Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/grcnkIIxYUYGKqclplOPC5gkaZE.roa
File: grcnkIIxYUYGKqclplOPC5gkaZE.roa (raw, json)
Hash identifier: 0tEW/Nl5iITUeyPvvLz/cuTwBdNzafCEFTWnc/x3N2k=
Subject key identifier: 82:B7:27:90:82:31:61:46:06:2A:A7:25:A6:53:8F:0B:98:24:69:91
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 018CC86F1C71439792E7FC6E81592D05E66A
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/grcnkIIxYUYGKqclplOPC5gkaZE.roa
Signing time: Tue 02 Jan 2024 04:29:34 +0000
ROA not before: Tue 02 Jan 2024 04:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49936
IP address blocks: 86.107.6.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jan 2024 11:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:1c:71:43:97:92:e7:fc:6e:81:59:2d:05:e6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Jan 2 04:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82b7279082316146062aa725a6538f0b98246991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:47:af:ab:5d:c9:05:be:64:3b:d7:02:f1:cc:
43:69:98:27:2f:a8:cd:b9:2c:43:c9:cb:9b:89:d2:
5c:9d:b7:71:8c:57:1f:37:c6:ab:4b:d0:20:72:31:
55:6e:a8:5e:46:eb:d5:c9:87:04:10:1f:a8:fd:70:
cb:ad:18:18:82:dd:75:31:9c:d4:44:2e:72:97:00:
c8:f8:5e:99:48:2d:bb:8b:88:cd:ef:3f:51:4a:93:
d1:57:4b:3b:d6:b9:f5:27:e7:37:1d:8f:50:5c:7b:
b4:e8:03:8b:9a:29:65:a2:4e:ae:c7:fb:c8:8e:a1:
35:ff:e8:92:41:c7:8a:52:ea:bc:6d:85:13:68:18:
b0:de:b1:1c:93:da:99:b0:17:80:55:7f:c9:e9:ee:
d6:bf:47:9b:27:6a:c4:f5:49:aa:82:63:62:5b:cd:
cc:de:e1:45:c3:e6:d3:67:fd:39:18:cb:d4:1d:3c:
98:62:0e:f4:0d:fe:b8:09:f9:8a:15:dd:23:2c:a2:
98:62:a3:8f:8e:75:50:00:cb:d0:e6:72:d2:3a:8d:
dd:eb:e2:f6:72:50:25:3d:37:ca:c0:50:66:44:66:
10:97:85:12:a5:7a:af:2f:b5:8c:2d:c8:e3:f0:dd:
c8:0f:46:9f:f0:9f:e1:ea:7e:7a:12:fc:f4:1c:e0:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B7:27:90:82:31:61:46:06:2A:A7:25:A6:53:8F:0B:98:24:69:91
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/grcnkIIxYUYGKqclplOPC5gkaZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.6.0/23
Signature Algorithm: sha256WithRSAEncryption
83:ea:92:45:cc:c3:e6:7c:3a:24:d2:32:2e:e2:e0:ac:81:3b:
67:bc:72:80:4a:75:c7:5a:5c:2e:99:a6:18:09:6f:d2:5d:66:
6e:cc:97:47:32:0e:22:80:c2:35:af:8b:ae:99:81:4c:69:19:
e7:bf:fc:48:ba:cb:1a:69:7b:15:ee:85:15:64:c5:3a:75:1e:
5c:ff:c1:17:29:64:6a:4c:a8:ce:ec:1d:ae:19:bf:22:91:11:
93:7e:3e:4f:f5:3c:a7:52:62:bc:b7:47:c5:f6:85:aa:53:5a:
46:46:27:3d:78:ab:13:45:f4:5e:8c:05:17:ea:14:82:fc:55:
40:6a:eb:c0:94:f8:f8:c9:de:cf:47:d7:3a:2d:85:4e:5b:72:
9a:63:1c:25:75:d6:cf:5a:f8:88:18:cc:4b:3c:3c:0a:67:03:
01:c9:f6:86:38:39:49:da:05:5f:00:25:31:54:9b:72:7e:0c:
54:0f:9b:5d:ac:11:02:1f:99:d4:2d:1f:ff:bf:3b:3b:b8:34:
b5:71:61:79:7e:97:59:0b:9b:8e:c6:10:29:d6:d6:de:5c:2f:
e9:5b:f1:30:6c:94:45:11:cf:d5:d2:97:ae:bb:df:20:95:93:
bb:83:bc:24:f5:7b:36:77:2c:88:c3:63:2a:15:b3:f3:bf:5c:
9d:ae:ef:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:11 2025 by rpki-client