Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/AggGV4Yel3ZkepEukOymil9ChQI.roa
File: AggGV4Yel3ZkepEukOymil9ChQI.roa (raw, json)
Hash identifier: XfcgyJHXGW1airUqVhOAs86wrCNTrPwQ9SMVjBI5iRc=
Subject key identifier: 02:08:06:57:86:1E:97:76:64:7A:91:2E:90:EC:A6:8A:5F:42:85:02
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 01856ED4D3E0226123BDACB1ADCC2DF60BE3
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/AggGV4Yel3ZkepEukOymil9ChQI.roa
Signing time: Sun 01 Jan 2023 19:35:19 +0000
ROA not before: Sun 01 Jan 2023 19:35:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56381
IP address blocks: 141.98.136.0/23 maxlen: 24
2a09:11c0:1000::/36 maxlen: 36
2a09:11c0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d3:e0:22:61:23:bd:ac:b1:ad:cc:2d:f6:0b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jan 1 19:35:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02080657861e9776647a912e90eca68a5f428502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a5:40:ad:b4:6b:9b:fb:1a:44:1b:41:83:8e:
19:94:c7:a3:4c:1f:07:a3:c1:25:ca:1b:8b:b1:e0:
36:70:b6:a7:b6:6d:b9:5a:a6:86:f0:b2:41:86:0b:
d6:46:9e:83:e9:0d:17:55:36:c5:8d:05:60:00:7c:
7f:13:26:d5:b1:fd:98:53:96:b3:6b:00:0a:63:2b:
b3:87:4e:4c:e5:d2:9a:f4:b6:c3:0a:a9:e6:cc:54:
3b:e0:7d:39:bb:ab:c9:3b:68:d8:12:9e:67:79:26:
52:b4:48:2a:37:45:a8:80:fd:bb:04:a7:61:27:83:
15:f2:75:3c:55:17:b1:e3:38:29:a0:e3:3d:6f:3c:
6e:47:81:24:9e:46:44:59:a8:04:58:1c:5c:30:46:
88:18:14:b4:c8:2a:4b:08:4b:58:9d:5d:9a:98:2a:
fd:b7:d4:03:44:3a:47:7d:a6:be:92:b7:03:ca:36:
d5:12:4b:54:0a:f7:0d:81:56:84:8a:95:e7:6d:75:
db:84:ec:19:a7:44:8f:4c:38:35:4e:32:e5:29:83:
0e:06:13:bf:78:74:a0:a0:d1:2a:8c:9c:c1:f4:24:
18:33:5b:41:25:33:fc:66:bf:a4:34:04:9f:00:a3:
93:db:6c:90:bc:1f:b9:87:46:90:4c:84:b6:6e:43:
4f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:08:06:57:86:1E:97:76:64:7A:91:2E:90:EC:A6:8A:5F:42:85:02
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/AggGV4Yel3ZkepEukOymil9ChQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.136.0/23
IPv6:
2a09:11c0::/48
2a09:11c0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
93:a4:ba:7e:3d:60:06:5a:d8:05:39:65:48:49:a7:ae:dd:56:
c7:5d:9b:66:5c:d6:2a:33:1f:e0:53:61:77:a4:f1:19:f3:5b:
b0:69:70:d3:88:80:d2:32:24:be:cf:44:1e:ac:71:9d:14:3f:
93:1e:a7:82:54:ed:58:30:07:1b:01:e6:f1:19:db:0a:30:ea:
d2:5c:d2:40:b4:0b:86:83:3e:e2:82:47:92:20:42:75:63:10:
06:1c:da:0d:80:c6:0b:bd:53:8c:e4:e8:db:29:f2:ec:db:ce:
5d:b6:66:6a:ba:c0:97:89:d6:36:57:2a:8e:a7:17:12:ef:6f:
f7:c9:c9:41:bc:e4:ac:2b:f4:f9:de:9b:11:36:1d:a7:01:09:
d2:cc:58:5b:b8:90:54:91:c8:cf:42:b4:90:7d:1d:69:5b:dd:
52:16:2a:13:c9:6d:3c:c8:14:56:d2:f3:f9:99:68:5b:64:7e:
89:da:0e:fe:ff:fa:78:c8:e9:d0:1b:ff:62:f2:26:14:99:36:
05:54:29:67:45:40:bb:83:3f:cd:77:be:46:0c:fa:14:50:5c:
79:9a:f2:f8:31:49:bc:1e:9c:c7:d1:0f:1f:3d:2a:f2:2b:66:
77:08:f6:b9:2c:51:e1:2d:0c:ec:0e:68:35:60:ae:51:87:ff:
da:d4:ff:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:38 2023 by rpki-client on console-fra.rpki-client.org