Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/iBuVSf1QBVV-ova2PJdPIW1KH0M.roa
File: iBuVSf1QBVV-ova2PJdPIW1KH0M.roa (raw, json)
Hash identifier: IiJ6VaPc6tRCEMqhDN8ouTFsvHzFgzqfi7nrkEUKvNU=
Subject key identifier: 88:1B:95:49:FD:50:05:55:7E:A2:F6:B6:3C:97:4F:21:6D:4A:1F:43
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 01856BAEC83B439780BAF09D7F0DC918141B
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/iBuVSf1QBVV-ova2PJdPIW1KH0M.roa
Signing time: Sun 01 Jan 2023 04:54:54 +0000
ROA not before: Sun 01 Jan 2023 04:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28997
IP address blocks: 83.136.16.0/21 maxlen: 24
193.29.248.0/23 maxlen: 24
193.30.6.0/23 maxlen: 24
2a03:7000::/32 maxlen: 56
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:c8:3b:43:97:80:ba:f0:9d:7f:0d:c9:18:14:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Jan 1 04:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=881b9549fd5005557ea2f6b63c974f216d4a1f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:d5:5b:75:b6:a2:d7:8f:57:05:6b:65:54:
00:94:4f:ad:7e:f2:cb:c0:b4:af:4e:9e:ac:da:df:
68:d5:35:09:5b:99:30:e8:f2:c1:00:c3:47:84:7e:
c7:1a:7e:22:16:1d:4d:31:01:97:4c:a2:66:d7:ab:
10:69:52:45:66:53:0f:f9:cc:9a:7b:d5:78:08:97:
47:95:e7:b1:5b:6e:c8:27:ea:76:3a:c0:c5:94:6a:
5a:0a:ef:93:c6:d8:9d:1e:1f:1d:1b:c9:34:4e:93:
cb:be:45:c0:64:e5:4e:42:be:c2:3c:e7:0c:2d:e3:
de:72:aa:55:e5:31:58:75:52:9c:9b:cf:31:07:75:
4c:7c:55:2c:6d:30:12:27:9b:84:da:31:37:53:5a:
6e:8c:ae:12:c8:37:0a:dc:a7:b2:f0:5e:c6:02:6a:
f4:8e:99:0e:11:04:21:17:8c:e0:03:fb:3b:f6:29:
1d:39:fa:0a:d1:0e:27:f2:bc:98:42:66:19:a1:02:
ff:fd:0b:d0:60:ea:c7:e2:ab:93:22:5b:d0:f5:cc:
95:30:32:e6:d7:e0:8c:16:de:5c:fd:ab:a3:4c:76:
98:c8:94:e2:b9:1e:f6:33:bf:84:e1:7e:ad:31:d5:
aa:1a:64:8e:4e:9c:00:25:74:9c:94:26:23:7a:9a:
8c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1B:95:49:FD:50:05:55:7E:A2:F6:B6:3C:97:4F:21:6D:4A:1F:43
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/iBuVSf1QBVV-ova2PJdPIW1KH0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.16.0/21
193.29.248.0/23
193.30.6.0/23
IPv6:
2a03:7000::/32
Signature Algorithm: sha256WithRSAEncryption
11:da:77:f1:82:31:66:97:ca:a0:86:c4:a2:14:00:3e:c3:6b:
4f:bb:e8:5e:5f:d3:ad:dc:70:fb:66:57:ce:40:83:49:65:a2:
f3:5d:ac:7b:49:76:4c:63:55:af:ff:8b:1d:a2:fb:92:27:3e:
58:f4:e0:d5:94:e8:5f:5a:66:0e:4d:a1:4d:b4:b3:bc:dd:ae:
c0:5b:62:c0:d3:f6:0e:dd:d9:1d:2f:70:df:c0:6e:92:0d:b5:
17:e0:e4:1c:28:1e:20:64:d6:a3:d0:aa:ab:b5:b7:b1:7d:58:
56:53:6b:21:af:79:c4:75:09:72:60:54:9f:6c:e5:49:b2:53:
26:30:a3:30:ef:74:57:38:d0:c5:74:50:2d:21:56:f6:ad:dc:
ca:64:61:31:a1:a1:48:e9:7a:d0:9a:c6:3c:85:7a:13:0f:dc:
c0:a2:f1:5f:44:07:6a:86:87:8c:bc:c8:05:3f:9d:cd:cd:70:
86:90:14:f9:b1:09:03:43:29:0a:f5:1b:03:ac:26:23:ee:b4:
4c:ca:50:d6:3c:17:70:6d:2a:97:f5:7d:ed:af:27:e3:32:3b:
24:0e:38:6f:9e:23:0d:97:5c:61:93:56:50:f1:b6:62:6e:02:
36:3a:10:c0:f1:f7:4c:ca:e5:a4:7e:01:ca:47:fb:a6:b8:83:
c9:9f:3a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:08 2024 by rpki-client on console-fra.rpki-client.org