Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/icjpVplgg8p8L-lsbBZasAliIJg.roa
File: icjpVplgg8p8L-lsbBZasAliIJg.roa (raw, json)
Hash identifier: /5Mgoj2VRSoWJI62KVy1qpr+/856pUFdTpWoRq9gDik=
Subject key identifier: 89:C8:E9:56:99:60:83:CA:7C:2F:E9:6C:6C:16:5A:B0:09:62:20:98
Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial: 0189F91D8241750D29FB806E64260444AF0D
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/icjpVplgg8p8L-lsbBZasAliIJg.roa
Signing time: Tue 15 Aug 2023 12:13:27 +0000
ROA not before: Tue 15 Aug 2023 12:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2852
IP address blocks: 185.8.160.0/22 maxlen: 24
78.128.128.0/17 maxlen: 24
193.84.80.0/22 maxlen: 24
195.178.64.0/19 maxlen: 24
195.113.0.0/16 maxlen: 24
2001:718::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f9:1d:82:41:75:0d:29:fb:80:6e:64:26:04:44:af:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Validity
Not Before: Aug 15 12:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89c8e956996083ca7c2fe96c6c165ab009622098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:88:13:a5:87:79:7a:4b:83:5b:be:c2:4c:2d:
59:06:14:9f:95:59:f8:4f:24:0f:cf:57:39:23:7a:
23:97:63:26:07:ce:ac:a8:45:9d:33:e6:de:6a:e6:
b8:fe:e9:c2:25:18:4e:fc:62:8d:4e:21:ec:55:1a:
8e:ac:01:e7:98:d1:b1:b0:78:9a:8d:08:03:53:9c:
25:ef:2b:73:94:30:ef:be:2a:b4:81:8b:50:5c:30:
98:78:f6:6b:30:67:9e:83:02:55:eb:c4:05:af:15:
28:99:12:52:af:53:6b:b6:f7:96:db:8a:56:89:49:
31:c8:ad:4e:05:2e:f6:0f:94:ec:47:f4:26:b2:77:
ad:20:d7:e4:c2:f0:87:90:62:b9:7e:29:ea:95:75:
36:8f:2c:10:c2:de:8a:22:bb:21:fb:ca:76:ba:ea:
60:de:cb:97:62:a1:e6:a8:8e:e7:2f:62:9e:86:2a:
e3:d3:a2:59:47:fe:79:a0:29:ac:de:74:c1:34:be:
4f:42:8b:59:ca:08:13:0e:cf:42:fe:2a:43:2d:27:
02:08:90:56:28:fb:de:8e:51:2c:85:a6:b5:4f:7a:
7f:47:12:b5:77:a8:c7:a1:56:08:10:4b:c3:7e:36:
d9:74:fd:fc:f6:71:5b:d8:f5:92:b4:da:78:96:be:
8d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C8:E9:56:99:60:83:CA:7C:2F:E9:6C:6C:16:5A:B0:09:62:20:98
X509v3 Authority Key Identifier:
keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/icjpVplgg8p8L-lsbBZasAliIJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.128.128.0/17
185.8.160.0/22
193.84.80.0/22
195.113.0.0/16
195.178.64.0/19
IPv6:
2001:718::/29
Signature Algorithm: sha256WithRSAEncryption
cf:94:5c:a2:e0:a0:ae:49:93:50:0b:bc:7c:ea:43:20:01:b1:
25:9c:4f:dd:25:d0:3e:21:15:2c:bc:7f:42:45:bc:ae:9b:65:
7a:aa:12:80:42:9a:76:91:98:b9:1d:d7:25:9c:c4:6d:ab:f8:
29:d7:c7:1a:2b:1d:56:39:80:ee:82:34:8e:44:dc:e2:a9:8a:
88:00:1e:04:f9:7a:63:b9:ec:05:cb:72:70:b0:f7:d6:3c:0b:
d4:b2:e0:04:0c:b5:7e:81:50:c0:e5:d3:15:86:4a:9a:f6:4b:
7f:8d:7f:d9:2c:a3:4e:b0:57:bd:0c:29:d0:aa:4d:e6:53:0a:
ba:71:5f:34:ed:7c:f7:4e:d0:18:23:49:99:ad:75:38:d2:8d:
0d:1f:36:1c:0c:4d:a7:c2:a1:d5:8a:77:7a:e8:08:6d:07:a2:
52:b1:ec:91:b1:3a:bf:7c:c7:27:2f:3b:1a:0f:66:b0:aa:f4:
67:ee:a6:0b:a1:f1:97:da:0b:8e:a0:38:ce:f6:0a:71:e4:10:
98:29:36:18:4f:53:d2:ba:8b:71:b9:1c:16:46:e7:6b:7a:b9:
15:50:21:ff:5d:24:59:25:97:26:65:48:40:43:57:26:6f:4b:
26:1a:06:19:16:c3:f8:26:9f:72:3a:67:1b:8a:60:6e:81:af:
f4:48:0c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:29 2024 by rpki-client on console-fra.rpki-client.org