Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/pNcSiOMDyjljPPIyOlpHdY0obWc.roa
File: pNcSiOMDyjljPPIyOlpHdY0obWc.roa (raw, json)
Hash identifier: p9SxGr4gcBSmz0yIOiemUDVfKcqs379fPyBvUOii8nk=
Subject key identifier: A4:D7:12:88:E3:03:CA:39:63:3C:F2:32:3A:5A:47:75:8D:28:6D:67
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 01856F300B0D2B72230C86A3043B287A1CF0
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/pNcSiOMDyjljPPIyOlpHdY0obWc.roa
Signing time: Sun 01 Jan 2023 21:14:57 +0000
ROA not before: Sun 01 Jan 2023 21:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 134.169.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:0b:0d:2b:72:23:0c:86:a3:04:3b:28:7a:1c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Jan 1 21:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4d71288e303ca39633cf2323a5a47758d286d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:d3:f0:73:19:16:bd:85:82:40:a7:ba:e4:
58:40:c8:b7:bd:7b:61:e4:73:57:19:36:7b:c2:33:
db:94:35:89:b4:12:3f:50:b4:ff:39:50:30:9a:d1:
bd:67:b3:14:f6:a7:10:43:75:98:41:f2:ed:78:df:
8a:f8:81:fe:e3:96:37:95:d7:35:72:1b:0c:fe:b0:
78:42:f3:af:af:a9:e7:b7:ff:3a:7c:95:ee:cf:53:
da:52:ae:f1:36:f5:16:8b:20:2c:90:a4:5b:01:e9:
67:40:b5:d2:4b:6f:00:07:62:5b:cd:4f:50:db:1a:
22:eb:0a:53:e2:b1:7a:b4:78:57:b1:e3:d4:c0:60:
a8:e7:00:77:f4:2c:32:79:71:8a:25:62:02:f2:ee:
19:65:5b:7c:c6:b4:a6:e6:ee:e2:bc:82:44:f4:ef:
a0:b8:a3:ce:f7:2f:f4:84:da:74:c5:55:a7:ee:9d:
aa:60:72:7d:67:c1:55:13:bc:15:df:48:b9:26:89:
1c:6e:60:7a:67:7b:8f:b5:5f:6f:4b:22:8d:a9:f1:
35:6c:6f:bd:2b:36:6c:97:15:d7:22:49:62:a5:cc:
89:39:53:c5:6a:86:9d:6c:52:7b:1b:50:f3:46:a7:
f7:1b:40:58:c3:4d:23:8e:9a:98:87:c3:1e:ad:9d:
af:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D7:12:88:E3:03:CA:39:63:3C:F2:32:3A:5A:47:75:8D:28:6D:67
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/pNcSiOMDyjljPPIyOlpHdY0obWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c7:a9:06:95:50:82:03:87:a7:ba:f2:d1:5f:78:62:9c:b5:69:
15:9a:a6:63:8a:6b:89:a0:01:6b:ad:7f:50:e5:77:87:22:0b:
7e:b6:36:53:8a:06:48:fa:d7:e8:8d:1c:af:f8:99:11:79:27:
d9:16:3b:ca:dd:fd:6f:82:63:bd:56:aa:a0:69:22:33:7a:57:
fd:2b:c0:4a:c1:cd:9c:56:44:8b:15:49:df:d4:9a:4f:ed:86:
8a:19:f9:aa:73:7e:d4:b9:7e:89:26:37:95:06:38:0e:bd:f1:
37:cc:99:1f:16:d2:1d:bd:db:5c:cc:bd:40:69:3a:a8:4b:63:
7e:9d:4f:bf:ee:b8:4b:09:c3:ae:50:2b:cc:7b:0d:15:26:94:
59:12:e9:57:9c:6e:99:45:bd:65:86:25:9c:dc:83:85:2c:68:
bc:52:b4:3f:0d:a4:b4:3c:21:e9:b4:55:f9:2c:bb:b7:3a:b2:
9d:f3:21:61:85:f7:e0:57:8f:9f:16:1e:90:66:f9:48:2d:88:
b5:99:67:39:3c:04:d5:75:f3:63:25:4f:d1:18:ab:38:e8:bd:
c0:0b:a5:c7:c4:fc:77:cf:21:ed:79:70:98:4d:2a:64:37:7f:
bb:66:9e:3e:6a:84:01:c9:ee:53:fe:12:7e:cf:44:a5:d4:b7:
14:b4:90:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:24 2024 by rpki-client on console-ams.rpki-client.org