Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/VwMIF4bWmwE8rJhKtArs7fUS2oc.roa
File: VwMIF4bWmwE8rJhKtArs7fUS2oc.roa (raw, json)
Hash identifier: BQcbzgz3pwujaQS5FDfNNFKObDZsS/S8bGUsnfDNQEE=
Subject key identifier: 57:03:08:17:86:D6:9B:01:3C:AC:98:4A:B4:0A:EC:ED:F5:12:DA:87
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 018CCA2A40B56BE298C0A222367AE6E9E7C1
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/VwMIF4bWmwE8rJhKtArs7fUS2oc.roa
Signing time: Tue 02 Jan 2024 12:33:35 +0000
ROA not before: Tue 02 Jan 2024 12:33:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15828
IP address blocks: 128.65.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 21:26:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:40:b5:6b:e2:98:c0:a2:22:36:7a:e6:e9:e7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Jan 2 12:33:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5703081786d69b013cac984ab40aecedf512da87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:11:d4:1a:ea:3f:35:2f:7f:8b:4e:4b:bc:
ef:a7:4a:2c:13:04:57:b1:89:8d:85:11:89:14:68:
e8:a3:cc:80:a5:28:61:99:1c:94:b5:84:c5:6e:df:
96:b0:74:b7:27:a7:62:c5:f9:df:98:e5:9d:d9:d5:
73:0f:e6:7c:6f:64:fd:3f:eb:d7:3b:47:36:c1:cd:
2e:58:ad:a7:48:00:8a:1c:e1:9a:8a:7e:5c:4f:40:
0b:93:7f:19:10:9f:50:dd:2e:5d:5b:76:c8:cf:22:
a1:90:a3:38:ea:98:6f:77:99:5e:d2:bc:eb:28:ed:
3a:60:87:3b:fe:a6:0b:67:b2:aa:f3:86:42:76:dc:
50:c3:b4:2f:bc:4d:f3:18:4a:1d:0d:96:d2:dd:a2:
87:09:50:bf:99:e2:70:24:3a:8b:87:1a:77:5f:10:
9e:8b:42:e9:75:f1:1b:95:98:20:d0:6d:e1:e5:a7:
45:45:8b:a1:ba:d1:2e:0d:e8:9d:8a:c5:23:28:8a:
aa:ee:ef:f3:72:b4:0b:de:28:8b:4c:90:f9:7e:7b:
53:1c:39:37:a7:29:e4:4e:86:35:a9:87:d6:07:20:
cf:0b:13:ae:93:6c:6c:c7:13:1f:f3:5e:d9:1a:67:
c5:c2:88:e2:4e:7b:cb:f4:8e:bc:b7:26:08:ed:1a:
b2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:03:08:17:86:D6:9B:01:3C:AC:98:4A:B4:0A:EC:ED:F5:12:DA:87
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/VwMIF4bWmwE8rJhKtArs7fUS2oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.164.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:99:a2:63:9e:cb:99:4f:40:21:2c:c7:1a:f0:b3:d2:56:7d:
8c:80:30:c4:d6:76:fe:14:a3:24:5f:f5:06:ce:bf:cf:46:61:
c0:27:e0:e8:f8:c9:f3:57:e6:6a:15:12:eb:26:65:8b:3f:84:
17:c7:c5:2c:21:73:d5:0e:36:eb:63:9b:ff:3e:75:f9:33:5a:
8f:e0:fe:64:9e:7c:68:3f:33:d3:18:5b:19:1d:a1:8b:6d:e7:
1b:16:23:ba:99:fc:d1:db:c7:b8:27:bd:e0:de:e7:04:31:ea:
37:fc:66:f4:33:b8:b8:f6:a3:dc:57:42:9f:69:9a:68:93:92:
fc:16:98:1f:a3:ad:65:ab:2d:5d:21:90:7e:99:28:3d:74:f6:
1e:a5:68:b4:1d:b8:ea:4d:ed:e0:e8:10:54:d2:75:7e:11:09:
a0:72:29:75:7f:f3:c6:67:3d:81:6a:76:ba:cf:b6:21:ce:8d:
ba:75:a6:be:38:4e:b8:03:71:20:2b:30:f3:ff:56:5c:a3:a2:
7f:91:42:b8:14:8c:34:b4:e2:bc:52:4c:51:b1:c3:d8:99:64:
13:a8:cb:13:59:a7:38:f6:b4:61:6f:2e:b4:33:3a:61:22:ca:
02:31:85:0d:12:42:42:57:94:69:95:b2:22:a6:c4:61:dd:60:
04:fd:f3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:23 2024 by rpki-client on console-fra.rpki-client.org