Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7aHVJX9nydQycWTrlyhW2jUv4A0.roa
File: 7aHVJX9nydQycWTrlyhW2jUv4A0.roa (raw, json)
Hash identifier: XlfJnLtENRSnAD4nWd4I7LVoByW8m4jD4Q4FiFzlsGE=
Subject key identifier: ED:A1:D5:25:7F:67:C9:D4:32:71:64:EB:97:28:56:DA:35:2F:E0:0D
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0185BB46DDA796849F7A149D2786B28F72A1
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7aHVJX9nydQycWTrlyhW2jUv4A0.roa
Signing time: Mon 16 Jan 2023 15:51:01 +0000
ROA not before: Mon 16 Jan 2023 15:51:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 188.255.215.0/24 maxlen: 24
188.255.141.0/24 maxlen: 24
212.69.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 May 2023 20:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:46:dd:a7:96:84:9f:7a:14:9d:27:86:b2:8f:72:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 16 15:51:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eda1d5257f67c9d4327164eb972856da352fe00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fb:cc:23:6a:1f:54:20:1a:7a:a9:61:9f:e6:
a5:d7:88:26:a3:76:18:52:b3:eb:c3:84:e3:03:67:
23:16:f5:d3:98:1d:28:de:cd:e4:28:f1:a1:3c:8f:
d0:ae:93:18:67:fa:96:e8:ef:8e:a3:76:59:c2:c0:
35:56:7f:ff:ba:8d:b6:1e:f7:ed:d3:99:83:5c:81:
f0:09:ca:5c:25:5a:ec:f0:b0:76:d2:85:db:18:77:
87:82:19:f3:5b:cb:2d:c4:f3:77:99:c1:fb:a7:85:
0c:52:12:01:8b:64:6b:0c:7e:3e:67:db:f5:46:ad:
64:20:1e:c8:01:1d:79:14:7f:09:b0:8e:c6:90:2d:
20:47:37:95:8f:86:7c:47:cf:db:4f:a6:be:ba:c3:
b8:ad:a2:e0:a4:1b:c8:81:16:ca:15:d3:d9:dc:14:
c7:98:f9:a1:b8:11:30:f5:9f:83:01:f8:c6:b0:92:
b0:97:21:24:c4:68:ae:ce:1a:be:6a:c9:cb:cb:5b:
6b:72:fb:74:c7:4c:ad:df:fd:08:82:1b:36:1c:fa:
28:68:dd:29:1f:7c:6f:82:cf:87:8d:1e:f3:ef:bf:
28:ec:4c:90:67:f0:65:ee:97:31:ae:d9:db:b2:cc:
c9:48:b6:cb:d7:93:4a:ff:52:72:38:eb:d6:62:47:
93:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A1:D5:25:7F:67:C9:D4:32:71:64:EB:97:28:56:DA:35:2F:E0:0D
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7aHVJX9nydQycWTrlyhW2jUv4A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.141.0/24
188.255.215.0/24
212.69.10.0/24
Signature Algorithm: sha256WithRSAEncryption
29:03:3e:10:9c:4d:bc:47:3b:49:70:a7:c2:72:89:9b:76:ca:
fb:89:92:5a:48:7e:9f:b6:dd:d5:b7:59:09:fa:1e:37:8d:86:
39:a6:b5:b4:1c:c4:8e:15:2a:89:be:6d:d0:13:83:0e:67:70:
12:9a:e6:1c:7a:f0:f3:d2:32:06:28:e9:21:e9:a5:f0:27:96:
94:89:19:e4:ba:04:b0:51:f5:c4:63:07:04:86:73:59:1e:6b:
27:56:d8:10:dd:00:17:02:83:b1:a1:5f:eb:ac:68:05:f4:7b:
f8:e0:f7:2f:7a:1d:fd:96:4c:f5:2a:bb:bb:ba:02:4d:ee:82:
7f:e1:c0:0f:3c:d0:89:63:07:0c:6a:d3:6e:33:e5:8a:67:e9:
ca:52:81:56:51:4b:7b:45:d7:1e:db:98:f2:4f:36:f6:c5:77:
68:48:58:b3:8d:7a:5f:ae:42:31:cf:be:8f:09:02:07:5b:71:
b3:06:6d:f9:46:ab:9a:ee:4c:0e:8c:fd:ce:3d:3d:0a:34:39:
cd:cd:27:85:8f:4c:65:d7:d8:2f:26:b2:9a:f5:50:92:db:b7:
db:1e:eb:63:95:61:2d:7e:da:15:d8:48:d8:f2:ce:2d:d7:7b:
cb:cc:ed:bf:fb:99:f3:e3:27:de:0a:2a:05:aa:f4:26:fc:79:
cd:98:e0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:03 2024 by rpki-client on console-ams.rpki-client.org