Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/OUi7kWGx1qv2lfBFQg7olIDbQ-c.roa
File: OUi7kWGx1qv2lfBFQg7olIDbQ-c.roa (raw, json)
Hash identifier: awE4Lu4UmGcwCnCjMqArf/iQHFXPq7+msss6PKtGngA=
Subject key identifier: 39:48:BB:91:61:B1:D6:AB:F6:95:F0:45:42:0E:E8:94:80:DB:43:E7
Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672
Certificate serial: 01856F14CFDAF6C8C33141F2A92D9362ACD5
Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/OUi7kWGx1qv2lfBFQg7olIDbQ-c.roa
Signing time: Sun 01 Jan 2023 20:45:12 +0000
ROA not before: Sun 01 Jan 2023 20:45:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25462
IP address blocks: 87.245.216.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:cf:da:f6:c8:c3:31:41:f2:a9:2d:93:62:ac:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672
Validity
Not Before: Jan 1 20:45:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3948bb9161b1d6abf695f045420ee89480db43e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a8:e9:8b:42:4a:fa:2b:af:b0:2c:d4:fc:2e:
c0:34:c7:bf:a9:eb:e4:13:e7:47:40:19:34:a2:f2:
72:e2:2f:48:10:c9:48:75:48:fe:f0:8e:eb:5f:48:
fc:3a:bc:db:3d:c5:4e:2a:49:87:3e:42:68:be:45:
5c:7e:7c:55:9a:e6:1d:92:8e:89:af:ae:11:c9:b5:
35:6f:30:e4:68:e0:5e:62:65:95:bc:a2:5e:51:bf:
0e:d8:63:56:b4:35:8a:b4:05:88:c7:19:f3:32:9a:
82:87:de:1d:9f:4d:42:50:50:42:e0:a0:9c:b1:17:
96:be:6c:de:7d:a0:98:6d:30:47:f9:70:19:59:88:
bd:fa:9f:00:b5:e0:06:62:5b:63:24:28:cd:fe:bb:
8e:71:e8:99:57:38:ce:78:53:6f:e0:de:33:f1:b9:
29:72:db:66:b7:b5:86:bf:d2:d1:c4:e0:e2:7f:07:
1a:e1:37:b6:eb:77:23:56:77:e8:2c:a6:a9:bd:29:
88:6b:40:02:15:04:0d:d6:85:9f:87:31:d3:91:49:
1e:9a:0e:c0:f8:7a:8e:2f:9e:94:58:10:cb:2e:ba:
fc:69:5b:7f:2e:ec:3d:2f:8f:d4:68:07:76:11:11:
4c:e6:a5:2d:67:4c:49:55:13:72:a9:55:50:c3:f9:
98:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:48:BB:91:61:B1:D6:AB:F6:95:F0:45:42:0E:E8:94:80:DB:43:E7
X509v3 Authority Key Identifier:
keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/OUi7kWGx1qv2lfBFQg7olIDbQ-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.245.216.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:bf:a3:e1:db:8b:2e:c4:36:95:96:15:4d:bd:ce:f2:37:e6:
d8:8a:3f:fd:6d:2a:ac:7b:4a:ba:99:c9:20:aa:39:8d:a1:34:
41:11:d8:dd:a3:1f:62:68:db:e8:fa:76:ab:86:7c:13:e9:bc:
4e:d6:76:f6:66:bf:61:e5:62:2e:31:b6:a4:a3:71:9b:ed:43:
4e:8b:26:b6:da:f7:dc:4a:59:4d:35:cf:e5:21:61:b7:a8:3a:
e2:7b:12:d9:7b:2d:59:a0:62:b9:34:35:a1:39:22:87:73:7d:
a0:f9:83:c4:ee:15:10:16:10:1c:e0:67:6a:27:7b:45:06:f9:
ab:7d:db:47:4c:d5:ab:ce:7b:71:cb:25:b4:93:a2:a5:08:6a:
ba:d4:ee:2e:b8:bb:36:7a:43:51:e3:34:39:03:42:22:31:89:
2f:89:07:5b:4e:fa:fd:1c:6a:af:e4:2a:6c:5f:13:a3:32:d8:
01:1a:c7:1b:7c:99:50:a5:87:56:90:ba:49:07:6b:75:b3:2c:
62:e3:c7:94:48:0a:e2:7f:b9:fb:5d:0b:9d:f6:e2:0b:8d:b1:
0f:b1:96:19:36:18:c4:98:f6:fb:56:aa:93:ef:2b:3e:0c:6d:
7d:55:87:73:16:af:54:24:70:9b:64:1b:3d:c8:8f:e8:f2:03:
d9:d6:88:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:09 2024 by rpki-client on console-ams.rpki-client.org