Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/IVyq6KUxmZpvx0goD1FCtX-IoMc.roa
File: IVyq6KUxmZpvx0goD1FCtX-IoMc.roa (raw, json)
Hash identifier: WxMNyVt+MHHQ62OZf9K+xvQE5KkxnR8ox5TXPVCI640=
Subject key identifier: 21:5C:AA:E8:A5:31:99:9A:6F:C7:48:28:0F:51:42:B5:7F:88:A0:C7
Certificate issuer: /CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Certificate serial: 0185719E7DEB4B7969297D5A4619E071E692
Authority key identifier: 6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/IVyq6KUxmZpvx0goD1FCtX-IoMc.roa
Signing time: Mon 02 Jan 2023 08:34:50 +0000
ROA not before: Mon 02 Jan 2023 08:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2108
IP address blocks: 82.132.0.0/17 maxlen: 17
161.53.0.0/16 maxlen: 16
31.147.0.0/16 maxlen: 16
193.198.0.0/16 maxlen: 16
2001:b68::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:7d:eb:4b:79:69:29:7d:5a:46:19:e0:71:e6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Validity
Not Before: Jan 2 08:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=215caae8a531999a6fc748280f5142b57f88a0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:5d:b6:fd:51:63:ff:12:5c:10:a0:2c:30:
4d:d4:bf:a8:4e:7a:01:9e:21:fa:6d:87:dc:17:12:
73:75:10:35:75:58:75:3e:1a:63:59:bf:24:d6:31:
af:62:ef:f7:b1:92:3b:75:29:8a:99:09:b2:37:d4:
72:33:3d:64:23:3f:75:39:ff:2a:0e:cc:1a:1a:57:
1b:67:f2:b2:24:70:fa:91:ef:aa:53:85:42:0e:98:
97:0a:ff:76:d8:12:ad:79:7b:ef:e5:23:c0:26:26:
ae:a0:f2:a4:83:4b:10:e9:d0:38:0b:75:20:f2:db:
bf:a7:7d:3a:5c:b2:23:06:ea:94:33:44:6f:ce:c0:
80:ab:d1:ff:35:df:db:72:18:d6:e7:05:5f:be:27:
7a:03:30:7e:eb:20:18:03:e2:87:8e:34:e5:5b:0d:
a2:24:11:c4:c5:e0:52:73:37:cb:a2:65:76:f0:bc:
36:05:da:7b:eb:a2:43:63:e8:d8:cb:26:a8:10:bf:
05:24:6c:c3:6f:a8:9f:bb:3b:a9:5f:bd:f8:75:49:
85:cb:27:e7:0a:a9:02:61:99:78:3e:c2:f7:af:28:
ff:1f:9c:80:4f:a8:d9:9f:79:23:e9:5c:6d:fc:87:
b7:66:9f:f1:c9:a7:58:97:58:91:05:18:83:1a:71:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5C:AA:E8:A5:31:99:9A:6F:C7:48:28:0F:51:42:B5:7F:88:A0:C7
X509v3 Authority Key Identifier:
keyid:6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/IVyq6KUxmZpvx0goD1FCtX-IoMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.147.0.0/16
82.132.0.0/17
161.53.0.0/16
193.198.0.0/16
IPv6:
2001:b68::/32
Signature Algorithm: sha256WithRSAEncryption
98:72:01:ac:26:37:a8:f6:35:d6:34:83:ec:88:31:97:09:38:
ed:dd:9d:87:46:9a:27:1a:bc:c5:34:af:89:d0:cc:54:8f:a4:
69:bd:bc:a1:db:4d:cf:e9:12:f2:49:1b:8f:5e:fa:90:40:ea:
69:41:52:f8:7d:9f:3e:f3:b7:e4:fd:a8:f8:30:b5:c8:8b:2f:
a0:a6:6d:6d:00:db:91:1b:51:e8:00:04:e3:d0:31:f8:8a:26:
2b:fa:de:0c:1b:6f:3e:10:23:90:f6:77:dc:de:70:bf:06:d2:
8b:ad:6b:74:9c:2d:06:9f:9c:bb:2b:16:eb:a0:b1:be:c3:43:
f2:1e:27:f8:18:f0:02:d5:1c:a1:71:66:75:7a:09:0e:7d:f7:
34:92:cb:af:a4:3e:f4:54:3b:a1:41:ac:c2:bf:8f:6c:bf:1f:
58:58:37:81:38:ea:6a:98:5c:50:f7:73:d5:2d:54:3c:86:36:
47:f8:bb:28:44:3e:f2:2a:c0:08:bd:aa:6c:0f:9f:90:de:e1:
56:44:cc:d8:bf:3b:e0:f7:4f:1d:85:d0:51:fc:85:08:5e:31:
df:15:7c:f8:a1:40:4f:b7:cb:8a:64:f5:ba:56:ce:84:0f:a7:
aa:d6:f9:99:2c:45:34:46:48:2f:b7:25:65:6b:9b:06:1a:30:
de:96:33:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:23 2024 by rpki-client on console-ams.rpki-client.org