Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/2OyXPLr30wcUWn_USCak7gxrx70.roa
File: 2OyXPLr30wcUWn_USCak7gxrx70.roa (raw, json)
Hash identifier: kiINO/N7wyVzQ4LGE91RvQ+4z+GhV4pYlA/5CCJqvs4=
Subject key identifier: D8:EC:97:3C:BA:F7:D3:07:14:5A:7F:D4:48:26:A4:EE:0C:6B:C7:BD
Certificate issuer: /CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Certificate serial: 01856DDD60ED7E4A6E8D5DF055FEC2BE2298
Authority key identifier: 77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/2OyXPLr30wcUWn_USCak7gxrx70.roa
Signing time: Sun 01 Jan 2023 15:05:02 +0000
ROA not before: Sun 01 Jan 2023 15:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210727
IP address blocks: 46.253.129.0/24 maxlen: 24
2a11:60c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:60:ed:7e:4a:6e:8d:5d:f0:55:fe:c2:be:22:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Validity
Not Before: Jan 1 15:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8ec973cbaf7d307145a7fd44826a4ee0c6bc7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:4c:eb:fc:fe:a4:7f:41:40:48:7c:67:9a:
d0:cd:da:11:19:89:11:a5:d9:38:5e:1f:2b:ec:77:
7d:8f:5a:f9:a9:4b:3c:5e:aa:33:ec:61:f6:cf:65:
b6:68:ba:a0:03:3f:41:42:a7:33:60:7e:6b:19:a5:
81:a8:a8:cb:78:52:44:f0:3f:37:ce:8c:b9:6d:e1:
0b:c7:39:d9:6e:a7:75:5b:29:ec:69:f2:2c:7e:bc:
a3:5c:e1:9d:57:3d:74:d8:ea:c8:0f:da:19:eb:c2:
83:38:2d:40:ab:5f:aa:21:60:90:ef:eb:53:b9:46:
f1:7c:e7:86:30:bc:2b:e0:22:e4:01:80:bd:6f:91:
64:22:d1:7f:5a:f6:68:90:c4:70:76:03:1d:30:50:
83:41:eb:a9:3f:ec:ed:04:64:e1:f4:e7:1d:ac:cd:
f1:ac:56:c3:12:ee:52:0d:23:58:48:81:4a:4b:d9:
5a:eb:ba:c0:83:d5:20:ef:a7:10:97:ed:4a:04:a4:
12:1c:71:b9:b7:06:60:c7:94:07:af:9e:24:c1:c8:
5a:96:ef:2a:4e:53:d5:6f:09:db:b6:93:0a:74:0b:
38:bd:28:6d:06:f0:fd:4c:3e:f8:35:07:e8:71:4d:
37:5b:c6:24:8f:83:79:da:dd:50:05:42:21:86:31:
8e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EC:97:3C:BA:F7:D3:07:14:5A:7F:D4:48:26:A4:EE:0C:6B:C7:BD
X509v3 Authority Key Identifier:
keyid:77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/2OyXPLr30wcUWn_USCak7gxrx70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.129.0/24
IPv6:
2a11:60c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
8c:7a:34:c4:94:90:e3:8a:32:69:2a:1a:63:b6:a4:33:d6:1e:
93:dd:83:ca:6d:68:2c:92:c9:bb:77:c2:ca:48:ce:c6:dd:df:
78:33:eb:3b:98:75:bd:4e:c6:8f:28:b3:c0:0a:56:75:9d:2a:
72:84:3e:2d:1a:31:95:a9:88:1e:08:a2:de:90:24:fb:33:9d:
71:b2:65:c5:e7:33:ac:c1:57:14:1c:63:85:65:c5:f1:0d:e4:
cc:37:53:26:94:b7:86:6a:8d:d2:e1:1f:6f:08:7a:33:b2:14:
b8:51:7e:6e:55:fa:a6:46:6c:16:62:3c:de:91:a2:4e:be:4a:
f5:d6:01:8a:53:42:36:ad:09:d8:fc:74:83:9c:a2:cc:23:02:
64:2c:47:c0:8f:3b:5e:0e:4b:02:b8:5e:dc:b5:49:f6:29:61:
49:17:c9:2a:67:c8:1d:16:60:b1:e8:3c:f4:f2:56:ac:6d:c3:
51:05:8b:f1:5c:7c:80:d7:ec:2d:96:f4:95:9d:2d:3d:96:f6:
47:9e:1e:eb:30:e0:ba:d2:0b:57:0e:1a:0c:de:2b:e8:58:9e:
5d:f4:3f:4c:c8:aa:32:73:aa:ef:67:26:b9:01:4c:33:ec:50:
e0:69:69:81:37:06:1e:c4:52:29:b2:5a:53:96:c0:e7:19:62:
7e:86:00:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:21 2024 by rpki-client on console-fra.rpki-client.org