Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/4Jam0Wf0TWO1Sy3uxETWQHo5C30.roa
File: 4Jam0Wf0TWO1Sy3uxETWQHo5C30.roa (raw, json)
Hash identifier: WbHt5qhh9WKbgUWgknmaT86eMW0VvI7+OQBWG8sdCws=
Subject key identifier: E0:96:A6:D1:67:F4:4D:63:B5:4B:2D:EE:C4:44:D6:40:7A:39:0B:7D
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 01856F5DC3D21FC72D4E85A2F7AD1A5181F5
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/4Jam0Wf0TWO1Sy3uxETWQHo5C30.roa
Signing time: Sun 01 Jan 2023 22:04:53 +0000
ROA not before: Sun 01 Jan 2023 22:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60992
IP address blocks: 83.96.29.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c3:d2:1f:c7:2d:4e:85:a2:f7:ad:1a:51:81:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Jan 1 22:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e096a6d167f44d63b54b2deec444d6407a390b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:76:83:e5:96:4f:98:3f:d2:93:40:a2:63:
de:f4:e0:1a:dc:0b:5d:3d:6a:d7:80:6b:99:4f:a9:
5d:92:5d:89:50:97:90:9d:a0:77:2b:71:cd:7a:51:
4c:47:9e:b8:58:de:d5:8c:4f:cf:59:6d:d8:51:d1:
13:12:eb:9e:cd:c1:9d:c0:49:c2:24:09:7d:88:6f:
e4:32:49:86:f8:34:dd:74:c4:0f:8e:51:04:2f:f4:
7e:55:b6:c1:2d:ae:68:fd:18:16:0a:18:3f:1b:c6:
96:f2:23:df:c5:59:5a:5d:9c:2a:29:b8:f7:69:91:
e9:7f:43:0a:69:ab:6e:07:f8:c7:56:0c:9a:54:5f:
d9:9f:b2:c8:b1:ae:3d:5c:af:85:a5:48:8e:92:3f:
9b:93:7f:ba:ff:b7:8a:20:7c:5c:9e:6d:18:1b:cf:
bc:f2:a1:e4:c0:35:5e:63:9e:b5:32:16:7e:94:af:
08:97:82:c4:7a:01:66:dc:6f:d3:3c:9b:cb:f3:99:
10:bd:51:bf:fb:73:e1:8f:4a:a5:cd:be:ca:51:f9:
b3:5a:4f:dd:9b:9f:96:36:fd:87:af:97:95:cf:82:
51:26:e3:f0:7e:0c:dc:38:d4:fb:ab:80:22:5b:73:
8b:28:9b:05:5f:33:b7:ef:af:fd:8f:da:50:77:a6:
a3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:96:A6:D1:67:F4:4D:63:B5:4B:2D:EE:C4:44:D6:40:7A:39:0B:7D
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/4Jam0Wf0TWO1Sy3uxETWQHo5C30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.96.29.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:70:4a:10:2d:08:86:d8:55:5a:08:6b:b6:5b:2a:a7:b3:59:
2e:4f:15:c7:25:ac:44:fc:c6:62:34:55:60:2d:9b:de:96:a8:
c2:64:2c:d3:24:75:73:b6:b6:ad:f6:e9:a4:15:a3:b7:37:45:
b4:64:fb:ba:72:52:1b:7f:ed:2c:99:5c:9b:ad:8e:ed:07:12:
63:54:96:27:66:3d:f6:69:2b:46:41:ac:6d:3b:99:3c:c2:9f:
e1:8d:3a:f8:b9:e0:1a:d7:c5:db:1a:fa:0d:cf:f0:b8:f4:1f:
35:f7:23:c3:d0:f2:e2:33:92:1a:a9:a3:80:b9:18:3b:1f:35:
21:b2:b2:d2:81:98:ee:a3:f0:c1:7d:22:eb:8b:52:b2:e8:1e:
0a:52:74:39:d3:09:94:04:f3:f9:17:28:0d:ed:5b:c3:e5:16:
2c:d4:80:4c:2a:82:05:ab:3c:22:e0:e0:eb:15:2a:6f:4c:3d:
24:88:5d:07:e8:09:fd:41:5e:18:84:54:8d:25:95:98:c8:17:
be:2f:9d:0c:f9:f9:b5:45:a1:7c:6c:b4:ba:f0:ab:98:1c:26:
10:33:03:ea:4b:ae:65:98:46:ab:d3:82:1c:91:ab:64:51:38:
af:21:ca:4e:8e:38:cb:f0:44:7e:71:df:90:57:30:4e:dc:8f:
6a:8c:20:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:57 2024 by rpki-client on console-fra.rpki-client.org