Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/AoI0bcn3IKBeijcmzqT9VVtv73k.roa
File: AoI0bcn3IKBeijcmzqT9VVtv73k.roa (raw, json)
Hash identifier: zfje0OAt+0A1FPlbK4jdpIRESM45szMyc9UbD2KW8Is=
Subject key identifier: 02:82:34:6D:C9:F7:20:A0:5E:8A:37:26:CE:A4:FD:55:5B:6F:EF:79
Certificate issuer: /CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Certificate serial: 0185728C7ADA2E4263F40EFE231003D2A2B8
Authority key identifier: 2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/AoI0bcn3IKBeijcmzqT9VVtv73k.roa
Signing time: Mon 02 Jan 2023 12:54:47 +0000
ROA not before: Mon 02 Jan 2023 12:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15716
IP address blocks: 91.234.189.0/24 maxlen: 24
95.128.32.0/21 maxlen: 21
2001:618::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:7a:da:2e:42:63:f4:0e:fe:23:10:03:d2:a2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Validity
Not Before: Jan 2 12:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0282346dc9f720a05e8a3726cea4fd555b6fef79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1c:dd:23:c7:1d:65:51:d9:ec:73:68:51:78:
c3:ef:c2:d6:25:76:06:fe:b9:60:0e:38:12:11:69:
e4:24:82:ad:f4:c9:16:d9:5e:b6:c5:6c:f7:a5:ed:
10:c1:0f:1c:60:6e:9b:a0:4e:5c:a7:0d:27:b7:fb:
c0:c7:86:2f:0e:d5:5c:cf:e5:3c:91:d2:32:e5:54:
eb:2e:8e:d8:26:90:0d:18:d0:81:83:ec:e2:05:4d:
8c:86:6b:c9:6a:6d:7f:e6:6a:20:d7:23:49:28:6f:
d8:f7:49:1e:2c:8c:ac:b6:72:a9:be:04:18:86:2d:
6a:64:3f:5c:3f:80:68:5c:62:8c:06:f2:b1:99:63:
53:eb:83:42:27:ed:82:20:2e:3d:d9:11:ac:15:41:
66:3b:17:d1:00:32:a2:7d:bf:04:0b:c5:de:47:78:
8d:ab:e0:72:e2:b9:f3:4b:71:12:2d:f9:3e:42:d0:
5b:a5:57:a1:57:c2:2e:86:db:f9:3e:e3:e0:da:d7:
7d:99:6e:49:2e:60:a4:af:35:4b:51:a6:76:f4:2e:
8c:4b:3f:8f:c9:17:3b:6f:80:f3:eb:8f:ca:68:6e:
20:74:77:b0:aa:6b:d2:d2:df:a3:c2:d3:49:3b:bf:
a1:2a:b8:d8:82:fa:08:1d:1c:37:9f:e6:e0:b1:aa:
d6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:82:34:6D:C9:F7:20:A0:5E:8A:37:26:CE:A4:FD:55:5B:6F:EF:79
X509v3 Authority Key Identifier:
keyid:2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/AoI0bcn3IKBeijcmzqT9VVtv73k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.189.0/24
95.128.32.0/21
IPv6:
2001:618::/32
Signature Algorithm: sha256WithRSAEncryption
3d:fd:ba:13:f2:d2:ba:36:93:ee:c8:b1:9c:70:77:8e:50:f7:
45:f5:6d:f3:54:2c:dd:2b:2e:48:a3:88:df:b6:f0:fc:5a:79:
04:0a:d6:61:2c:4e:ae:1d:0f:e9:b1:ec:23:2a:af:5f:1b:da:
f1:25:9c:20:ac:f1:74:25:f7:7c:4a:2c:3e:20:a6:7b:e6:48:
27:e0:19:80:55:a9:d4:4e:89:49:13:b7:33:ab:d2:8c:dd:eb:
a6:90:bd:16:ae:97:e5:b2:ef:dc:d9:86:56:a4:a0:34:7f:78:
87:99:6a:bd:29:72:9b:d8:d2:f1:bc:46:6c:f7:bb:a6:4b:f0:
a3:6d:b0:3e:0b:d4:6e:4e:83:97:9b:b8:da:b6:f1:67:b6:ab:
ea:e4:99:53:74:2f:1b:a1:99:54:bb:06:b3:1d:25:6b:3f:e3:
b5:38:79:a2:c7:e6:91:e5:56:8c:98:b8:a9:bb:71:a8:bd:5c:
1a:4e:84:db:d6:2c:b8:29:51:8b:94:ca:1f:8e:3c:a8:2c:9e:
c1:ac:2d:6d:36:0a:aa:f7:33:6a:e3:1f:bc:cf:2a:b1:4a:d7:
52:5a:aa:eb:5d:36:eb:0b:07:57:e3:fd:28:ff:69:07:4e:c0:
7e:64:f9:b1:86:ec:58:d9:21:83:2a:e7:cc:ae:6c:ab:2b:6f:
ec:c3:f6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:04 2024 by rpki-client on console-fra.rpki-client.org