Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/aOgPcBoJL-XNl-ll9tN7O2EBG-Y.roa
File: aOgPcBoJL-XNl-ll9tN7O2EBG-Y.roa (raw, json)
Hash identifier: 8LENOOAhWb5lICpkYkNqnPw3Hn6caeyF33eiaxbpjig=
Subject key identifier: 68:E8:0F:70:1A:09:2F:E5:CD:97:E9:65:F6:D3:7B:3B:61:01:1B:E6
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 01856F9DC2A88313BFA0DA849D3BFE9D3396
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/aOgPcBoJL-XNl-ll9tN7O2EBG-Y.roa
Signing time: Sun 01 Jan 2023 23:14:48 +0000
ROA not before: Sun 01 Jan 2023 23:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48313
IP address blocks: 213.14.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:c2:a8:83:13:bf:a0:da:84:9d:3b:fe:9d:33:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 23:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68e80f701a092fe5cd97e965f6d37b3b61011be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5d:c0:26:ba:fc:ef:34:7c:ca:b5:7d:a0:bd:
7e:d5:eb:a3:9f:79:28:16:fb:fc:97:d6:57:a5:dd:
9a:27:33:cc:cb:14:ea:21:f4:69:4f:ec:48:80:43:
ca:b8:eb:bc:f1:6e:4f:2c:a5:51:3b:76:32:41:3d:
1c:0a:32:ae:cb:09:9b:9a:73:7c:02:ba:02:e3:14:
46:41:99:e9:7a:65:e8:0f:95:37:a3:f9:8e:48:29:
3b:53:f5:57:6f:71:43:1e:9b:80:c7:db:f0:f6:fe:
10:71:90:64:77:1d:27:be:6a:43:81:c3:1d:39:62:
51:d7:78:4b:6b:b4:6b:df:f7:97:26:7b:4e:43:1a:
44:a5:fe:48:77:8f:b3:5f:77:5f:0f:d6:e4:83:2b:
85:04:e8:3d:46:cf:b9:b9:53:38:1b:d9:28:27:c6:
36:d2:ab:e5:4f:0a:a1:16:14:10:09:87:18:88:d4:
83:ac:92:1f:16:4e:fa:57:c3:49:f4:81:74:93:c9:
60:0a:ee:13:6d:e5:8a:48:2a:b3:37:ed:3d:44:36:
c4:1b:c8:0c:e9:2c:80:98:38:96:fb:b2:7e:29:84:
79:46:9c:11:a8:4c:72:39:d3:97:5c:36:1e:a2:66:
0e:1d:22:86:27:27:b2:f4:be:7f:e5:68:47:72:00:
6c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E8:0F:70:1A:09:2F:E5:CD:97:E9:65:F6:D3:7B:3B:61:01:1B:E6
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/aOgPcBoJL-XNl-ll9tN7O2EBG-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.14.254.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:fb:04:e9:ba:e2:45:69:3e:49:01:59:2a:51:96:3b:d4:a2:
3f:e1:95:ea:6d:29:7b:4d:0f:9d:fb:4c:6c:bf:d3:bf:01:18:
f1:d4:b3:7a:e1:02:49:a5:da:28:00:3e:06:fe:8a:5c:2b:9f:
9a:29:a7:e6:48:d8:5e:36:48:71:3a:75:75:30:b1:cd:97:84:
ba:9a:90:77:f3:04:71:6b:28:87:79:60:3b:63:99:d9:6b:97:
eb:db:ee:23:58:66:db:21:2d:96:4a:99:77:bb:64:39:42:fd:
74:f9:a6:a3:e6:6f:c9:ff:62:db:89:3f:16:62:3d:21:be:92:
d5:52:9e:8c:f1:10:af:b2:72:62:6b:49:da:50:9a:c2:97:28:
ea:df:02:ad:fc:4d:bc:6d:89:d4:06:49:ac:0a:05:7a:57:a9:
90:e9:26:0a:28:8e:68:4b:7e:6d:ca:71:83:f1:bd:e3:bc:67:
7d:8b:29:b2:06:1e:40:b6:12:e0:ee:cb:25:d0:8b:c7:1f:8d:
c4:40:c8:09:63:ad:e7:eb:bb:0b:5e:be:15:fc:27:ce:2d:af:
db:78:11:85:7b:0d:19:7e:7b:e2:92:2c:22:24:13:bb:3b:84:
a3:8b:0f:4b:6b:3c:7f:9b:7a:ce:84:fb:80:bc:2e:08:19:b9:
28:59:9f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org