Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/B6P_NZ8Y_JdD5d3rkKD6Ft7ASHA.roa
File: B6P_NZ8Y_JdD5d3rkKD6Ft7ASHA.roa (raw, json)
Hash identifier: L8pYDZmziS526KeN0Bhiny1vnMEoHWXbSfuZ++dM1yM=
Subject key identifier: 07:A3:FF:35:9F:18:FC:97:43:E5:DD:EB:90:A0:FA:16:DE:C0:48:70
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0188A2BF1664661470E7FA3A4B243FCA87E8
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/B6P_NZ8Y_JdD5d3rkKD6Ft7ASHA.roa
Signing time: Sat 10 Jun 2023 00:40:12 +0000
ROA not before: Sat 10 Jun 2023 00:40:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 168.75.224.0/20 maxlen: 24
66.9.96.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a2:bf:16:64:66:14:70:e7:fa:3a:4b:24:3f:ca:87:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jun 10 00:40:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07a3ff359f18fc9743e5ddeb90a0fa16dec04870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:04:16:8e:ef:67:d5:78:50:a3:b8:ab:93:54:
1c:86:fb:0c:07:50:2a:b5:1b:3e:3a:44:bb:83:0c:
da:ae:9b:9b:07:29:3d:09:7e:6b:bf:88:d7:9d:c5:
9f:23:e2:10:95:3e:08:ac:16:b6:54:81:79:b4:85:
17:9c:8c:cd:96:51:a1:53:c9:00:36:a6:80:77:bc:
1b:ba:d5:b0:a2:db:90:78:0d:5a:9f:96:82:59:e5:
4f:ce:fc:77:79:de:b1:bb:2c:78:c5:18:93:8e:ec:
bf:8f:81:7b:b1:64:91:53:96:59:27:6b:6f:d8:c8:
34:2a:1a:5f:7f:85:69:4f:09:c8:be:4f:d2:9b:a7:
ad:ab:7b:d8:81:8d:1a:ad:6b:30:b9:85:ca:1a:b3:
49:b2:04:1a:75:49:c4:1c:6a:bc:2e:f2:38:40:5d:
48:ea:da:99:fa:d0:c0:d7:cc:ff:06:2e:7d:71:b1:
fd:3b:c6:7b:c6:66:4c:8e:e3:04:ce:c3:25:85:a2:
f3:37:f7:8b:66:a2:24:16:1a:32:63:3c:99:e8:06:
b1:c7:17:83:d1:11:30:ba:b8:79:24:f4:f8:3b:60:
32:7a:7c:8c:84:bc:ff:9f:ba:49:42:60:b4:e0:00:
01:3e:5a:b1:ca:1b:9b:6b:d6:01:bb:2c:45:a1:19:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A3:FF:35:9F:18:FC:97:43:E5:DD:EB:90:A0:FA:16:DE:C0:48:70
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/B6P_NZ8Y_JdD5d3rkKD6Ft7ASHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.9.96.0/20
168.75.224.0/20
Signature Algorithm: sha256WithRSAEncryption
42:16:cf:24:a9:b3:4f:29:fd:30:a2:fd:ea:5b:8e:a5:6e:c6:
bf:30:61:76:41:d3:43:7b:61:06:54:70:e8:9e:c3:59:04:f3:
0c:f0:62:41:4b:ec:db:8d:f9:bf:81:6d:46:22:08:10:cd:c6:
1a:20:fb:71:83:b4:51:bf:c3:c8:b6:cf:23:b5:72:8f:81:51:
12:14:d9:66:bb:fb:82:50:e3:34:c1:dd:07:bb:99:83:06:c6:
90:83:23:27:5c:42:bf:68:68:b2:09:2e:fc:82:bc:4e:97:75:
c7:9f:26:ac:2a:7a:97:f9:31:0f:ff:07:95:65:8d:d8:30:d0:
98:15:5f:fc:ed:d5:4b:52:46:16:ab:4d:28:3f:12:2f:ed:8a:
4c:3e:2b:58:56:bb:23:17:c4:58:19:03:a6:8a:84:ea:4d:4d:
b9:21:6d:06:56:fd:67:fb:22:f0:66:d7:81:d0:ad:13:94:b8:
ff:1d:cf:4d:96:31:bc:a6:ec:d6:b5:34:50:56:6d:32:16:6a:
3c:ff:df:40:58:c9:5b:29:47:44:32:3c:d9:37:9f:6d:70:69:
fd:d4:48:51:5e:1e:d0:03:24:1b:88:7b:45:87:50:60:70:5c:
49:0c:21:f5:92:4c:bd:55:53:07:dd:e3:57:c0:89:bd:61:df:
b7:c0:ba:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:35 2024 by rpki-client on console-fra.rpki-client.org