:c7:36:01:12:2d:ec:
4b:79:eb:ca:08:b5:4b:b3:f1:34:5a:c6:b1:13:1c:da:c8:8f:
00:c2:11:b2:d5:88:70:25:e0:ae:bb:db:72:5e:77:c7:95:f5:
00:c6:31:41:be:52:92:85:90:41:0d:45:0c:62:c1:87:86:69:
d3:56:0b:76:b0:93:a3:91:6b:91:ea:90:e3:ed:ef:7c:61:50:
84:2c:0f:1b:07:51:04:41:56:76:d7:53:7d:6b:ff:55:5d:71:
bc:77:35:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 18:15:40 2024 by rpki-client on console-ams.rpki-client.org