Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/t5v3S_0a9nRsNp3VdohH4PyOyAw.roa
File: t5v3S_0a9nRsNp3VdohH4PyOyAw.roa (raw, json)
Hash identifier: Fu4LwrI047dJ2gGEZnaCg6HucVnk47QAOehsr+Xo6Tc=
Subject key identifier: B7:9B:F7:4B:FD:1A:F6:74:6C:36:9D:D5:76:88:47:E0:FC:8E:C8:0C
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 018E627DA4DD43BCF2E4D740F904D419B81D
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/t5v3S_0a9nRsNp3VdohH4PyOyAw.roa
Signing time: Thu 21 Mar 2024 19:29:45 +0000
ROA not before: Thu 21 Mar 2024 19:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206119
IP address blocks: 128.65.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 19:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:62:7d:a4:dd:43:bc:f2:e4:d7:40:f9:04:d4:19:b8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Mar 21 19:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b79bf74bfd1af6746c369dd5768847e0fc8ec80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a9:29:61:22:cb:1f:a9:e8:90:e7:cc:42:63:
c3:5e:e0:31:e5:69:d6:36:fc:84:97:b0:ba:0a:4b:
47:2b:c3:96:43:76:02:2c:8a:0a:bd:0d:41:78:ac:
28:7e:db:63:82:b1:8d:27:e5:85:20:0a:ac:6c:21:
77:ec:cf:76:b8:6d:55:7f:e8:4a:b2:c8:7c:9e:72:
1f:63:c5:6c:ff:52:51:e2:5b:3c:5e:0f:1c:9d:da:
eb:50:51:a4:76:3e:8d:c9:b1:7c:bd:78:1a:36:8b:
2d:23:14:fb:27:98:a0:00:fd:38:0e:d3:8e:e2:a7:
93:d5:dc:9e:fb:92:1f:98:2e:1f:4f:1a:c9:c4:17:
25:99:b3:05:78:a2:85:05:47:a1:c4:b1:26:df:7f:
01:ed:23:48:7f:3f:8b:bc:f1:63:a5:88:1a:f1:e2:
62:69:9c:76:bf:98:46:d5:53:c2:c6:d8:9e:7d:3a:
60:56:f9:34:92:ce:05:79:42:99:de:45:b2:e9:4b:
f3:49:f8:0f:29:ce:12:53:c5:6e:94:5e:58:b5:eb:
b6:9e:53:ef:0e:7b:f3:8f:5a:c1:0a:ba:9b:04:61:
83:9c:30:b9:ad:f4:07:01:30:2a:c7:a9:c8:1f:ea:
a9:66:39:b1:c9:b5:92:9a:71:80:2d:c0:87:e8:ca:
b9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9B:F7:4B:FD:1A:F6:74:6C:36:9D:D5:76:88:47:E0:FC:8E:C8:0C
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/t5v3S_0a9nRsNp3VdohH4PyOyAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.172.0/22
Signature Algorithm: sha256WithRSAEncryption
10:fe:49:3c:26:3c:16:60:66:03:bf:d3:5b:57:c4:8f:14:7d:
0f:16:77:dc:1c:66:66:49:59:0c:51:59:80:d0:d4:4b:c6:ee:
fd:7d:9d:9c:a8:f6:5a:ef:1e:f3:e2:79:99:cf:8d:6d:28:1d:
77:51:ae:cc:73:2d:2d:20:f3:de:df:74:84:4b:58:26:35:fb:
a4:d8:d2:88:ce:7a:67:a1:c6:70:9d:67:5a:cc:d4:23:13:a0:
fe:94:b2:f9:71:f8:ad:24:6a:28:34:53:d9:6c:05:89:cf:0c:
c8:1b:06:6f:5f:27:ab:f0:4a:1e:90:c9:cc:87:3e:bb:32:1a:
d0:d4:e8:7f:dc:0e:5b:bb:53:db:56:4a:dc:46:df:34:e7:d6:
b8:d3:79:2c:7d:92:4c:14:c1:cc:da:bf:cb:6f:cb:f1:86:c6:
06:f9:00:d1:42:bf:29:9b:8e:3c:e6:28:0b:57:5c:4e:7b:af:
5e:58:26:7b:36:3c:2e:6c:15:b0:b2:f7:1c:cb:23:df:f5:81:
66:95:77:8e:a7:99:84:cb:65:90:b0:51:5f:ad:39:51:ef:b0:
e2:10:3e:2d:9d:08:62:23:99:f3:a5:62:79:47:17:7f:44:93:
d7:a2:e0:5b:e3:8d:75:78:cb:1b:c5:2c:7b:55:55:aa:61:8b:
41:35:1e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:24 2024 by rpki-client on console-ams.rpki-client.org