Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/r3B9RBcEGxRgoR2akqfrrT4YLCQ.roa
File: r3B9RBcEGxRgoR2akqfrrT4YLCQ.roa (raw, json)
Hash identifier: +IDMj1fJuvC4DGf2g1bGyuW2bv+zB2+ypaZPaF84mNw=
Subject key identifier: AF:70:7D:44:17:04:1B:14:60:A1:1D:9A:92:A7:EB:AD:3E:18:2C:24
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018571B9EE51464EE9A300B5BDDF20ABA7A3
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/r3B9RBcEGxRgoR2akqfrrT4YLCQ.roa
Signing time: Mon 02 Jan 2023 09:04:48 +0000
ROA not before: Mon 02 Jan 2023 09:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 37.34.88.0/21 maxlen: 24
130.255.64.0/22 maxlen: 24
130.255.68.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jan 2023 07:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b9:ee:51:46:4e:e9:a3:00:b5:bd:df:20:ab:a7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 2 09:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af707d4417041b1460a11d9a92a7ebad3e182c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a6:cf:35:a4:a1:10:13:46:d8:28:a9:02:26:
09:07:af:27:a4:aa:a9:ee:1d:1f:56:90:ad:a2:69:
70:50:7a:97:eb:4b:3a:d7:47:62:a3:0d:eb:7c:42:
8f:9f:8e:e0:b2:8c:08:a6:6e:9b:4e:6b:76:f0:66:
b9:ad:7e:57:22:00:2c:f1:f4:35:b9:b5:56:13:5b:
a6:61:16:ae:97:7b:80:be:1a:65:5a:68:7e:92:44:
1b:06:d0:2e:e5:2b:c9:b4:d0:98:fd:ef:4d:1a:99:
03:e5:38:c1:b7:47:e2:e3:85:05:e0:f5:e6:47:6d:
cf:d6:65:46:5b:12:99:fa:ed:65:63:66:71:79:10:
9b:76:60:22:5c:a6:f6:a5:3c:6a:d3:51:59:6f:33:
1f:df:22:b6:f6:55:cc:63:dd:e8:a7:49:18:3f:10:
a8:48:b4:95:3b:25:fb:20:1d:6e:9c:91:0a:f8:e0:
81:91:03:ee:24:90:07:f1:af:56:c2:96:be:21:fa:
66:a4:e3:b1:99:4b:b6:18:c5:a9:12:b5:3a:b7:13:
b5:3b:fa:8f:1e:be:ee:28:f1:28:d8:37:08:ae:25:
d6:84:73:b5:2d:90:66:63:72:5e:e6:6e:38:4a:5b:
69:71:ed:7b:3e:fe:0f:63:3b:80:bb:54:f6:c7:5d:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:70:7D:44:17:04:1B:14:60:A1:1D:9A:92:A7:EB:AD:3E:18:2C:24
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/r3B9RBcEGxRgoR2akqfrrT4YLCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.34.88.0/21
130.255.64.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:3e:b3:bd:2b:96:e7:37:f2:d7:ae:cd:e9:92:41:77:43:55:
f8:e4:68:01:6c:88:30:42:7b:9f:d5:30:5e:fd:54:28:31:78:
c1:ba:48:c3:e5:cc:78:22:e7:84:8f:6c:f7:cd:a6:c0:a8:54:
98:de:98:e6:33:b0:11:31:e7:40:ea:b3:8e:60:b0:7e:4c:9f:
0c:6d:39:9d:8a:6d:12:10:46:d7:ca:e1:a1:93:ca:60:7f:33:
27:93:c1:25:67:f4:56:b5:15:44:d4:c3:77:2a:6b:86:4b:d4:
cb:1d:ba:6b:cc:8a:fe:f9:f6:4c:29:ff:58:e2:dd:a2:52:23:
49:29:06:df:53:77:be:06:49:c8:04:61:4f:cb:7d:c5:ed:f5:
7a:d7:10:e5:4f:a4:69:06:76:69:b5:c6:e7:d7:85:d3:ef:b4:
d3:e6:ad:d2:8c:1a:7f:1d:9e:d8:d9:4e:e5:42:23:46:ca:1c:
55:80:04:c3:92:76:3c:12:b9:eb:12:df:ca:e6:5f:ba:bc:8c:
ac:67:f9:83:0f:e3:9e:9f:49:b0:69:87:f5:df:35:e0:55:d7:
6c:bf:75:f1:8e:b6:4a:6a:0e:dc:ae:55:e4:21:42:83:4c:1e:
0d:7c:a1:8b:79:e2:b2:fd:c8:a8:fa:b5:95:b3:ea:2a:7c:4c:
07:dc:0f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:39 2024 by rpki-client on console-fra.rpki-client.org