Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/1-ig8E18nD1lUxPSZJDezRK4OTu4.roa
File: 1-ig8E18nD1lUxPSZJDezRK4OTu4.roa (raw, json)
Hash identifier: qc2ZPW6WQtbcDtMICgXjHo2OQ3wxYV5ENrqxKkMh4EA=
Subject key identifier: FA:28:3C:13:5F:27:0F:59:54:C4:F4:99:24:37:B3:44:AE:0E:4E:EE
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 01856F54AA7D822E6772199AD8AF7EFA6AE0
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/1-ig8E18nD1lUxPSZJDezRK4OTu4.roa
Signing time: Sun 01 Jan 2023 21:54:57 +0000
ROA not before: Sun 01 Jan 2023 21:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16097
IP address blocks: 153.96.84.0/23 maxlen: 23
153.96.86.0/24 maxlen: 24
153.96.132.0/24 maxlen: 24
129.233.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Apr 2023 12:36:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:aa:7d:82:2e:67:72:19:9a:d8:af:7e:fa:6a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jan 1 21:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa283c135f270f5954c4f4992437b344ae0e4eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6b:c2:d5:5e:c2:46:95:b0:c4:ea:8e:2b:ad:
b6:3c:dd:a8:ca:6b:d6:0a:38:fd:4c:af:fc:34:ce:
71:a4:3a:3e:09:85:85:11:66:10:9c:89:1c:fe:9b:
f3:92:9c:ea:88:26:de:4e:af:c7:d0:ad:d2:6f:27:
ea:8b:6e:43:2a:61:e7:e6:34:0d:02:2b:dc:ae:98:
5f:1b:29:69:e7:60:98:d3:91:23:7b:63:36:a5:6e:
02:82:0e:10:74:bc:38:b9:98:3f:8a:65:ed:15:e9:
0b:61:a5:7a:74:f2:ac:38:4c:51:20:21:b5:0f:db:
f2:d7:e5:a3:12:93:88:44:c6:9b:23:b7:9d:a1:a8:
7b:32:4c:61:68:12:ae:7a:37:e9:e4:a3:3b:9c:65:
3a:4e:4c:15:5a:07:bb:12:74:51:37:d4:8a:b6:32:
18:80:e7:f4:cc:11:83:12:1f:1d:7e:da:65:66:be:
8e:80:db:1a:1b:dc:e1:67:f8:c7:3a:f9:24:c4:a0:
71:e6:cc:6b:a6:3c:f3:1b:23:46:cd:93:97:9b:33:
eb:e4:25:42:10:f8:c8:6d:1f:c1:0d:e9:a1:e6:d8:
17:4d:85:4a:8f:7c:98:84:0a:53:d7:07:ff:7b:25:
d9:45:f2:94:b8:ba:eb:8e:32:db:9e:78:96:5e:18:
62:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:28:3C:13:5F:27:0F:59:54:C4:F4:99:24:37:B3:44:AE:0E:4E:EE
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/1-ig8E18nD1lUxPSZJDezRK4OTu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.233.216.0/24
153.96.84.0-153.96.86.255
153.96.132.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:3f:30:cd:e9:25:49:77:e3:58:35:69:e9:f6:86:55:b5:f4:
97:92:c7:2f:96:c5:52:5b:27:10:4e:60:c4:0c:cd:67:f9:f3:
a8:21:76:b5:a8:47:f9:d0:3c:f1:21:16:da:ce:0a:d0:91:08:
dd:d9:d9:6d:84:e6:79:8d:a8:68:02:a2:bd:d6:e4:d6:f2:e5:
8c:45:b3:a0:2c:01:94:06:64:a0:6c:17:f0:c3:5b:af:a6:7e:
e3:21:9e:47:5b:e7:fe:b8:a7:35:bc:4d:3c:4c:82:42:bb:d7:
2d:3b:ba:68:6f:de:d1:83:74:0e:ef:a6:37:dd:43:81:bc:01:
76:00:75:a7:e0:74:7b:55:19:2d:22:ca:c1:65:f0:ed:9f:1c:
c1:11:37:52:85:0c:c3:58:3b:b5:17:60:a1:a1:85:a6:e4:8a:
5d:a4:f6:6b:e4:7a:f3:33:35:0a:14:56:63:cd:c6:5f:1a:fa:
7e:06:c1:ab:b9:87:a9:4f:70:95:b6:5d:bf:1a:b4:fc:a6:21:
5b:75:28:c3:37:96:63:d4:95:d6:fe:70:37:22:d7:4d:59:4d:
34:0b:0d:81:a1:6c:8b:9d:08:53:81:f6:7f:f0:c1:00:03:7e:
fe:e4:65:40:f5:d9:9e:81:3a:0a:5a:09:ad:16:9a:68:f2:7f:
70:e8:01:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:59 2024 by rpki-client on console-fra.rpki-client.org