Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/qJjf4f9VwUZJGJHjESiOk-oC8JI.roa
File: qJjf4f9VwUZJGJHjESiOk-oC8JI.roa (raw, json)
Hash identifier: 1PZIwyUPneonWMztqA2xXzA+v7YwFAZPXRgJa9RYiog=
Subject key identifier: A8:98:DF:E1:FF:55:C1:46:49:18:91:E3:11:28:8E:93:EA:02:F0:92
Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial: 018571278829575ACE1848F38741B6A05A07
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/qJjf4f9VwUZJGJHjESiOk-oC8JI.roa
Signing time: Mon 02 Jan 2023 06:24:54 +0000
ROA not before: Mon 02 Jan 2023 06:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 553
IP address blocks: 134.155.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:88:29:57:5a:ce:18:48:f3:87:41:b6:a0:5a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Validity
Not Before: Jan 2 06:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a898dfe1ff55c146491891e311288e93ea02f092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f6:68:4d:dc:32:61:71:c3:d9:45:3a:f2:e5:
e6:f4:03:c2:d5:4d:1b:9a:6a:49:29:e3:2e:ad:c4:
f8:fb:e8:d0:9c:05:6d:02:d0:74:6b:e9:37:38:14:
c3:bf:fd:eb:43:94:37:de:9d:0b:14:13:6a:ba:1c:
2d:ec:b4:6b:6f:94:66:6b:72:14:10:6e:e6:24:54:
8e:b5:c3:47:69:5d:56:45:46:e6:e3:4a:16:22:06:
0a:93:57:fa:fb:33:e2:be:ce:d0:5d:d8:74:6c:71:
2b:6f:f6:46:de:52:61:89:46:82:22:7b:11:43:85:
1c:0f:f3:99:81:89:6a:d1:26:fa:14:eb:60:48:6f:
e7:71:e6:0a:28:9a:14:22:db:d0:e8:0f:b3:dd:d0:
e5:77:b3:77:92:39:0b:f1:31:8a:49:01:97:03:05:
b7:24:61:43:0c:5f:ce:83:30:7d:6c:98:b8:fa:89:
2b:7f:d5:ca:5b:14:81:83:2d:9c:78:33:dc:bf:c6:
14:96:6a:11:9a:e3:16:c8:fb:39:ee:98:c1:9c:e9:
d6:f8:2b:b3:e3:f9:4b:a6:bc:c0:11:1c:ca:5b:28:
3c:4b:d1:d9:16:48:f7:18:87:87:30:8b:04:d1:bd:
e9:cf:c8:02:03:e0:d8:03:14:87:cb:1f:18:92:89:
e3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:98:DF:E1:FF:55:C1:46:49:18:91:E3:11:28:8E:93:EA:02:F0:92
X509v3 Authority Key Identifier:
keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/qJjf4f9VwUZJGJHjESiOk-oC8JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.155.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:2e:8d:38:47:99:c5:de:36:3b:87:b4:94:09:b4:f9:d8:f5:
50:62:e4:b4:97:bb:a9:91:f2:fa:b1:55:5c:31:21:dd:f8:f6:
50:0d:29:bb:6a:16:3b:94:24:e6:29:64:8c:a6:b1:e6:06:5f:
98:cf:1a:87:4a:a4:07:d4:6d:92:b7:bb:e5:80:57:8d:6e:df:
d8:7d:b0:ad:0e:8d:e8:bb:ae:74:e8:85:ee:83:29:de:d1:f2:
c1:e7:cc:74:6d:2a:a6:87:0c:24:f7:c1:9e:84:e1:3b:04:bd:
a9:76:9b:c9:66:27:73:cf:7e:2d:38:b0:ab:01:e6:97:a7:0a:
37:3a:56:5c:8f:e5:9d:54:bf:8b:c0:43:9c:aa:18:ae:e0:d7:
01:26:15:21:76:8a:a9:90:dd:ec:6a:fb:d2:fa:5e:d3:0c:8d:
c3:30:ec:d3:48:9b:69:3b:13:51:0f:f4:ff:be:45:e9:0b:e3:
52:67:9f:db:e9:53:cc:a5:60:00:f7:8d:89:0e:22:c3:cb:79:
00:81:37:f9:e7:0d:57:4f:84:92:16:8b:51:a5:6b:1a:5a:5b:
59:f5:35:6b:9f:5b:c8:ae:ed:a6:5f:33:bd:3f:94:8a:0f:89:
3a:ee:87:86:0f:2f:bd:85:44:4e:dc:7f:3a:36:b5:9e:9e:59:
d6:3d:48:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-fra.rpki-client.org