Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/j3L3yD1utcXzSKjYEwHrvXVyKoU.roa
File: j3L3yD1utcXzSKjYEwHrvXVyKoU.roa (raw, json)
Hash identifier: VOeyVk9n7Ws521gWMahQGcMdJ4/mxfSYKVqOs1KKRXc=
Subject key identifier: 8F:72:F7:C8:3D:6E:B5:C5:F3:48:A8:D8:13:01:EB:BD:75:72:2A:85
Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial: 018751B7D0FAE3CED967355F3B623F5B9CF9
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/j3L3yD1utcXzSKjYEwHrvXVyKoU.roa
Signing time: Wed 05 Apr 2023 14:00:13 +0000
ROA not before: Wed 05 Apr 2023 14:00:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 132.76.0.0/16 maxlen: 16
132.76.150.0/24 maxlen: 24
132.77.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Sun 07 May 2023 14:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:b7:d0:fa:e3:ce:d9:67:35:5f:3b:62:3f:5b:9c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Validity
Not Before: Apr 5 14:00:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f72f7c83d6eb5c5f348a8d81301ebbd75722a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:10:66:11:40:1b:93:64:b7:f8:b2:09:91:
33:14:a5:92:3e:4c:c6:71:a8:4e:66:6d:ac:b0:de:
0c:aa:e0:cc:ba:61:6a:04:46:9e:8e:6b:7c:a1:1b:
e9:8a:31:44:2a:18:e3:ca:e7:62:36:4e:48:a2:4f:
95:92:44:98:86:86:b3:63:c6:b3:f4:9a:09:11:f8:
93:ab:90:32:28:3f:6a:b2:64:22:35:77:e4:c9:d6:
3e:3d:9e:c6:6f:97:8f:b5:36:97:59:34:8e:82:36:
69:df:d2:5b:d4:0d:fe:13:cf:40:cd:51:a6:11:cd:
2b:b7:71:7a:67:b4:c4:b6:9a:d5:56:ea:cf:3b:ff:
91:19:61:10:05:12:d8:eb:fe:fc:46:36:3d:a5:bf:
10:90:ef:15:3a:9f:c1:f2:96:a0:3a:cb:b8:19:8b:
a6:1b:5b:47:0c:64:3c:bf:aa:74:c7:12:3b:68:3d:
54:bc:87:f3:d4:3a:e9:84:0e:92:4e:37:44:e3:5f:
fd:a4:83:14:48:cb:64:a2:5d:69:72:33:a0:33:55:
32:5d:8c:cb:ec:bc:1a:b3:60:ea:89:63:90:58:1b:
fe:22:a8:d8:87:4c:82:33:94:27:3a:f7:3b:2f:25:
a4:15:90:b6:98:04:68:28:eb:b2:0c:d0:91:dd:e6:
0e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:72:F7:C8:3D:6E:B5:C5:F3:48:A8:D8:13:01:EB:BD:75:72:2A:85
X509v3 Authority Key Identifier:
keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/j3L3yD1utcXzSKjYEwHrvXVyKoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.76.0.0/15
Signature Algorithm: sha256WithRSAEncryption
5d:6c:86:d6:4a:80:57:08:4b:33:f7:ec:0a:09:18:7b:62:8b:
64:8f:4f:b7:9d:31:1f:04:f5:b6:7a:b9:93:35:51:58:be:56:
56:7b:59:86:05:8b:b3:e4:22:57:57:0a:b0:91:6b:28:f1:6a:
eb:b8:16:67:7c:40:0c:85:07:88:70:93:bf:5e:b7:d2:c3:92:
d1:c0:10:f9:c3:da:be:49:aa:a9:4f:2a:eb:0a:25:b0:8f:8a:
09:b7:f2:27:21:27:74:b9:c8:80:49:bf:33:f8:43:9d:f6:5f:
49:34:45:c8:9c:96:85:0b:d2:3d:7d:45:6f:36:ac:15:88:83:
e4:fb:27:42:24:80:31:a5:64:ec:38:be:52:a9:89:08:61:6c:
ea:f7:65:e9:b4:be:2d:a4:59:1f:b7:c5:11:81:da:5b:10:ca:
7f:f3:0b:4e:62:cb:10:ca:49:76:b3:ad:72:77:78:3d:a9:b4:
61:45:73:7a:62:db:6e:6d:2c:7c:8c:e3:bd:43:b5:e7:8a:4c:
15:46:3a:fb:50:40:19:94:27:27:db:f2:4c:4f:de:4d:42:b9:
80:c3:9d:b0:2b:95:30:57:dd:7f:2e:61:73:27:f2:c7:01:c7:
0a:65:04:f9:5f:ec:3c:19:53:e6:65:a0:9c:e0:02:0d:e4:63:
73:f3:f3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:05 2024 by rpki-client on console-ams.rpki-client.org