Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/1J4mdUfutDjkNNHWiKT8alg3NmQ.roa
File: 1J4mdUfutDjkNNHWiKT8alg3NmQ.roa (raw, json)
Hash identifier: 6N/9ffcMqT0xjraLAGOOeUO01xvPNAmcDBWbRoQKqBY=
Subject key identifier: D4:9E:26:75:47:EE:B4:38:E4:34:D1:D6:88:A4:FC:6A:58:37:36:64
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 01856BDC9388B56D06047C50DA3567C35B35
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/1J4mdUfutDjkNNHWiKT8alg3NmQ.roa
Signing time: Sun 01 Jan 2023 05:44:55 +0000
ROA not before: Sun 01 Jan 2023 05:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9051
IP address blocks: 91.245.248.0/22 maxlen: 24
82.146.160.0/19 maxlen: 24
82.146.170.0/24 maxlen: 24
2a0d:b3c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:93:88:b5:6d:06:04:7c:50:da:35:67:c3:5b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Jan 1 05:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d49e267547eeb438e434d1d688a4fc6a58373664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:df:0a:76:f3:44:47:4a:3f:0d:22:b2:03:
f8:e7:a6:4b:80:c2:8e:2c:06:a2:bd:b8:1e:53:9f:
f6:18:6c:1a:00:14:da:a1:74:02:5d:89:e1:88:63:
e1:2a:f4:f8:9e:be:8f:17:ac:a1:13:80:3b:f4:4b:
93:5b:c3:ad:f4:d7:f7:6c:43:3b:c3:36:1a:c2:10:
39:f9:74:dc:11:c0:ac:5b:ce:8f:4c:99:1f:74:dd:
4c:5c:31:ee:8b:b0:a9:57:84:7a:b2:6b:de:92:4a:
27:f3:1e:9c:1e:65:ad:63:25:a8:eb:12:de:14:d2:
4d:e4:f7:96:40:e0:56:f4:a6:6e:35:96:a1:e7:02:
9b:5e:6b:ce:1b:b1:be:55:81:b8:51:0e:cd:1f:4c:
e4:d4:b7:1e:43:3c:c0:47:18:e5:6d:28:eb:b6:2c:
d7:14:b3:07:e4:40:5b:02:e0:f9:64:91:40:b5:6d:
e9:12:f5:83:fc:1c:c8:64:9d:d2:c8:97:52:5e:23:
84:f0:28:1f:82:88:03:05:40:2e:49:7e:fa:79:a2:
35:f2:0f:e1:8b:32:f1:d8:e4:1b:19:0e:86:1d:2e:
f6:cb:5a:31:e5:71:f6:58:c2:ac:ed:b0:52:8c:90:
57:d2:f5:42:48:68:af:aa:5b:e9:0a:c1:37:c2:bc:
e0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9E:26:75:47:EE:B4:38:E4:34:D1:D6:88:A4:FC:6A:58:37:36:64
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/1J4mdUfutDjkNNHWiKT8alg3NmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.160.0/19
91.245.248.0/22
IPv6:
2a0d:b3c0::/29
Signature Algorithm: sha256WithRSAEncryption
3f:1a:4a:d5:df:cf:57:15:5d:0c:e4:58:19:a8:3f:74:fa:cf:
dd:b1:92:55:b8:f2:18:87:cb:c9:51:e3:52:1d:d4:db:5d:4a:
58:0f:61:98:9e:11:b0:26:2b:1d:84:2a:ce:1a:d6:4c:f3:f4:
91:0e:f0:d2:ce:56:2d:5f:b7:48:fe:8f:7b:98:e6:d8:63:76:
7a:94:4d:bc:65:fd:1e:8d:6e:eb:f3:9a:b8:15:24:f5:c7:5c:
b6:12:c2:34:99:df:7f:6d:c1:9a:4b:7a:08:4e:9e:5e:0a:f3:
04:16:3d:71:34:8f:5a:8c:3b:68:04:88:5a:a2:16:d5:a1:71:
d3:37:aa:79:c2:42:07:98:8c:92:0a:cc:20:7f:d1:65:a0:e7:
06:0c:ae:c0:34:89:d6:13:a1:18:ba:02:a6:04:7f:ad:c3:3c:
e4:58:e0:2c:ee:d7:44:f9:f3:f7:52:19:8f:33:cf:94:ed:06:
25:22:e4:5d:96:ad:2b:f8:0b:96:eb:aa:b0:9a:1e:ca:72:25:
db:eb:c2:ae:5b:33:3e:86:8f:a8:ec:e5:c9:5c:13:f6:1f:2d:
b4:6d:dd:b0:6e:6a:07:7c:cb:b7:5e:9f:31:3a:a9:e7:c1:f0:
4a:0f:92:41:e8:19:08:4d:50:de:07:8e:7d:9e:a7:f1:b4:5e:
3d:8b:b3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:52 2024 by rpki-client on console-fra.rpki-client.org