Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/J2Bdoypvx3Zn0zPTMBGVW55zrcY.roa
File: J2Bdoypvx3Zn0zPTMBGVW55zrcY.roa (raw, json)
Hash identifier: XKiikjLOVPi4mrsPq8/myfIK0S3RLDhGRgpp7Isuxzs=
Subject key identifier: 27:60:5D:A3:2A:6F:C7:76:67:D3:33:D3:30:11:95:5B:9E:73:AD:C6
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 018DB4A450AFCDC5E9D1DD17C88755840B0A
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/J2Bdoypvx3Zn0zPTMBGVW55zrcY.roa
Signing time: Sat 17 Feb 2024 01:18:03 +0000
ROA not before: Sat 17 Feb 2024 01:18:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 128.65.164.0/24 maxlen: 24
128.65.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 15:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b4:a4:50:af:cd:c5:e9:d1:dd:17:c8:87:55:84:0b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Feb 17 01:18:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27605da32a6fc77667d333d33011955b9e73adc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9c:e9:3a:00:2f:06:8a:2c:93:7c:84:69:91:
ce:54:77:7c:16:a1:1a:00:06:32:07:6d:54:c4:21:
1a:eb:9b:ef:3f:ad:dd:13:fb:b6:c3:52:0e:bd:de:
91:4d:0d:de:85:c1:aa:d5:7d:e8:ec:1a:e8:e2:be:
63:2b:e3:de:df:b5:dd:b1:1b:cc:83:b7:25:ab:56:
52:a8:2c:94:a9:21:8c:4e:ec:a6:d0:8b:a8:ec:98:
9b:6c:e6:e5:97:49:44:64:b1:a5:b6:59:f1:5b:76:
5d:69:17:8b:7b:18:bf:cd:23:6c:1d:0c:da:c0:77:
b9:29:ec:1c:93:be:4c:dd:2d:73:e3:0a:1e:ca:0f:
c6:41:d9:41:6c:29:f0:fd:5a:ba:95:14:df:c9:8a:
c7:11:07:3b:2b:87:98:db:9d:d3:5f:ac:66:89:40:
a4:c1:ad:33:a3:73:06:2e:1e:1b:6f:c8:f1:33:f4:
fc:54:91:de:c9:42:f1:48:2d:5a:67:64:15:df:bf:
53:05:56:a2:b2:12:ad:b3:36:e0:d0:c3:3c:6f:bb:
cb:32:00:b9:29:d1:ee:d2:17:5e:4c:d1:25:32:b7:
74:26:5c:57:7e:9d:82:a3:2b:58:c6:06:57:ee:87:
c0:03:ba:a1:af:61:bc:5d:ec:e3:19:10:97:f7:dc:
e9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:60:5D:A3:2A:6F:C7:76:67:D3:33:D3:30:11:95:5B:9E:73:AD:C6
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/J2Bdoypvx3Zn0zPTMBGVW55zrcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.164.0/24
128.65.168.0/24
Signature Algorithm: sha256WithRSAEncryption
83:66:77:f2:f4:11:6e:10:1c:3e:51:dd:6f:2b:b4:bd:d9:f6:
76:01:e9:28:19:9e:61:da:65:58:31:6c:b4:fe:1d:b7:38:3d:
67:09:0b:48:c1:89:cd:2c:77:7a:47:da:d3:36:1a:30:c9:54:
06:7f:9b:0a:ff:59:1c:58:fd:45:39:bc:7e:3d:96:12:69:ba:
b6:47:f5:71:0d:3f:e4:d8:99:3e:12:ea:4c:16:27:e5:ee:cd:
48:71:41:76:bc:a3:9f:ff:2e:12:b4:53:25:33:a9:7d:b6:e4:
1c:c8:7b:bf:96:0b:8c:01:4d:6c:ba:a9:45:b5:7e:52:1e:34:
76:fe:2a:f5:0c:37:c4:c6:96:3a:33:3e:5c:7f:25:df:1f:12:
01:9c:a7:67:2a:d8:3c:ea:8a:53:da:00:47:7f:3d:3e:3d:55:
4e:f1:d2:28:1a:f8:04:66:4a:e2:fa:25:26:bb:67:96:3a:b0:
63:34:ae:c3:89:5c:7d:f3:03:0f:c4:ed:93:a9:81:e7:1d:9c:
c2:eb:26:17:81:b1:9f:f2:0f:c8:ca:b9:58:03:a7:a3:1b:09:
6a:47:df:b5:14:4f:2f:91:8b:3e:57:fa:42:6f:dc:5e:23:19:
08:10:cf:e4:1d:25:b1:54:51:e0:ca:10:1e:50:6c:bb:46:dd:
ad:3f:cd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:23 2024 by rpki-client on console-fra.rpki-client.org