Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/gjfAcNaVQsLfW5SFWjyQUTzF1EQ.roa
File: gjfAcNaVQsLfW5SFWjyQUTzF1EQ.roa (raw, json)
Hash identifier: fHxuj9JqaDKsGcGRHanOXpyc+HSvyLnduvQGpcrCQ1o=
Subject key identifier: 82:37:C0:70:D6:95:42:C2:DF:5B:94:85:5A:3C:90:51:3C:C5:D4:44
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0193074CEAAD06242220EC7478DA23586E38
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/gjfAcNaVQsLfW5SFWjyQUTzF1EQ.roa
Signing time: Thu 07 Nov 2024 15:45:01 +0000
ROA not before: Thu 07 Nov 2024 15:45:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 81.199.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 14:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:07:4c:ea:ad:06:24:22:20:ec:74:78:da:23:58:6e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Nov 7 15:45:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8237c070d69542c2df5b94855a3c90513cc5d444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:46:76:2c:39:52:d2:cc:e3:98:a6:6f:d8:
85:7a:0f:d8:18:5c:aa:83:4b:b1:7c:d7:4d:b5:1d:
a5:af:fe:a1:51:c6:97:76:0a:a0:d1:ce:67:f6:e5:
f9:f8:9f:79:2d:c2:16:83:d1:35:b3:60:b6:2a:5b:
c8:98:37:83:22:67:53:2f:9f:29:9b:93:1a:18:55:
bb:e5:96:b1:63:0f:22:f6:a9:88:b4:5b:9a:14:cd:
1e:28:d1:7f:16:6c:4e:4d:52:37:57:ce:f5:b4:bb:
6f:25:a2:cd:19:7c:ef:e1:4b:06:76:10:22:57:19:
7d:a6:98:f2:80:83:78:56:c4:95:10:77:b9:56:7c:
d9:db:93:c3:d5:0d:e6:97:b4:d3:d0:f5:10:cd:3b:
21:5f:e9:dd:76:7c:b4:12:b8:48:3b:78:fd:bd:32:
41:c8:df:5d:e5:8c:37:07:47:22:71:b1:47:73:d6:
13:e8:a3:21:67:68:94:f1:5a:d0:fc:02:47:3c:e4:
16:3c:d9:58:bb:f8:19:33:df:a0:ea:68:a5:ce:28:
c7:04:4a:7d:6f:a0:36:6e:ba:ac:a2:f3:55:90:e1:
1a:1b:44:c8:ae:3d:5a:15:fd:0c:84:77:d6:7f:fa:
dc:43:e7:67:22:0b:25:c8:43:68:3e:45:69:58:15:
4f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:37:C0:70:D6:95:42:C2:DF:5B:94:85:5A:3C:90:51:3C:C5:D4:44
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/gjfAcNaVQsLfW5SFWjyQUTzF1EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.29.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:6f:5a:35:35:d3:54:17:d9:85:1c:1c:c1:87:47:fc:b1:0b:
70:e9:80:f8:8e:3d:f4:3a:67:27:0b:94:99:da:2f:7b:0c:16:
2a:29:6d:f8:86:db:ec:b3:e7:96:9d:9d:a0:ff:bb:e2:92:d2:
39:ad:fb:5b:36:e5:1b:28:90:25:ef:35:38:3a:f7:3d:fc:a1:
ba:6a:04:c6:68:51:3c:44:5d:a0:77:67:23:58:a1:81:ab:e9:
e3:f7:25:7d:77:23:18:61:91:56:cb:0a:ca:59:09:c7:27:ee:
50:f4:9e:42:86:c7:11:67:3e:b9:49:4d:1b:ea:48:8e:ef:6b:
2c:4c:87:fc:2e:ad:87:49:82:24:3d:33:09:3d:22:2f:44:78:
12:92:7a:cd:c5:61:6c:1f:da:51:5f:22:75:5e:e0:de:47:0a:
f4:62:ae:1f:b2:9f:bc:32:d5:75:ab:20:3f:c2:e0:8b:c8:ed:
09:7e:c8:1b:29:60:95:00:74:5e:77:91:a3:e8:b5:7d:72:e8:
47:05:10:e2:ec:da:99:4a:f4:3c:5f:0d:1f:48:b5:5d:ec:05:
b9:21:a7:f4:60:bf:71:67:e1:b7:f7:5f:60:62:88:db:57:e4:
03:19:da:49:7a:5a:6a:ae:45:a4:07:65:d0:46:0f:c6:41:88:
c5:5c:f6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 17:30:19 2024 by rpki-client on console-fra.rpki-client.org