Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/8zMEMFdc-eLjEH80kRr7CEa2amA.roa
File: 8zMEMFdc-eLjEH80kRr7CEa2amA.roa (raw, json)
Hash identifier: /ZmCTUEshWvwuCM96HfE156cJ3UsEKOHIwgoHR+LgC0=
Subject key identifier: F3:33:04:30:57:5C:F9:E2:E3:10:7F:34:91:1A:FB:08:46:B6:6A:60
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 018CCA2A4443899A2295AD50773B3176D101
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/8zMEMFdc-eLjEH80kRr7CEa2amA.roa
Signing time: Tue 02 Jan 2024 12:33:36 +0000
ROA not before: Tue 02 Jan 2024 12:33:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216054
IP address blocks: 128.65.165.0/24 maxlen: 24
194.26.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 21:26:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:44:43:89:9a:22:95:ad:50:77:3b:31:76:d1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Jan 2 12:33:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3330430575cf9e2e3107f34911afb0846b66a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:57:75:be:c5:ec:49:23:49:71:9e:a3:e6:bb:
ec:b3:5d:98:c0:5e:b8:9a:26:45:1f:02:c7:57:19:
e9:e7:ee:79:1a:df:2e:43:86:4a:1a:aa:75:1c:62:
79:cd:a0:51:21:3e:3c:08:64:38:a7:36:f2:95:2b:
1d:cf:0d:51:c4:65:79:4a:8c:69:da:9e:1f:c3:7f:
ba:ed:92:13:fc:2e:62:ce:f0:73:a2:84:e4:f0:f9:
40:c7:99:b1:e8:08:0c:6e:6d:05:09:01:e5:d2:c1:
4f:f7:60:40:1b:b3:f6:fe:13:6d:ee:d1:60:df:f2:
42:4b:bd:bc:4d:9a:e8:b6:62:c6:bf:e8:08:e4:69:
e6:87:f2:7c:e5:1c:e9:d9:f0:9c:de:a3:a3:75:34:
f8:65:91:62:b7:5b:1b:ae:76:49:30:e1:75:46:11:
81:16:0b:b8:0d:17:54:9b:33:7e:6d:9c:46:e9:36:
09:81:bc:8a:c7:0c:40:a9:47:db:7d:a9:94:98:63:
07:1d:0a:da:c1:2b:cc:c8:2c:36:c8:db:0e:55:33:
8a:5d:5e:66:7b:05:9b:0a:79:1f:19:d5:af:8a:57:
90:7a:0a:d0:12:6e:dc:b5:1a:0b:20:19:8a:c6:3b:
f5:7c:03:98:2b:c7:0f:46:43:31:ae:ee:dd:00:49:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:33:04:30:57:5C:F9:E2:E3:10:7F:34:91:1A:FB:08:46:B6:6A:60
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/8zMEMFdc-eLjEH80kRr7CEa2amA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.165.0/24
194.26.21.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:3d:41:f0:8a:20:b9:db:98:2d:46:c6:77:74:2f:4d:1c:a6:
e3:72:35:96:6d:8b:18:f1:c4:49:78:8c:5c:11:26:7a:29:2f:
45:98:28:e5:ea:64:36:87:d9:10:2e:8a:be:23:05:1d:b6:7a:
b3:c9:b1:7f:bd:9a:8a:b4:fa:cd:a3:f3:d9:35:c0:84:92:22:
a2:f9:03:75:30:b9:16:3e:ff:87:5c:e9:3c:fa:6e:9f:69:61:
b4:5a:6a:96:cb:08:f8:35:28:33:64:1d:56:6e:66:7b:8a:af:
4c:13:94:e3:b1:ea:8b:4f:a3:b5:75:db:57:92:d9:58:86:98:
17:21:32:96:37:d8:9c:0f:3d:4d:63:ab:9c:c7:9f:3e:2d:5e:
6e:ab:ae:fa:f5:d7:68:db:00:d2:a7:1a:84:93:65:36:73:b1:
56:02:aa:14:55:ff:fe:ae:4e:6c:35:67:80:89:2d:2c:dd:c2:
95:cd:f1:65:ff:c6:ab:cd:3f:5f:8f:a9:cf:0e:af:68:13:17:
fe:6c:14:66:17:4c:a3:1c:60:ee:30:43:88:2c:47:f7:7c:6b:
c1:9e:93:b3:99:51:b4:5a:e2:ac:49:1e:f9:9f:13:4c:7d:e0:
da:9e:22:1a:8e:8c:0c:20:6e:51:6d:a6:3a:b9:b9:d3:0d:cf:
fa:d1:ae:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:24 2024 by rpki-client on console-ams.rpki-client.org