Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/p_xND1kYPiiPBh8tMrv6CVIAkvs.roa
File: p_xND1kYPiiPBh8tMrv6CVIAkvs.roa (raw, json)
Hash identifier: NnNtwAp/V0dJFdbp0ADqf4I/NhJcjXS+I63CZmiKG5g=
Subject key identifier: A7:FC:4D:0F:59:18:3E:28:8F:06:1F:2D:32:BB:FA:09:52:00:92:FB
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018585E9F9911752A2B113C2ABDEB64EF5BB
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/p_xND1kYPiiPBh8tMrv6CVIAkvs.roa
Signing time: Fri 06 Jan 2023 07:09:41 +0000
ROA not before: Fri 06 Jan 2023 07:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 130.255.64.0/22 maxlen: 24
130.255.68.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Mar 2023 07:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:85:e9:f9:91:17:52:a2:b1:13:c2:ab:de:b6:4e:f5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 6 07:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7fc4d0f59183e288f061f2d32bbfa09520092fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:67:79:23:b7:da:72:3d:1c:02:19:05:3a:dc:
c4:04:96:c2:c9:24:16:28:5e:3e:e1:a1:ea:9a:3e:
83:04:3e:23:11:6a:3b:ed:8e:bf:6e:4b:97:ce:7c:
c6:c2:8a:a5:90:92:84:e0:cf:de:b2:56:03:59:7a:
6a:38:6b:ce:ce:1f:19:da:45:30:9c:05:e2:95:c0:
66:06:6a:4c:a4:75:ef:13:8c:94:2d:92:cb:22:56:
29:1b:a7:c3:89:de:cb:fc:f7:b6:a2:e1:81:69:9d:
5a:6d:3d:a3:a6:e1:37:d3:fd:19:25:a0:de:1d:04:
4b:5d:6f:4d:ed:7c:bc:0d:50:65:a6:3f:06:40:e5:
48:15:6a:d2:90:74:63:98:85:24:d7:78:12:94:20:
24:30:c1:28:83:4d:bd:a0:86:a0:9b:f0:4d:5d:42:
62:3f:74:51:9e:41:c7:0c:99:78:f1:9a:5c:a9:bf:
af:16:44:14:59:c8:b3:0c:11:a5:cf:aa:19:97:7a:
6b:f7:45:94:f4:78:2c:de:e2:eb:27:6e:ff:42:79:
c0:49:49:a4:02:65:0c:f1:84:55:b2:15:ab:df:b7:
fa:79:cb:c0:fe:0b:6f:19:54:07:bf:8d:09:41:b9:
9b:bb:d7:7f:f3:28:cc:0f:d2:c5:af:d2:35:ee:8e:
8a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FC:4D:0F:59:18:3E:28:8F:06:1F:2D:32:BB:FA:09:52:00:92:FB
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/p_xND1kYPiiPBh8tMrv6CVIAkvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.64.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:eb:58:35:94:05:02:c9:a5:6d:be:f3:01:5f:95:f0:5b:89:
dd:20:69:50:b3:4c:b5:04:e4:ab:72:2d:d2:fe:d9:3e:f2:28:
4a:f4:4f:9f:22:ab:91:8c:a3:54:86:f7:2c:2b:65:be:bc:6f:
0e:fc:d6:a9:bc:83:cd:4d:22:7c:30:f9:f8:28:71:5b:c8:55:
89:20:57:fd:40:89:24:28:97:91:b6:bb:26:e1:74:7a:01:40:
74:a2:84:b5:00:6c:9a:a4:ac:b4:67:fc:0f:c7:65:45:d4:e5:
aa:0a:5f:06:5f:81:07:98:80:6b:8d:04:68:71:87:b9:00:14:
be:aa:b0:c3:35:cf:76:9a:68:cd:a4:27:b7:2d:83:3f:44:01:
e9:86:70:bb:59:1d:2d:2e:b5:d8:10:a8:ee:b6:f2:74:56:7d:
57:4b:58:c7:9c:66:32:66:ee:d2:6e:84:d1:4b:aa:e1:68:1b:
34:f9:e3:d1:d8:96:d0:05:1c:3c:ff:28:23:69:ed:84:b8:33:
43:4c:9b:9c:f9:9e:6b:02:ac:ba:8b:6f:b9:52:d3:46:e3:be:
dc:e3:2d:40:c0:e7:8e:78:c5:d7:59:b6:62:93:e7:11:4e:60:
d9:b3:b2:0f:be:3d:47:38:ff:ec:40:d1:d8:0d:59:da:7d:26:
ee:a6:6b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:39 2024 by rpki-client on console-fra.rpki-client.org