Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/a-jK0d0POq06MJ-gxeoHJnrabio.roa
File: a-jK0d0POq06MJ-gxeoHJnrabio.roa (raw, json)
Hash identifier: PW5ZmA1ie8ThbLIBilpfV3P9suimDynNMpfG7tbZIww=
Subject key identifier: 6B:E8:CA:D1:DD:0F:3A:AD:3A:30:9F:A0:C5:EA:07:26:7A:DA:6E:2A
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 01893B8F3FC9258306FD6797DE4362E0E614
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/a-jK0d0POq06MJ-gxeoHJnrabio.roa
Signing time: Sun 09 Jul 2023 16:49:50 +0000
ROA not before: Sun 09 Jul 2023 16:49:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 213.253.215.0/24 maxlen: 24
81.0.120.0/24 maxlen: 24
195.184.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Aug 2023 08:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3b:8f:3f:c9:25:83:06:fd:67:97:de:43:62:e0:e6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jul 9 16:49:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6be8cad1dd0f3aad3a309fa0c5ea07267ada6e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d5:80:ab:2d:ec:3d:7f:64:59:a2:9d:a3:d5:
ed:46:db:11:27:b3:76:ea:10:96:d7:72:b4:04:ca:
a3:45:47:86:1e:5a:98:92:32:74:14:78:42:fa:b2:
70:17:ff:c9:cb:97:3e:d4:ec:b8:84:24:25:9e:cd:
97:58:77:0b:fe:29:2d:78:cc:33:87:cc:66:2c:9a:
8f:41:16:b7:a2:35:8e:b1:8c:79:2e:48:eb:7c:ce:
ba:2d:94:bc:d5:50:c3:8f:00:f9:ea:06:56:28:a9:
80:13:5f:b4:c1:c6:a9:58:ea:2d:7f:d3:4f:06:30:
2e:59:f6:a2:79:6a:35:43:78:d9:7d:8a:2f:81:d4:
69:8d:10:99:32:79:68:27:4e:5e:9b:70:01:62:67:
d9:f0:33:49:0d:cc:17:80:e7:a7:e2:7b:1e:9a:0c:
b9:62:a8:24:1b:f6:18:0e:21:b5:27:4d:6e:98:52:
d4:a3:c1:65:fe:bc:85:8a:40:3a:d0:f5:c0:60:22:
43:09:d5:dd:5c:04:cb:a8:74:f7:07:0f:82:31:01:
90:d9:03:03:66:85:e9:b0:d1:a2:80:d0:1f:c7:81:
99:7e:7d:11:cd:33:37:55:fa:32:6d:37:d5:ea:9d:
b8:00:f8:26:b2:67:08:c1:9e:a9:7d:56:4f:3d:b1:
b6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E8:CA:D1:DD:0F:3A:AD:3A:30:9F:A0:C5:EA:07:26:7A:DA:6E:2A
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/a-jK0d0POq06MJ-gxeoHJnrabio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.0.120.0/24
195.184.27.0/24
213.253.215.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:5f:7d:a5:8e:9e:be:3b:ee:c1:da:a6:96:92:26:f5:55:cd:
8a:39:7f:f0:4c:e3:43:e1:f2:08:42:4b:c0:54:6b:a2:e2:49:
13:e2:48:f2:68:78:8a:ed:fd:eb:51:89:92:96:70:1e:52:85:
5d:c2:8d:88:d6:9c:64:bd:86:13:cd:fa:25:2e:01:43:6e:ce:
b3:2f:26:30:a4:06:a3:e8:b6:54:f1:09:90:5c:0e:2f:be:af:
13:54:4b:8f:b3:c2:8f:42:5b:a7:c6:6f:54:aa:7c:03:72:fe:
f8:15:3f:ce:3d:77:14:9a:bb:2f:41:ae:a2:ba:20:0f:48:e3:
e3:43:76:3a:e8:9a:15:42:5f:5e:91:d4:99:de:84:ac:e6:09:
74:0a:73:6e:99:eb:9c:b5:9d:ec:0a:fa:d5:20:b6:49:80:49:
a2:6d:c1:e9:e9:e9:de:74:11:13:8b:ef:28:a7:8a:0d:b2:c0:
c9:49:be:5a:f8:61:cd:5b:d9:bb:6d:22:f2:80:77:fd:c9:77:
50:3b:56:21:f0:15:04:fd:0f:1f:7e:0c:28:08:7a:95:13:bb:
18:64:d7:58:68:14:47:00:27:13:27:4c:51:ed:c4:64:b4:b9:
bc:c0:43:4f:b6:8f:b1:49:8c:37:b5:4c:05:2b:b5:fe:a3:a6:
bc:a6:66:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:16 2024 by rpki-client on console-ams.rpki-client.org