Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/RJgyORGILOf4m8758Phn4BLIpEE.roa
File: RJgyORGILOf4m8758Phn4BLIpEE.roa (raw, json)
Hash identifier: gY5N4WqJd0v3elNUgYfRxq00UaijwLTKJwOsj1ORFA8=
Subject key identifier: 44:98:32:39:11:88:2C:E7:F8:9B:CE:F9:F0:F8:67:E0:12:C8:A4:41
Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial: 01856E41C3734737A07F7FCE6401C97D4E3F
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/RJgyORGILOf4m8758Phn4BLIpEE.roa
Signing time: Sun 01 Jan 2023 16:54:41 +0000
ROA not before: Sun 01 Jan 2023 16:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12779
IP address blocks: 89.31.200.0/21 maxlen: 24
212.110.32.0/19 maxlen: 24
213.212.128.0/18 maxlen: 24
185.59.80.0/22 maxlen: 24
213.254.0.0/19 maxlen: 24
2001:1418::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:c3:73:47:37:a0:7f:7f:ce:64:01:c9:7d:4e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
Validity
Not Before: Jan 1 16:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4498323911882ce7f89bcef9f0f867e012c8a441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:6f:3e:0a:06:2b:c2:90:68:e2:31:94:e6:
71:5f:5f:7b:59:34:fd:bc:0d:6e:19:db:af:88:49:
9e:9a:92:b3:30:e6:69:6d:37:b0:04:05:0d:c9:b6:
0d:97:c0:6a:fb:3f:57:17:39:43:79:83:61:70:af:
b5:bc:c5:9f:58:7f:c4:c1:d3:26:da:31:36:0f:04:
80:d3:5a:30:b7:f9:a6:f2:23:d2:6d:05:4b:80:2c:
94:97:ce:73:35:50:99:cd:e0:49:5d:66:e9:92:ca:
1d:63:cf:1c:b9:9a:df:2d:5f:97:1f:1f:cf:74:6b:
64:91:9e:83:09:87:cd:4c:d2:07:d2:15:b1:6b:58:
97:0b:b2:99:93:2c:c6:43:cc:02:15:4f:35:16:04:
0c:b7:e1:44:de:f7:a3:6a:f1:c9:4a:61:e2:e4:a8:
a6:75:5f:61:af:c0:45:8e:b2:eb:c5:6b:f4:ff:78:
4c:40:2e:c6:b7:a9:ee:72:a1:31:11:ed:7b:fe:d7:
19:f4:7f:ae:47:d3:60:d3:4f:6c:3e:fa:5c:77:d6:
92:8b:a3:0e:44:4c:40:f6:8f:e7:85:a6:16:27:52:
29:ca:db:a5:a3:7d:97:16:00:9e:d9:f9:4f:1c:1d:
44:9b:50:13:71:6c:4d:da:ca:66:da:cf:1f:b1:49:
3e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:98:32:39:11:88:2C:E7:F8:9B:CE:F9:F0:F8:67:E0:12:C8:A4:41
X509v3 Authority Key Identifier:
keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/RJgyORGILOf4m8758Phn4BLIpEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.200.0/21
185.59.80.0/22
212.110.32.0/19
213.212.128.0/18
213.254.0.0/19
IPv6:
2001:1418::/29
Signature Algorithm: sha256WithRSAEncryption
60:ca:1d:02:fa:ac:c9:a1:f4:89:3c:3f:73:7a:b3:63:56:c3:
03:58:97:1c:b5:1c:15:e7:42:1d:70:96:1b:51:4a:e3:84:99:
85:e6:22:c7:19:68:7d:ea:29:97:2f:46:66:2a:61:c0:d6:59:
fc:23:95:c7:cd:1d:94:11:cb:4a:4a:5f:8f:c3:d3:5e:01:4f:
9b:0d:82:41:91:b2:5a:28:a7:eb:ca:b8:62:9f:57:e2:20:a8:
f3:23:cb:cd:2f:a1:b4:fc:2e:7e:ea:6a:89:d9:49:db:40:e5:
12:3d:d0:a3:fb:f7:b1:b0:3d:de:33:f2:10:6f:b6:1c:02:84:
ec:7d:0d:17:1b:a4:c6:4f:85:af:2b:5d:89:da:af:b8:55:58:
3e:8f:45:e4:b4:ef:a0:3f:ee:d5:9e:96:88:0d:2f:5f:9d:88:
bc:37:cc:90:24:38:c1:e8:31:96:64:09:25:46:88:25:9a:e0:
5c:04:12:f6:c4:d9:81:00:ba:ca:35:b5:3f:ef:f0:de:23:0a:
42:70:c9:49:1e:d7:00:87:62:7e:ec:b1:96:08:36:63:ec:7e:
f8:1d:ff:07:fb:90:cc:a5:24:30:ec:22:ad:ef:d0:45:d3:a0:
aa:6f:af:0e:37:40:89:45:75:18:1a:4f:79:d5:5b:6b:df:4b:
12:dc:b3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:20 2024 by rpki-client on console-ams.rpki-client.org