Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/AukH51E1b5-N_R7ucQ4PZFKRTyo.roa
File: AukH51E1b5-N_R7ucQ4PZFKRTyo.roa (raw, json)
Hash identifier: /ySzXR5gLp76iNRavbAf7bEA7KEW2HfAkiLp6hBlyD8=
Subject key identifier: 02:E9:07:E7:51:35:6F:9F:8D:FD:1E:EE:71:0E:0F:64:52:91:4F:2A
Certificate issuer: /CN=bda61043542485096b0df4351cc0da977f3770dd
Certificate serial: 01856FC29341104B38919AF9C2BFCCBFA98D
Authority key identifier: BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/AukH51E1b5-N_R7ucQ4PZFKRTyo.roa
Signing time: Sun 01 Jan 2023 23:55:00 +0000
ROA not before: Sun 01 Jan 2023 23:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2852
IP address blocks: 147.32.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:93:41:10:4b:38:91:9a:f9:c2:bf:cc:bf:a9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda61043542485096b0df4351cc0da977f3770dd
Validity
Not Before: Jan 1 23:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02e907e751356f9f8dfd1eee710e0f6452914f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:4b:a5:cf:61:e9:f3:08:20:28:a6:21:44:
69:1d:94:a9:5d:10:69:90:7d:c6:35:0f:bf:b7:fd:
7e:1c:9b:be:e5:13:b4:72:7f:5a:18:7f:b6:71:6f:
3b:43:52:ff:22:7d:da:e1:a3:9f:dc:07:72:7d:55:
3f:fd:2a:5b:19:1a:c0:13:2d:40:7a:64:23:bc:e7:
06:d8:58:dd:b2:c6:9f:b9:f2:df:97:87:e1:26:a2:
8b:fb:75:f9:42:cb:57:7a:2f:9e:49:3d:11:a0:ce:
45:64:8c:4c:a5:46:f8:13:35:a4:8a:29:4a:b1:c8:
20:81:db:3a:07:f8:00:18:90:3f:eb:ca:42:bf:48:
16:31:eb:80:d1:6a:fa:72:e0:e3:61:98:0a:c7:54:
34:d1:2c:41:17:6f:7c:6e:99:f1:e4:15:bb:f1:51:
19:12:87:29:67:96:32:e3:70:c7:c7:a5:a0:8b:a0:
39:2f:da:94:d8:e4:cc:b0:d1:f1:52:36:df:90:bd:
6e:1f:4f:78:0e:a4:36:94:c0:19:6d:fc:a8:93:f1:
50:0c:07:b5:73:97:ce:b3:9d:94:cc:29:d4:7b:0a:
bf:b1:78:fe:35:fe:b9:c7:6a:f9:b7:16:c8:c6:2c:
5d:ff:8d:dc:2b:f0:f1:af:b6:2e:59:cd:9b:6f:3f:
bf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E9:07:E7:51:35:6F:9F:8D:FD:1E:EE:71:0E:0F:64:52:91:4F:2A
X509v3 Authority Key Identifier:
keyid:BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/AukH51E1b5-N_R7ucQ4PZFKRTyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.32.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:8c:a9:80:15:d9:bc:20:2e:93:a9:28:68:5d:5e:1a:83:01:
e1:a5:3b:f6:e2:99:18:25:fb:35:58:b1:cf:f2:7f:1b:f1:42:
e8:62:bd:5c:e3:3d:36:6f:d1:18:f0:be:a1:06:8f:a1:8e:19:
8b:ee:b9:cc:da:23:71:cd:ba:a8:43:6f:6d:00:05:0e:0e:06:
a2:dc:b2:30:75:bc:33:88:de:fe:bf:e4:69:f2:0a:d1:ed:04:
2f:b2:5a:7d:2d:f7:dd:f5:02:8b:1b:75:54:52:ca:f6:a2:be:
30:0c:0f:eb:e3:a9:60:06:ed:e8:21:f1:30:b4:b0:4a:ac:c7:
d5:77:2e:14:8d:ff:ac:e2:ee:c3:44:5f:63:81:d6:84:65:7b:
32:b3:77:c6:9b:b6:44:fe:88:82:84:2e:28:a8:16:fd:a3:df:
2e:64:1f:2f:a9:56:2d:50:97:75:bd:1a:1c:55:c8:f5:df:81:
dd:0e:ce:03:2c:fe:ef:3e:28:52:8e:d5:89:df:5b:73:fc:0f:
08:af:cc:72:8a:62:fb:82:eb:fd:9e:9e:04:f0:0c:4e:96:0b:
1a:33:a1:52:6c:53:fb:91:01:0f:80:fe:e5:2e:52:d2:46:73:
5d:92:e6:6a:ee:34:cc:c8:f0:4b:85:5c:dc:54:37:ab:0d:b1:
84:81:c2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:53 2024 by rpki-client on console-ams.rpki-client.org