Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/8jWfBw8yTIbGa9iTiVMA9lLTM88.roa
File: 8jWfBw8yTIbGa9iTiVMA9lLTM88.roa (raw, json)
Hash identifier: aaRvntZXwYEZSzrxYN1uM+KOBR2aQB0yYoieCC6kQCQ=
Subject key identifier: F2:35:9F:07:0F:32:4C:86:C6:6B:D8:93:89:53:00:F6:52:D3:33:CF
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 0186EA524BD1705718B5E83A10552F2D04B2
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/8jWfBw8yTIbGa9iTiVMA9lLTM88.roa
Signing time: Thu 16 Mar 2023 12:08:27 +0000
ROA not before: Thu 16 Mar 2023 12:08:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 92.51.20.0/24 maxlen: 24
92.51.22.0/24 maxlen: 24
92.51.23.0/24 maxlen: 24
92.51.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:52:4b:d1:70:57:18:b5:e8:3a:10:55:2f:2d:04:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Mar 16 12:08:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2359f070f324c86c66bd893895300f652d333cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:20:d7:cb:bb:3f:16:eb:89:c2:e2:17:3b:
b9:0d:b7:bc:15:a2:a1:5e:9c:e4:38:3b:c2:d7:61:
b3:60:39:a8:18:43:ff:92:36:4f:53:db:4e:7e:d5:
c5:c5:d6:c7:2e:77:ac:bc:42:23:d0:aa:90:31:0e:
85:ea:d5:3d:9d:ec:94:f7:6f:a1:88:94:65:d3:83:
9f:69:ad:1b:8f:ec:9d:0e:78:46:61:04:18:ce:b2:
e1:7b:51:bb:e9:48:3d:62:d6:3c:cf:7e:8a:9d:39:
ad:3d:5e:8d:3b:42:04:50:54:2e:b3:bf:82:5d:32:
c0:bb:bb:53:30:f9:68:e1:a3:f4:ec:b5:3a:fb:40:
3c:ba:78:9f:ce:f8:2a:f2:67:30:ca:d0:79:a5:73:
58:44:3d:10:80:de:3d:fe:f1:eb:26:d9:cc:17:f5:
a6:1d:f9:66:fb:fe:3b:d8:c0:35:19:17:b9:2a:0b:
77:43:7b:0f:e9:ee:6e:5a:e4:e9:f9:0e:35:a5:dd:
0e:f4:42:11:9e:9a:19:1b:2e:d9:1a:3a:89:4f:b9:
04:9e:e3:98:cc:f1:5d:2d:b0:55:7c:76:12:1a:28:
c7:e2:db:47:6b:70:09:16:7a:86:13:3c:84:a3:4d:
46:65:77:bf:08:4b:c5:1b:70:9d:14:2d:3f:3a:75:
60:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:35:9F:07:0F:32:4C:86:C6:6B:D8:93:89:53:00:F6:52:D3:33:CF
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/8jWfBw8yTIbGa9iTiVMA9lLTM88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.20.0/22
Signature Algorithm: sha256WithRSAEncryption
98:eb:12:87:50:65:14:f7:60:2d:8a:46:be:1a:b4:6d:80:d7:
74:43:5c:6d:93:8c:9c:51:c0:25:61:5d:9b:ed:50:d8:35:0e:
98:c9:7f:56:9e:e5:ce:09:b2:2d:a0:ec:24:26:07:4d:4f:83:
d5:0a:59:9f:2c:b2:3d:4c:6f:3b:1e:07:e5:c8:ac:c3:cc:c9:
53:61:72:69:9d:54:77:45:37:c9:35:df:3f:31:4b:4d:f2:aa:
34:58:ab:a5:f0:dd:d3:bc:d9:7c:84:10:79:0b:8d:6b:8e:4f:
c0:c4:f5:48:b4:b0:63:ec:8d:82:ee:cc:1f:49:fa:7e:9d:63:
16:82:1a:96:8a:7a:28:b4:2f:38:32:03:55:59:71:5d:04:82:
83:ce:6f:da:77:2d:d0:d4:58:bb:50:7e:7b:7a:43:b7:fb:8d:
66:a8:c5:f9:62:a6:e7:79:0a:c2:b7:fd:36:0b:c1:51:3c:ea:
45:71:87:25:2f:96:41:97:77:ba:0a:77:9b:db:30:9c:62:24:
0a:51:e6:dd:64:fa:14:e4:97:c7:a9:af:f6:bc:b8:77:1f:33:
85:c1:2c:be:bd:ae:61:f0:4a:3d:b1:63:29:af:58:be:88:ca:
f4:78:f5:af:8d:17:8a:20:13:bf:71:0f:a5:d2:a5:40:49:32:
24:7e:63:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:05 2023 by rpki-client on console-ams.rpki-client.org