Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/j-2AgPIGvo6s0HOe6ZIohpzMnnA.roa
File: j-2AgPIGvo6s0HOe6ZIohpzMnnA.roa (raw, json)
Hash identifier: NZqCP7A8l1Y1NeX50HDGa6SGle0d80mnvx8T5dIW75w=
Subject key identifier: 8F:ED:80:80:F2:06:BE:8E:AC:D0:73:9E:E9:92:28:86:9C:CC:9E:70
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 0185720C57910BCD90709E95E1FF96D4684A
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/j-2AgPIGvo6s0HOe6ZIohpzMnnA.roa
Signing time: Mon 02 Jan 2023 10:34:49 +0000
ROA not before: Mon 02 Jan 2023 10:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34946
IP address blocks: 185.16.92.0/22 maxlen: 22
80.244.192.0/20 maxlen: 20
92.42.72.0/21 maxlen: 21
2a00:f600::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:57:91:0b:cd:90:70:9e:95:e1:ff:96:d4:68:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Jan 2 10:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fed8080f206be8eacd0739ee99228869ccc9e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:97:66:a8:72:9c:30:11:0b:de:88:ea:2e:
0a:40:6c:58:92:83:e4:7c:31:0c:d0:e4:a4:65:55:
9c:57:15:9c:88:49:e5:1d:66:a2:ac:8e:6b:7e:c1:
48:78:36:71:5f:47:94:54:83:79:f0:e5:97:dc:96:
d2:7b:49:02:8a:94:f0:38:a0:70:d2:a5:9c:0d:64:
a0:d4:c0:46:27:b0:26:4b:bb:4f:c5:43:08:f6:a1:
f9:ad:ec:7e:81:8f:14:8d:7b:d8:87:bd:d0:9f:b6:
c0:49:5e:13:03:a3:ff:38:12:b1:9e:66:dc:d1:02:
9f:c8:cf:11:e2:0f:5f:7a:4c:d2:4f:08:48:56:56:
8c:d6:3e:91:c7:e0:6f:19:14:a4:f2:ae:a7:5b:53:
4f:25:ff:19:e2:3e:ba:6b:53:ba:fc:d8:dd:93:86:
58:c8:11:a4:56:56:6a:86:42:71:c0:e9:97:d8:08:
45:9d:54:a3:3f:65:17:13:50:6a:a9:d5:0f:9c:29:
96:db:a1:6f:b8:96:85:1e:50:f2:ff:9a:66:e9:89:
bd:1d:23:7f:d5:70:ba:54:f2:dd:6e:f3:bb:3a:b8:
cc:15:70:b0:33:84:2d:db:19:98:3b:c8:08:fe:d6:
34:3d:b5:66:c2:19:fa:52:12:c9:3e:18:85:a8:76:
8c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:ED:80:80:F2:06:BE:8E:AC:D0:73:9E:E9:92:28:86:9C:CC:9E:70
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/j-2AgPIGvo6s0HOe6ZIohpzMnnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.192.0/20
92.42.72.0/21
185.16.92.0/22
IPv6:
2a00:f600::/32
Signature Algorithm: sha256WithRSAEncryption
1a:f5:7a:c9:58:4c:11:a4:ab:68:31:a4:e1:27:8e:1c:53:82:
22:2a:74:3a:12:5f:86:ae:6b:25:6a:b6:63:50:6e:24:cb:5b:
db:7c:c4:ff:22:f6:b6:08:a5:15:f4:f2:64:e7:5d:31:b1:3d:
79:84:d7:26:9b:52:9a:2c:69:a2:e1:6c:2a:1c:7f:16:92:d7:
03:f8:07:4f:2e:61:75:0c:65:80:fd:be:88:65:ef:6f:a0:27:
47:29:07:cb:c3:d2:ed:1f:c2:f8:7d:e3:f9:64:a9:48:8d:56:
bd:9b:d9:26:1e:9e:dd:8f:cf:3e:e6:80:ae:c9:9a:e8:71:99:
93:d8:6f:53:a3:50:5d:d8:2e:d5:58:94:a1:09:49:0f:13:9b:
34:25:01:eb:a5:58:4e:59:ef:16:2e:b9:22:80:17:b0:dd:e9:
a8:a9:52:92:2a:2d:0c:c0:f6:a4:61:de:88:2b:80:a0:90:dc:
4e:f5:af:1f:90:58:eb:b8:59:6c:b1:04:2d:03:1d:2b:43:a8:
04:6d:00:b5:60:fd:fa:b6:5f:0e:60:55:e7:aa:86:3f:8c:6c:
24:4e:9c:7e:fe:f4:31:e4:4d:f8:5b:c1:88:9b:1b:b8:98:45:
d5:c9:e2:ae:ea:81:de:9a:cf:9d:05:3b:c5:4b:08:6f:14:09:
6d:f0:ca:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:44 2024 by rpki-client on console-fra.rpki-client.org