Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/2BcOlIYgleh0h_aTfnSXiKEU_6o.roa
File: 2BcOlIYgleh0h_aTfnSXiKEU_6o.roa (raw, json)
Hash identifier: sssMZ8AOPwhxHwnasclbCYpmJRmbKr7JpueAYxQ0iNg=
Subject key identifier: D8:17:0E:94:86:20:95:E8:74:87:F6:93:7E:74:97:88:A1:14:FF:AA
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 01856BAEE11FF77789020A3650E79C475520
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/2BcOlIYgleh0h_aTfnSXiKEU_6o.roa
Signing time: Sun 01 Jan 2023 04:55:01 +0000
ROA not before: Sun 01 Jan 2023 04:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39593
IP address blocks: 136.169.210.0/24 maxlen: 24
136.169.210.0/23 maxlen: 23
136.169.208.0/24 maxlen: 24
136.169.208.0/23 maxlen: 23
136.169.211.0/24 maxlen: 24
136.169.208.0/22 maxlen: 22
136.169.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Mar 2023 05:51:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:e1:1f:f7:77:89:02:0a:36:50:e7:9c:47:55:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jan 1 04:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8170e94862095e87487f6937e749788a114ffaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:0a:16:cd:95:8c:7f:bf:05:b7:36:ae:ed:
16:61:6e:fb:e9:4b:d8:7a:2d:8f:de:ca:3e:6b:42:
d4:20:bd:cd:02:dc:71:26:d9:ae:9c:53:ee:96:76:
b4:e7:7b:9a:1a:6a:05:f9:03:5c:99:e4:a4:9f:5e:
88:0d:24:bd:d9:32:af:d7:30:aa:4c:1f:e8:41:50:
ce:9b:db:81:ee:b0:f7:f9:94:42:5f:65:de:8e:39:
8f:fb:24:0d:bc:f4:1b:6d:51:a7:68:eb:c7:64:a8:
08:b5:9e:66:2a:85:f3:c2:b1:9d:91:94:67:c4:40:
16:24:44:e4:b6:0e:66:75:94:71:fd:3f:7d:60:b2:
04:92:9d:f6:9c:36:4a:d4:78:7f:65:d3:e1:7e:c1:
03:2f:b0:04:76:13:fe:76:40:f5:36:9f:c0:0b:10:
54:aa:c6:97:eb:42:34:7f:3a:97:3f:e1:75:b4:b1:
f6:2b:2e:b2:31:24:bd:b9:cc:7d:ac:36:c8:60:35:
3f:ba:4a:d4:4a:15:a0:e6:40:ef:9b:14:2b:57:e2:
f9:2b:65:aa:fb:06:4b:8b:26:7d:b5:2c:25:2d:f9:
4e:71:b7:30:77:a0:aa:57:07:68:2e:2f:42:6a:18:
b0:be:1e:41:96:6e:04:85:64:3e:a6:fe:7b:cd:78:
17:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:17:0E:94:86:20:95:E8:74:87:F6:93:7E:74:97:88:A1:14:FF:AA
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/2BcOlIYgleh0h_aTfnSXiKEU_6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.169.208.0/22
Signature Algorithm: sha256WithRSAEncryption
61:13:6b:58:63:85:4b:82:7b:af:ef:fa:8d:04:03:d5:b0:46:
bc:3e:bb:89:20:82:02:94:7f:fd:4d:d0:af:f4:31:c7:ad:48:
86:22:c0:41:9d:6e:07:93:c8:db:d8:1e:8c:fc:a4:46:a0:a5:
03:11:47:dc:17:c9:5e:2d:bd:ad:b8:cd:3f:aa:cf:2d:1a:c5:
23:cf:20:20:af:1a:0f:9f:5f:3f:3b:8c:9c:93:91:62:73:bc:
fb:89:b5:29:e3:53:bf:b8:1a:f9:70:bd:59:c0:d6:0b:2e:de:
21:4e:ae:9d:0d:26:17:f5:8a:2e:9c:a3:a9:10:a0:01:f5:4a:
2c:1e:84:b5:9f:43:82:81:7c:52:0e:da:2f:6d:9f:44:7b:44:
d9:21:7f:f3:59:85:82:58:f2:52:af:45:3f:95:b3:a1:0c:cb:
d5:80:09:3f:b9:e8:1c:c2:4a:a6:06:21:03:e1:2a:06:d7:aa:
5f:cb:fb:59:f9:80:49:55:bd:d5:02:42:67:3f:53:d0:83:04:
98:d3:30:5a:08:15:ea:ab:57:75:d8:14:3d:9c:dd:f7:3c:b5:
91:e0:d1:6d:35:f8:bd:b8:f9:34:d4:d4:d0:e1:c8:6c:ae:30:
72:14:8f:74:cd:b1:52:e5:79:0a:3d:24:b2:2f:1a:61:05:c6:
8c:69:8f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org