Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/Rkp_tylQWvj59Ay_c69-4O6qFvs.roa
File: Rkp_tylQWvj59Ay_c69-4O6qFvs.roa (raw, json)
Hash identifier: Nk1rPEFcW8ZNv6bM7nIDHcjwPRsHI11Kg7EnplEcD9o=
Subject key identifier: 46:4A:7F:B7:29:50:5A:F8:F9:F4:0C:BF:73:AF:7E:E0:EE:AA:16:FB
Certificate issuer: /CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Certificate serial: 018CC3490EB04BB13AF5DC1F1115CD084092
Authority key identifier: 42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/Rkp_tylQWvj59Ay_c69-4O6qFvs.roa
Signing time: Mon 01 Jan 2024 04:29:53 +0000
ROA not before: Mon 01 Jan 2024 04:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31505
IP address blocks: 83.151.36.0/22 maxlen: 22
83.151.32.0/22 maxlen: 22
83.151.44.0/22 maxlen: 22
83.151.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:0e:b0:4b:b1:3a:f5:dc:1f:11:15:cd:08:40:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Validity
Not Before: Jan 1 04:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=464a7fb729505af8f9f40cbf73af7ee0eeaa16fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7b:84:3c:2b:cb:55:91:e0:3b:1d:c9:92:db:
c7:af:de:76:46:9f:71:5a:00:87:ac:84:a4:d6:5c:
12:ac:cb:44:8b:66:40:f0:f9:93:00:38:f7:04:8d:
b7:40:7d:89:b8:6c:c7:36:d7:d0:1a:b3:6e:48:4d:
4b:81:8c:2d:6e:77:40:fc:28:e4:42:0c:43:31:6a:
72:cc:e4:86:53:08:0b:4f:b4:ec:46:9b:ef:70:bc:
68:b7:c0:25:24:82:f5:fa:f5:84:de:fe:b5:0a:58:
99:f1:3c:8a:98:63:62:a6:e8:65:ff:eb:dd:b5:74:
41:ac:4b:1b:cc:6f:7d:8e:bb:11:e3:2b:57:0e:7a:
d9:ab:a6:f0:00:b1:3b:4b:42:ff:b9:c4:fd:39:d5:
91:b0:e8:b1:8f:8b:e8:50:41:4b:8e:50:41:fe:a9:
1a:32:c1:d6:34:38:03:e3:b6:a8:2b:0f:67:5c:d9:
90:0f:97:81:c6:a9:41:f6:5b:d5:7e:74:16:2f:d8:
47:e5:cb:72:ff:ba:ad:a7:f5:db:09:88:e7:79:44:
73:b2:0c:4c:d5:c3:49:52:55:ef:63:10:e1:4d:35:
d8:19:51:7c:6d:05:03:f4:24:87:be:47:3e:5b:03:
98:95:92:2d:58:36:8c:80:13:e8:61:77:ab:af:e6:
39:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4A:7F:B7:29:50:5A:F8:F9:F4:0C:BF:73:AF:7E:E0:EE:AA:16:FB
X509v3 Authority Key Identifier:
keyid:42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/Rkp_tylQWvj59Ay_c69-4O6qFvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.151.32.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:30:43:01:48:15:d5:b6:54:3f:f5:33:4b:f1:0b:84:ec:b5:
25:d2:92:96:a6:ea:84:2f:ff:5e:f1:77:cc:6a:fe:fe:7f:4f:
5f:2c:73:d6:0e:54:9d:ac:5a:fe:5f:7f:01:fa:10:50:e6:a6:
d0:80:ba:03:28:85:d4:7b:01:be:2f:37:91:4a:1b:ed:94:f0:
f5:25:fe:5e:01:c9:6b:f5:25:66:c5:90:77:41:bd:9a:49:ef:
48:b7:21:4e:c8:eb:1d:1b:5f:1b:ab:d2:70:aa:3d:8b:fb:94:
b7:90:72:b1:00:ce:0b:30:bf:23:42:47:0f:32:48:e4:64:d6:
73:3e:e8:2e:3e:c2:d8:d0:7a:d2:e0:d6:82:e3:49:42:e9:1d:
f5:f0:c6:98:4a:04:31:d2:98:4b:e6:89:7e:62:e2:31:00:56:
6d:f3:e5:b1:6b:23:a7:fc:94:e4:f0:79:90:aa:ac:2b:c6:a5:
5d:c1:98:c8:ca:92:be:47:35:ca:e4:4b:15:15:0a:6a:94:69:
2c:24:ba:00:a4:c5:ca:8d:85:0e:a2:d0:e1:d3:28:33:49:71:
90:3f:e9:48:af:6c:d2:d1:1e:a2:ea:c9:55:b2:43:f4:6f:9a:
77:c2:df:86:c1:9e:42:73:47:38:28:5a:88:46:14:fe:ee:de:
a4:26:06:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:43 2025 by rpki-client