Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/Iq2aO38N0QhOt3-gj5ASuIpldAs.roa
File: Iq2aO38N0QhOt3-gj5ASuIpldAs.roa (raw, json)
Hash identifier: DTsGjo5fqtagViqOENDpyM85pvXnjgz28PWL35JgPwE=
Subject key identifier: 22:AD:9A:3B:7F:0D:D1:08:4E:B7:7F:A0:8F:90:12:B8:8A:65:74:0B
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 01856C65D0E60496C9AA7F5F24F91EFD6FEB
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/Iq2aO38N0QhOt3-gj5ASuIpldAs.roa
Signing time: Sun 01 Jan 2023 08:14:49 +0000
ROA not before: Sun 01 Jan 2023 08:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199667
IP address blocks: 213.109.37.0/24 maxlen: 24
213.109.38.0/24 maxlen: 24
128.127.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:d0:e6:04:96:c9:aa:7f:5f:24:f9:1e:fd:6f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Jan 1 08:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22ad9a3b7f0dd1084eb77fa08f9012b88a65740b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e5:d6:b7:6d:4c:37:8b:e0:8b:3a:8c:41:a8:
94:92:49:64:31:5f:bc:9d:cb:05:42:bd:c8:3c:aa:
79:85:c5:3f:35:e8:e7:9c:8c:03:01:2c:35:4b:a9:
42:27:cf:44:c6:8e:3f:9c:3f:73:04:22:56:1d:ed:
35:d4:52:90:a6:c0:40:99:d5:8f:c6:05:7f:e4:7e:
3e:74:f0:fe:2f:dd:c5:36:c5:71:9c:32:c7:62:e9:
2d:07:9c:da:4e:82:76:66:ac:b5:01:55:a6:e1:ca:
8b:b2:f5:e5:9d:42:2c:a9:61:31:66:8a:7d:2c:d8:
82:5a:70:ad:81:dd:c4:9a:c8:6d:b0:75:00:a8:50:
24:75:c0:69:dc:26:13:01:52:1b:70:43:4d:d5:1d:
ce:6a:57:9c:8c:24:1b:07:b7:ed:1f:50:eb:ea:5d:
ce:f3:8d:13:7e:93:6b:c1:a9:20:88:55:04:0b:e4:
5d:ca:c0:ec:50:51:e7:2b:76:d3:6d:f6:8d:46:b8:
eb:32:7f:e5:92:95:cb:8b:63:96:34:3d:69:41:5e:
14:72:5c:4c:4d:fe:73:5a:be:24:21:22:05:a6:e1:
e4:36:56:d4:ff:79:a9:18:36:20:32:55:b1:eb:26:
a1:bf:08:f2:36:53:4c:6a:52:d2:a2:b9:41:8d:17:
69:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AD:9A:3B:7F:0D:D1:08:4E:B7:7F:A0:8F:90:12:B8:8A:65:74:0B
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/Iq2aO38N0QhOt3-gj5ASuIpldAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.89.0/24
213.109.37.0-213.109.38.255
Signature Algorithm: sha256WithRSAEncryption
cf:30:65:9a:95:f1:9f:84:be:c2:98:3c:3e:45:8b:26:59:a0:
5a:a8:59:d0:2e:fd:bc:19:2c:f8:65:5f:36:91:6d:e1:e8:b1:
ba:3e:e9:6e:80:e7:ea:fa:68:a3:b9:4f:15:a4:fc:7b:9c:85:
b2:29:c8:7c:c3:f9:4f:30:8b:a6:69:7e:9c:9e:7f:95:18:b3:
98:30:aa:f0:4e:c4:66:d8:a4:b0:02:ca:51:f0:a4:0a:83:32:
c6:f4:72:28:24:f4:86:c8:5a:67:1f:38:82:9e:99:bd:c2:2c:
fe:e1:bf:9d:e7:3e:c6:12:86:51:d3:21:00:bc:a5:fd:8e:ae:
56:b2:e0:a4:d4:06:6d:e6:d5:c2:b4:0b:36:77:3d:ec:19:1e:
b7:e4:39:ec:51:f0:b7:d5:3a:e3:2c:62:75:f2:34:f0:40:c6:
8a:99:b5:31:8a:4c:9b:05:e8:90:08:7c:ce:b7:f4:86:84:54:
ba:15:72:43:7b:4c:b4:95:4d:4e:11:0e:a9:c5:e2:e4:f6:bc:
10:58:f2:03:7b:cc:3b:46:57:ae:b1:7d:8e:df:cc:b8:e3:6b:
a0:89:6c:24:11:fe:54:c3:78:50:e5:4c:bb:e4:a1:51:30:7c:
98:cb:29:44:cc:e4:76:bc:e2:24:d6:ba:d7:fa:8d:0d:5b:0e:
9f:46:42:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:14 2024 by rpki-client on console-fra.rpki-client.org