Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/jn0hvFRYnVCXLcJTqrrLxJT-8Oc.roa
File: jn0hvFRYnVCXLcJTqrrLxJT-8Oc.roa (raw, json)
Hash identifier: 61RwhVGGjJVxemEajQ+zMLfh0zV+eRBPo0jtwJ9Tge0=
Subject key identifier: 8E:7D:21:BC:54:58:9D:50:97:2D:C2:53:AA:BA:CB:C4:94:FE:F0:E7
Certificate issuer: /CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Certificate serial: 0185725590C5866E1D9B1A6665DB274BDE1C
Authority key identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/jn0hvFRYnVCXLcJTqrrLxJT-8Oc.roa
Signing time: Mon 02 Jan 2023 11:54:48 +0000
ROA not before: Mon 02 Jan 2023 11:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21221
IP address blocks: 82.210.96.0/19 maxlen: 24
84.35.0.0/16 maxlen: 24
212.29.160.0/19 maxlen: 24
2001:15b0::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:90:c5:86:6e:1d:9b:1a:66:65:db:27:4b:de:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Validity
Not Before: Jan 2 11:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e7d21bc54589d50972dc253aabacbc494fef0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b3:54:37:f0:ec:b9:49:f4:79:8d:fe:6a:5e:
dc:f7:40:bb:d8:90:49:67:59:72:6a:73:12:66:8c:
e2:48:99:3a:ce:6f:2e:ff:0b:5c:9e:6a:e0:e3:6b:
10:50:91:27:c6:8e:6e:c7:4b:c0:dc:6a:36:c8:78:
a7:40:1b:b2:06:84:43:73:95:30:55:7f:28:0b:53:
5e:07:f2:5d:95:0d:6a:0c:59:48:15:b3:32:c4:73:
5c:36:91:08:aa:8f:ee:0b:e8:1b:82:38:00:49:97:
49:e0:72:3e:f3:24:65:d9:6b:ed:62:80:d6:ca:aa:
1a:35:da:a6:76:70:9f:a2:30:26:5a:59:ff:06:e0:
a4:64:7c:ce:99:41:3d:82:43:29:94:3d:ff:01:04:
84:16:d1:56:f4:45:30:e8:e7:2b:45:b5:f2:0e:fe:
ff:34:41:a8:40:63:0a:46:7f:62:3e:14:23:95:69:
a1:ec:81:3f:e0:15:5b:2d:f5:94:c7:7a:a2:f3:08:
56:55:92:9b:de:6b:94:24:0b:89:f7:67:bb:95:33:
63:4b:aa:0a:00:04:94:7f:b9:58:fe:db:92:5b:fc:
84:bd:9f:20:cd:23:c2:e6:db:be:cd:47:1d:87:14:
08:f7:5e:7a:43:61:30:93:20:92:73:d8:bd:6e:d4:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7D:21:BC:54:58:9D:50:97:2D:C2:53:AA:BA:CB:C4:94:FE:F0:E7
X509v3 Authority Key Identifier:
keyid:81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/jn0hvFRYnVCXLcJTqrrLxJT-8Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.210.96.0/19
84.35.0.0/16
212.29.160.0/19
IPv6:
2001:15b0::/32
Signature Algorithm: sha256WithRSAEncryption
14:17:0f:08:b1:21:a2:96:c4:3e:92:25:37:1a:e2:09:76:5e:
11:f1:6d:c6:86:7f:9c:ba:fc:11:93:ec:48:67:86:3c:6c:4b:
a1:db:e9:18:0b:48:f8:18:9b:24:c7:b4:ca:cf:5b:f9:46:1d:
64:14:9d:e9:3a:97:2b:7b:27:6f:ec:a0:ff:28:6f:58:4d:95:
16:78:6b:58:9f:d8:0d:f2:97:cd:8e:cb:df:d0:eb:cc:d4:9a:
02:cc:e9:1c:3c:0e:2e:a2:a4:ac:73:db:4a:a0:51:a3:28:40:
78:03:48:33:15:62:7c:70:21:43:d0:e6:b2:e0:53:f0:c0:b8:
0f:d0:0d:9d:98:d8:0c:00:a6:93:38:81:62:dd:57:36:e0:c2:
93:4d:ac:0a:af:3d:26:d2:13:aa:56:b5:45:7f:2f:02:19:b0:
74:bc:4e:06:30:ac:98:94:a3:9e:7b:36:c7:31:de:90:9d:78:
94:fe:8c:0a:c7:cd:b0:c2:f0:24:5e:0e:83:cf:c4:46:bf:62:
d0:3d:e5:0f:76:ab:d7:cd:10:4f:14:c4:19:05:65:0b:8b:31:
dc:40:df:ea:84:84:78:a2:b2:8b:9d:c4:b4:15:11:31:21:59:
b0:51:22:e8:38:90:98:50:b5:39:79:8e:1c:23:85:2f:a7:14:
79:21:ea:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-fra.rpki-client.org