Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/27sZ7FKEkQW2luQoBCzSvUi1oKo.roa
File: 27sZ7FKEkQW2luQoBCzSvUi1oKo.roa (raw, json)
Hash identifier: NztJpLhJT9nB0flcNHeCLsA99VhZhwL/6a44TmahpxY=
Subject key identifier: DB:BB:19:EC:52:84:91:05:B6:96:E4:28:04:2C:D2:BD:48:B5:A0:AA
Certificate issuer: /CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Certificate serial: 01856C1390688954C9CE38D28C80DA9311D3
Authority key identifier: 1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/27sZ7FKEkQW2luQoBCzSvUi1oKo.roa
Signing time: Sun 01 Jan 2023 06:44:59 +0000
ROA not before: Sun 01 Jan 2023 06:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210166
IP address blocks: 194.61.33.0/24 maxlen: 24
194.61.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:90:68:89:54:c9:ce:38:d2:8c:80:da:93:11:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Validity
Not Before: Jan 1 06:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbbb19ec52849105b696e428042cd2bd48b5a0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:52:9e:64:1a:83:f9:5e:82:85:08:4d:c7:44:
12:72:f0:0c:3a:aa:92:52:58:5d:f3:07:fa:3e:98:
ec:09:bd:65:26:e0:04:98:42:6c:16:48:88:be:18:
c5:89:c8:f3:05:ce:97:e5:35:66:d9:66:17:4b:35:
05:4b:e7:1a:33:63:7f:aa:d0:92:cb:e2:fe:7a:75:
96:6d:a4:3d:06:0f:35:e3:0d:a4:fe:68:64:98:e8:
03:8e:aa:26:06:cb:59:3e:84:63:36:8c:e8:50:76:
5b:f8:a0:ac:5c:a5:03:60:37:6f:d8:3b:18:51:7c:
e3:81:f1:1b:9b:cc:e6:b5:07:de:d4:f7:4e:b4:70:
0a:c8:d5:58:75:7f:de:1c:af:16:a9:c0:8b:93:08:
28:51:ed:ff:00:80:fe:82:40:8f:a0:62:c2:b0:7c:
2b:f0:96:65:be:c9:39:04:aa:e9:83:90:5f:6c:0f:
37:45:11:21:d5:61:03:1a:81:19:6d:ad:32:d8:f8:
cd:91:0a:d9:15:48:87:58:50:b1:04:85:2c:b2:7e:
87:52:97:93:fb:58:b9:74:02:a4:52:79:b9:03:18:
e4:20:07:39:c4:75:a3:18:5c:94:d7:fb:e6:6c:e5:
9e:69:ac:e4:eb:a5:55:98:aa:f8:b3:03:e0:22:ed:
25:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BB:19:EC:52:84:91:05:B6:96:E4:28:04:2C:D2:BD:48:B5:A0:AA
X509v3 Authority Key Identifier:
keyid:1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/27sZ7FKEkQW2luQoBCzSvUi1oKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.32.0/23
Signature Algorithm: sha256WithRSAEncryption
37:9c:40:10:f6:67:f1:21:a3:b0:9d:e7:68:e7:27:01:50:f8:
e6:82:c0:87:5b:42:84:8a:d0:e3:0c:d7:dd:eb:d1:21:22:b1:
c5:ab:31:b4:4d:01:88:2a:0b:f9:71:c2:a7:47:e4:a3:60:b5:
d3:da:36:7d:d8:c0:51:f6:8a:27:8f:16:f6:e6:af:00:c7:31:
54:f1:81:a7:b2:18:da:31:ec:91:2a:1a:07:b8:60:5a:32:02:
1b:5d:a2:3f:2f:9d:41:a7:37:07:77:db:15:cb:56:78:b1:4e:
6d:df:d6:4b:86:3d:2d:53:47:d9:6b:08:f3:4c:d1:a6:2a:67:
1f:35:38:34:e7:ae:8f:1f:55:ec:65:78:7c:1f:1e:4c:b7:30:
11:30:77:ab:ab:44:d1:69:e7:c8:41:d3:9c:31:d9:4d:f4:3d:
2a:5f:ec:a0:c2:88:08:fc:98:fe:67:33:91:4e:3f:54:5d:b0:
c8:dc:2d:83:e9:7c:77:18:ee:e1:91:2c:b1:2a:38:1c:a5:ac:
04:42:51:25:b0:77:b7:bb:53:c2:6d:79:6e:c5:c4:86:bd:f7:
86:94:ca:bd:51:8d:c3:3c:5d:f4:a1:04:79:16:c6:89:1a:cf:
6e:af:11:41:bc:d3:ad:b7:31:07:f8:cc:b1:ad:e6:87:32:57:
ba:bc:9d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:52 2024 by rpki-client on console-fra.rpki-client.org