Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/AK2yqM0TGLkPOK2uQR1JjKIs-j0.roa
File: AK2yqM0TGLkPOK2uQR1JjKIs-j0.roa (raw, json)
Hash identifier: Zjg3lWOr8sexQCSfRuwuPpiKDctDg5N6VITeCjFv+0k=
Subject key identifier: 00:AD:B2:A8:CD:13:18:B9:0F:38:AD:AE:41:1D:49:8C:A2:2C:FA:3D
Certificate issuer: /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial: 018C5DE177377585A723167C2D1A84DB03FA
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/AK2yqM0TGLkPOK2uQR1JjKIs-j0.roa
Signing time: Tue 12 Dec 2023 11:55:06 +0000
ROA not before: Tue 12 Dec 2023 11:55:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32787
IP address blocks: 141.93.16.0/24 maxlen: 24
141.93.16.0/22 maxlen: 24
141.93.17.0/24 maxlen: 24
141.93.12.0/24 maxlen: 24
141.93.18.0/24 maxlen: 24
141.93.19.0/24 maxlen: 24
141.93.25.0/24 maxlen: 24
141.93.28.0/24 maxlen: 24
141.93.32.0/24 maxlen: 24
141.93.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:e1:77:37:75:85:a7:23:16:7c:2d:1a:84:db:03:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Validity
Not Before: Dec 12 11:55:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00adb2a8cd1318b90f38adae411d498ca22cfa3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:58:93:ce:07:cd:f2:08:ea:f7:2e:21:57:23:
05:d8:d1:a5:96:b3:05:bd:39:60:69:bc:cb:da:0e:
97:d0:62:75:75:89:a8:91:7d:c3:72:45:e2:41:80:
c5:49:ab:3a:f2:e6:90:1c:75:38:3a:50:71:2b:64:
eb:90:f7:45:cc:7d:7d:91:4c:26:97:a1:e7:12:50:
72:fa:28:b7:33:60:e8:7a:9d:95:f6:a9:da:ce:27:
2f:4e:9b:f5:7e:cb:55:56:22:9c:a1:03:cf:b2:e4:
ae:07:e7:da:36:ed:45:8d:b6:43:5c:76:05:3b:ee:
ba:60:76:57:92:0e:f0:a1:70:4d:49:b6:19:9a:19:
25:76:3d:2e:a6:9d:32:a5:39:cf:00:68:7b:4e:15:
44:c6:3c:84:ee:68:96:eb:ca:bb:54:c0:55:2a:a6:
1c:39:68:98:7d:8a:67:64:fa:c8:2e:ab:b0:a4:a4:
a7:e0:a9:f2:02:e9:9c:a5:1a:11:e1:ac:2e:a2:b6:
64:ac:89:32:20:7f:0b:f5:d3:9e:91:28:8f:e2:0c:
99:e3:78:70:b6:05:44:9e:bf:af:d4:89:e8:bc:20:
31:3b:d7:cc:42:04:b7:42:82:16:63:36:b3:b3:e2:
e3:68:6b:01:eb:ba:8d:30:b1:05:ec:05:eb:2c:e4:
ee:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AD:B2:A8:CD:13:18:B9:0F:38:AD:AE:41:1D:49:8C:A2:2C:FA:3D
X509v3 Authority Key Identifier:
keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/AK2yqM0TGLkPOK2uQR1JjKIs-j0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.93.12.0/24
141.93.16.0/22
141.93.25.0/24
141.93.28.0/24
141.93.32.0/24
141.93.35.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:e2:93:1f:a5:14:82:d0:64:34:55:e5:f8:10:bd:ec:4e:74:
92:6c:46:00:db:38:54:7e:0e:00:b4:4e:f6:e4:8a:b4:01:bc:
2e:ff:aa:ce:dd:16:ed:26:09:d1:72:d6:28:0d:c3:fb:d2:c5:
24:b1:f0:c2:c2:3b:77:dc:7c:7a:72:73:76:90:d4:c4:55:86:
55:8a:dc:89:d2:bf:df:0f:ca:aa:15:a9:57:6d:ad:b2:a9:b5:
d4:85:96:cf:46:07:1a:a4:d3:33:01:f7:ea:36:40:7a:f9:05:
56:21:81:d2:8e:f9:64:e4:cb:f0:04:37:51:12:1b:af:0e:52:
dc:62:f1:8d:72:9f:4b:9b:de:26:0f:7c:c2:88:04:4b:05:50:
0e:ab:3b:7f:82:04:e7:23:1e:0b:7e:91:ab:f9:cc:7b:af:d6:
37:42:d7:70:c7:f4:ff:c5:d8:1f:47:67:c1:a1:25:e4:0a:f6:
fe:3f:40:e4:b9:21:02:dd:66:ff:eb:48:39:a9:0c:3e:38:ba:
8d:d1:f5:db:94:0c:8a:ce:9c:ff:a1:68:df:d6:d2:69:65:85:
b0:c4:8b:2b:ef:e6:6e:51:06:07:d4:b9:c1:88:2e:3a:ba:6c:
b5:25:9b:0e:6b:67:9d:c7:36:e4:16:7d:8b:8e:dd:2f:b5:c4:
1f:5c:45:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:32 2024 by rpki-client on console-ams.rpki-client.org