Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/lJvoXBGZjwvaDqfcUA38f-MAmTU.roa
File: lJvoXBGZjwvaDqfcUA38f-MAmTU.roa (raw, json)
Hash identifier: pEBYrOeMuwxUoa/gmeE6odEZsFT6v9q0knDNv91r0zI=
Subject key identifier: 94:9B:E8:5C:11:99:8F:0B:DA:0E:A7:DC:50:0D:FC:7F:E3:00:99:35
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 01856C65CF281F5BB67B64BAC3EECCC676EA
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/lJvoXBGZjwvaDqfcUA38f-MAmTU.roa
Signing time: Sun 01 Jan 2023 08:14:49 +0000
ROA not before: Sun 01 Jan 2023 08:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51305
IP address blocks: 128.127.93.0/24 maxlen: 24
2a00:10a0:b::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:cf:28:1f:5b:b6:7b:64:ba:c3:ee:cc:c6:76:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Jan 1 08:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=949be85c11998f0bda0ea7dc500dfc7fe3009935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:45:cb:ce:5b:48:df:94:73:88:84:fa:84:bc:
a3:18:0c:38:f9:8e:54:95:98:8f:4a:1d:37:ed:16:
c4:f3:4e:c1:8b:11:f4:50:10:84:d2:ba:03:34:a9:
80:76:a9:35:3d:4c:4a:9f:6d:0d:cb:32:9c:4c:a1:
f8:89:70:39:84:bb:e2:b8:2b:7f:65:af:34:03:ea:
28:20:73:4f:9a:2f:8f:28:dd:c7:e2:24:91:c6:71:
4c:ff:b8:f1:8c:de:69:d9:16:71:17:c7:7f:15:25:
26:53:64:8b:31:2c:6b:2e:a2:b8:db:20:a9:11:48:
4b:89:88:fb:2d:e2:f0:d6:5a:cd:1d:c7:dc:61:3d:
96:a4:e9:5a:12:02:15:a8:ac:95:a4:06:49:ba:2b:
bf:10:46:4d:a8:c3:68:57:e9:d9:45:e6:7b:05:e8:
b9:b4:75:ee:0c:ae:97:64:f0:27:b6:f4:fc:3f:05:
73:6b:64:7a:07:16:11:69:f1:7c:ba:7b:1e:23:ea:
90:e5:51:9f:79:15:1d:3a:36:c7:95:5f:b4:53:ff:
d4:e9:28:4e:1f:4f:35:e4:48:6f:f7:ec:0f:96:46:
57:18:63:00:18:61:a0:3d:e9:6d:7e:5c:31:f8:66:
e4:92:0b:fc:50:62:4d:4d:95:01:6a:50:f1:1c:48:
90:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9B:E8:5C:11:99:8F:0B:DA:0E:A7:DC:50:0D:FC:7F:E3:00:99:35
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/lJvoXBGZjwvaDqfcUA38f-MAmTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.93.0/24
IPv6:
2a00:10a0:b::/48
Signature Algorithm: sha256WithRSAEncryption
52:1a:c7:9e:3d:d6:4e:4e:e1:06:f1:98:3b:79:11:85:e8:30:
22:11:4a:5e:39:05:db:b8:7c:dc:a0:6b:7d:8a:a8:b7:77:f3:
60:d5:f4:47:3f:af:cb:e8:e5:84:b0:6a:6d:c4:70:98:da:dc:
a7:12:4e:a7:07:aa:b7:d2:ac:d6:64:17:90:d8:53:58:00:f8:
64:bb:1d:fc:5f:21:09:64:50:13:33:22:1f:d5:7b:0f:f7:e3:
5b:bb:67:d6:1b:ac:98:a3:c5:05:aa:27:81:b9:a6:b8:b1:9a:
06:21:46:37:68:97:a9:e5:76:da:45:fb:e9:29:e5:c9:3e:3f:
dd:61:9d:a9:6a:cf:92:a8:25:b3:d5:9d:03:98:82:f4:6e:0a:
8e:f9:14:ff:e1:cb:13:49:fe:41:43:b1:07:01:8e:ce:5c:7b:
2f:4b:8e:9f:9c:84:55:cd:6d:f2:c9:ad:76:53:f7:41:76:5d:
bf:3d:94:33:10:02:51:c0:89:2d:5e:fc:f3:aa:d3:66:9f:a5:
f4:70:e5:d5:59:ff:e4:f1:03:27:b3:8e:1d:2f:99:bc:1e:24:
2d:40:8a:4f:6f:f4:05:cb:e2:76:1c:33:45:1e:77:ed:41:90:
97:2f:f1:d0:32:d7:cf:8a:08:b4:78:95:1b:9d:00:4f:33:8a:
05:f8:2a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:14 2024 by rpki-client on console-fra.rpki-client.org