Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/KEyJYJkYssQ2BPnqwQ1OU3OzfDg.roa
File: KEyJYJkYssQ2BPnqwQ1OU3OzfDg.roa (raw, json)
Hash identifier: ZPZyHDsFIgiITQ4nUK5jkZBe/ebl2IPIBt0Yqhs0t9M=
Subject key identifier: 28:4C:89:60:99:18:B2:C4:36:04:F9:EA:C1:0D:4E:53:73:B3:7C:38
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 01856B934DB09ED3953DE269F7E0B1A1A66A
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/KEyJYJkYssQ2BPnqwQ1OU3OzfDg.roa
Signing time: Sun 01 Jan 2023 04:24:53 +0000
ROA not before: Sun 01 Jan 2023 04:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47886
IP address blocks: 88.84.152.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:4d:b0:9e:d3:95:3d:e2:69:f7:e0:b1:a1:a6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Jan 1 04:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=284c89609918b2c43604f9eac10d4e5373b37c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:eb:05:e5:8a:27:fb:fb:2f:8b:f5:d7:49:
ba:9c:14:a7:33:07:29:cb:77:69:ff:65:06:48:0a:
4b:81:00:a2:ed:8e:ad:b1:76:65:1d:42:cc:73:38:
4d:d8:92:43:9d:70:de:13:32:3a:04:b9:af:05:62:
a6:3a:52:0c:ad:92:ac:cc:2c:30:bf:67:83:88:26:
e4:79:b2:f1:62:7b:62:8b:06:51:9d:1b:3c:3e:46:
85:26:05:14:f7:fa:cb:f1:ca:22:ca:50:b9:92:61:
cc:a6:00:61:16:d1:04:99:28:03:54:bd:d6:c3:ad:
f4:de:fc:04:bb:71:d9:11:da:a3:4e:d2:71:2a:94:
42:9f:94:9e:75:eb:5f:97:37:cf:81:19:9c:1d:6a:
3a:d3:dd:9d:b2:85:94:82:37:f3:2c:bc:e7:da:0f:
32:53:cb:65:a6:a4:61:a4:09:2b:1b:f9:52:dc:aa:
54:2f:9d:74:74:fd:68:16:8c:43:cb:41:18:b6:3e:
69:53:2c:ba:cd:b2:f9:74:c2:46:3c:88:18:1c:a2:
3c:8a:d5:49:7b:e3:b5:c8:d0:ae:08:f4:c5:20:71:
30:b0:03:9f:3b:c1:09:3f:4e:e6:b5:4b:cc:78:14:
e6:f5:dd:ee:86:07:cd:f6:a8:0c:6c:a1:e3:ba:09:
63:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4C:89:60:99:18:B2:C4:36:04:F9:EA:C1:0D:4E:53:73:B3:7C:38
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/KEyJYJkYssQ2BPnqwQ1OU3OzfDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.84.152.0/21
Signature Algorithm: sha256WithRSAEncryption
81:28:1e:b8:ef:30:06:87:3d:b1:7b:71:64:fe:30:06:7c:bf:
b5:d1:26:09:03:ff:2c:19:03:32:54:c4:e8:fd:9e:69:d0:28:
1d:2c:b8:6d:67:d5:00:4f:00:4c:e7:02:2b:de:bb:ca:41:af:
bc:69:c9:e9:0e:b6:1a:ee:86:4b:66:ee:c6:eb:18:3b:24:ee:
a5:89:6e:25:1d:21:14:b5:d6:c7:44:d6:f0:03:77:cb:27:86:
d9:7b:03:af:31:e3:63:4a:ef:c0:0c:b1:6f:15:70:00:b7:8a:
f3:f9:12:95:95:20:08:91:1d:2b:f7:ae:b7:58:1e:cf:ea:a6:
25:64:f1:34:45:70:d9:55:12:53:10:7d:ff:db:cc:d9:72:2a:
a6:49:3f:22:f0:d3:db:32:74:95:0a:d7:4f:2b:a5:27:7b:f6:
bd:a3:4a:9b:85:87:49:02:c5:12:d2:3f:1d:4b:02:7a:19:a5:
8b:42:4a:fa:39:8a:9d:97:95:59:e4:21:2c:58:9f:a7:4f:50:
bb:05:d9:5a:bf:b4:c4:98:11:ff:5e:0b:60:9b:9e:3b:18:87:
57:92:35:22:54:e6:07:26:57:85:00:92:95:96:7f:35:0e:d7:
24:19:c3:a2:83:9d:93:32:4f:51:80:f0:22:36:ce:7a:56:7b:
9f:77:e8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:07 2024 by rpki-client on console-ams.rpki-client.org