Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/hePa4t93VQpAsEwwNwYDPVqGJmc.roa
File: hePa4t93VQpAsEwwNwYDPVqGJmc.roa (raw, json)
Hash identifier: qIfX70D/s3TuFbxFaeLudfT7FYiaMbLxC0q/C9qtohg=
Subject key identifier: 85:E3:DA:E2:DF:77:55:0A:40:B0:4C:30:37:06:03:3D:5A:86:26:67
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 01856F54A68CBFA2EBC8815E2BF16BA803C1
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/hePa4t93VQpAsEwwNwYDPVqGJmc.roa
Signing time: Sun 01 Jan 2023 21:54:56 +0000
ROA not before: Sun 01 Jan 2023 21:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9020
IP address blocks: 153.96.134.0/23 maxlen: 23
153.96.135.0/24 maxlen: 24
153.96.133.0/24 maxlen: 24
2a03:db80:3810::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:a6:8c:bf:a2:eb:c8:81:5e:2b:f1:6b:a8:03:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jan 1 21:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85e3dae2df77550a40b04c303706033d5a862667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:e3:aa:bd:05:11:f6:47:62:97:e9:3c:6b:
f0:af:4f:14:d4:c5:42:e5:76:cf:6c:ba:ff:45:f6:
d6:ed:99:92:60:f0:01:71:0d:e5:4c:61:8b:fa:18:
51:f5:14:73:cb:22:db:5b:94:dc:8e:e6:9a:dc:cc:
d1:7a:c9:92:99:ec:2c:61:da:39:d0:04:00:89:a7:
4d:0d:7a:c6:20:cc:ce:d8:13:94:c3:01:05:07:0b:
4b:dd:34:7e:5c:51:f0:22:51:63:26:56:c6:e7:53:
7d:0b:96:f2:53:9f:bb:7a:5d:21:2e:89:f9:ac:53:
c0:32:2b:cd:77:c3:b2:4a:5a:f2:0d:1d:a7:60:1b:
50:85:ad:5e:40:38:2a:c0:c1:b4:d1:b6:52:0b:79:
47:fb:75:16:5c:e0:9f:c5:9e:fe:80:73:f2:2c:77:
a3:6c:e3:04:7a:94:cc:76:89:71:3c:90:0d:29:35:
8e:3c:e1:99:bc:d5:b4:49:f1:5b:c3:6e:e2:99:fb:
15:89:7c:07:50:91:51:48:e6:e0:29:2d:c1:79:5a:
f4:b5:f3:2f:79:f0:0e:42:38:8a:3d:88:72:05:14:
30:f1:78:0e:60:2b:36:ad:fd:df:4f:37:32:c4:c9:
95:c5:c5:18:ea:f9:2b:98:c6:68:60:85:81:c4:ca:
fa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E3:DA:E2:DF:77:55:0A:40:B0:4C:30:37:06:03:3D:5A:86:26:67
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/hePa4t93VQpAsEwwNwYDPVqGJmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.96.133.0-153.96.135.255
IPv6:
2a03:db80:3810::/48
Signature Algorithm: sha256WithRSAEncryption
38:06:89:9a:60:70:28:a6:5d:cb:8c:8e:db:bb:07:2b:94:83:
2b:cf:7c:dc:1e:33:a3:09:38:77:bd:3a:6e:88:ab:f9:29:f1:
91:da:82:ab:c0:10:c7:6b:f2:04:5e:de:59:84:71:75:e7:d0:
4f:17:e8:e9:cd:53:59:4f:ca:87:c6:36:92:23:1b:59:2a:e3:
34:6e:2a:bf:44:d4:db:bd:8b:86:84:9b:84:d4:3e:83:89:10:
57:46:56:37:df:87:62:69:27:3d:44:68:9b:48:e9:19:3c:9c:
2b:65:66:94:32:01:94:7b:72:79:52:2b:5f:be:46:6e:e2:f4:
86:9a:77:3c:a3:27:57:88:c6:50:f3:83:05:7b:d5:74:e5:88:
7d:bd:ff:7c:b9:0c:55:ac:aa:38:b7:66:26:b9:eb:1f:9a:76:
28:9b:f7:6c:95:66:15:48:6a:6a:03:82:c3:07:31:74:45:71:
e4:6c:d2:9a:1d:dd:e2:14:42:74:83:aa:d4:e7:d5:e2:5e:2a:
03:25:41:64:f2:55:3c:20:36:9a:f7:28:cf:b9:0b:37:8e:cd:
5b:d7:4c:61:ea:4d:72:4b:94:c4:ba:5a:d4:bb:d3:7c:6e:f8:
54:ea:5c:a0:e1:08:91:00:52:21:61:85:e5:26:de:ae:97:bb:
e6:26:aa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:59 2024 by rpki-client on console-fra.rpki-client.org