Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/iKZeeT594CwYiHhuGIn5jFlZpoE.roa
File: iKZeeT594CwYiHhuGIn5jFlZpoE.roa (raw, json)
Hash identifier: sodJxnHEdklHlQKVI6QOSQh6zY2M8m6zXMP/Y6h0sPQ=
Subject key identifier: 88:A6:5E:79:3E:7D:E0:2C:18:88:78:6E:18:89:F9:8C:59:59:A6:81
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018ACBE32BCC9BDBDE1775CEE45E7C430F65
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/iKZeeT594CwYiHhuGIn5jFlZpoE.roa
Signing time: Mon 25 Sep 2023 10:29:37 +0000
ROA not before: Mon 25 Sep 2023 10:29:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.255.56.0/23 maxlen: 24
91.229.134.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Dec 2023 12:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cb:e3:2b:cc:9b:db:de:17:75:ce:e4:5e:7c:43:0f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Sep 25 10:29:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88a65e793e7de02c1888786e1889f98c5959a681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:7a:42:9b:e8:00:49:37:d1:71:4e:99:57:
0f:c2:36:52:02:93:74:8c:58:7a:0f:f2:3b:ce:d3:
82:9e:86:de:36:b5:b0:13:70:20:6b:5c:a9:b2:ef:
d4:b1:49:82:63:9c:8a:19:cb:6c:5d:d1:fc:15:e2:
ab:8a:93:b4:cd:b6:5d:27:c8:d3:48:60:14:6d:4a:
e7:bb:6a:7e:2f:85:89:73:5e:cf:48:25:12:37:44:
93:ad:58:55:3e:85:b3:2f:65:ba:b2:08:07:41:20:
39:ce:ef:4c:23:b2:7a:a1:86:ae:ce:6a:c5:79:1f:
03:55:67:17:2a:b0:51:db:46:88:b7:0b:98:b0:d1:
8c:d5:d7:ce:1e:b1:15:13:0f:98:8f:91:10:6d:b9:
bc:61:4b:b6:4a:f1:ea:e4:ce:82:fe:2b:a5:31:33:
99:36:f7:a5:6a:4b:52:b7:c5:8c:a2:b2:d6:d5:cf:
0a:b0:28:44:01:fa:13:2b:10:17:ea:7a:cd:27:71:
44:5f:58:76:b0:e2:a0:e6:52:cd:4d:47:5e:00:69:
b1:2f:cc:8d:1e:56:72:5d:5a:0f:91:a1:ba:f4:54:
ac:93:46:11:76:b6:3f:df:e0:24:9f:55:4b:19:6b:
72:fa:83:cd:36:d1:dd:52:43:97:0e:0c:87:d0:a3:
21:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A6:5E:79:3E:7D:E0:2C:18:88:78:6E:18:89:F9:8C:59:59:A6:81
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/iKZeeT594CwYiHhuGIn5jFlZpoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.134.0/23
185.255.56.0/23
Signature Algorithm: sha256WithRSAEncryption
64:3d:db:a4:15:c4:a9:81:77:dc:ba:65:c9:b9:fe:b8:90:45:
08:ef:01:88:2d:47:d1:b0:83:5f:31:7d:78:e3:b7:24:0a:b5:
52:35:03:8b:3a:58:5a:c9:61:1e:d9:28:5b:24:54:54:ed:41:
05:54:bc:e2:2c:77:33:9e:cd:28:01:ed:30:e9:40:63:a3:db:
30:41:81:02:6f:01:b7:58:ad:bc:cd:df:60:a7:7a:6b:91:bb:
f7:64:3c:3f:7b:fa:2e:61:89:c6:8a:8b:35:62:54:cf:db:4a:
fa:4f:4c:4c:49:3d:e9:1f:cc:3c:9c:31:3d:92:50:30:03:03:
71:98:90:14:6f:2b:9b:63:9e:09:15:47:fb:c9:7f:0c:e5:41:
40:26:52:16:a5:cc:60:27:26:93:ca:fa:63:03:fd:50:da:d0:
65:0e:08:5a:02:54:74:5e:61:de:42:ed:96:15:64:12:3c:4e:
15:34:a1:76:de:37:aa:f3:2d:8e:fe:fd:fd:ff:5d:53:ea:90:
0a:3b:02:9a:7b:7b:e5:2f:3f:32:1a:82:e1:c1:7e:5e:32:de:
cf:8d:85:72:83:a2:c3:cb:04:e6:9c:71:3e:50:a2:19:ae:f9:
5a:d1:1c:34:4c:40:c3:72:92:69:4a:e0:54:af:6a:d4:e4:f3:
d6:c7:af:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org