Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/2cjPHZq5Ioki9lOfJcgDn6c27lI.roa
File: 2cjPHZq5Ioki9lOfJcgDn6c27lI.roa (raw, json)
Hash identifier: eUY1+EI3dUBoCORWXusj1kSTFs/Sr2KKj2lbt0ajNMs=
Subject key identifier: D9:C8:CF:1D:9A:B9:22:89:22:F6:53:9F:25:C8:03:9F:A7:36:EE:52
Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial: 0192AF81E0FC4AA9C8DA6EF7E1B54B9404F0
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/2cjPHZq5Ioki9lOfJcgDn6c27lI.roa
Signing time: Mon 21 Oct 2024 14:36:17 +0000
ROA not before: Mon 21 Oct 2024 14:36:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4601
IP address blocks: 147.189.216.0/21 maxlen: 21
193.5.16.0/22 maxlen: 22
2a0d:3dc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 10 Nov 2024 14:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:81:e0:fc:4a:a9:c8:da:6e:f7:e1:b5:4b:94:04:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Validity
Not Before: Oct 21 14:36:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9c8cf1d9ab9228922f6539f25c8039fa736ee52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:0e:c0:b2:46:26:a9:62:72:d9:e4:fa:63:
b1:b2:61:5a:38:bd:3c:e0:be:35:d9:cc:0b:f6:c8:
e5:62:11:23:e0:32:d1:fe:17:3c:15:4e:6b:38:33:
ea:8c:c2:fd:50:0f:7c:be:18:89:d3:29:32:e3:5f:
95:b6:eb:a3:1d:aa:f1:b3:e4:bc:c9:44:37:ee:df:
e0:56:1b:5d:72:ce:8c:ff:75:68:dd:8d:2c:1f:ac:
fd:8f:a6:ed:25:8c:ed:e6:fc:48:fa:f2:42:e6:b3:
48:cf:48:93:47:b3:9c:7c:d7:d3:31:d3:bf:65:93:
40:de:cf:80:5d:6c:93:91:a7:d9:3a:ae:0f:59:b6:
b4:a0:e8:3e:5c:87:10:7f:f7:b5:e9:81:e5:95:47:
f2:8c:94:67:ec:f1:75:ab:86:7c:8f:e9:34:5f:60:
65:f2:8c:fc:37:61:fd:7a:ff:06:46:c2:5c:7c:2d:
2b:dd:f5:bd:4d:51:70:b6:5e:c5:8e:b2:f1:1a:32:
f9:35:92:f5:4e:19:9a:6f:58:89:af:3c:34:28:18:
9d:56:61:4a:89:33:24:8d:fa:6c:7f:4c:92:34:e0:
ce:2f:7c:58:8b:b9:19:ca:a0:40:ac:e4:b5:c1:da:
d6:2f:8e:77:41:bd:a0:47:4f:7d:49:7c:10:eb:f7:
6a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C8:CF:1D:9A:B9:22:89:22:F6:53:9F:25:C8:03:9F:A7:36:EE:52
X509v3 Authority Key Identifier:
keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/2cjPHZq5Ioki9lOfJcgDn6c27lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.216.0/21
193.5.16.0/22
IPv6:
2a0d:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
63:49:88:f7:f6:f1:b0:36:44:c0:93:a8:d7:a1:c7:b5:e8:e2:
e2:d1:d2:05:50:fd:98:4e:2d:80:ac:78:32:b0:29:e9:84:d3:
3e:fc:b8:d5:69:45:67:85:ca:8e:66:49:0c:d0:62:d7:37:66:
d4:4d:69:b1:3c:70:2e:7e:b3:34:5a:b3:86:37:dc:01:f6:40:
2e:87:2d:70:98:6b:80:1e:93:1b:d9:98:cc:ce:5e:f9:7d:38:
db:f5:2d:37:54:6a:56:cf:9a:62:1c:ce:da:5d:1c:80:8b:b5:
1a:aa:a1:a2:18:fd:75:a8:cc:c4:2e:b1:6b:a4:d8:08:8e:24:
1a:8e:96:eb:d9:ae:4e:fb:ef:6e:7f:8a:91:fd:81:c9:37:ae:
30:e0:da:25:96:ae:77:c7:9d:8e:83:8d:40:e7:63:e2:70:2b:
f3:48:ec:a2:09:13:63:ab:70:7c:d4:bd:08:50:7d:82:91:16:
c0:07:52:0e:7e:a2:28:96:bb:f5:e8:74:12:65:f8:f1:9d:75:
46:4c:07:fa:14:8e:41:5d:ba:a5:d7:c0:b0:87:ba:b4:ea:42:
f8:4e:2f:3c:a9:8d:0f:94:ef:e2:d3:6e:2d:cc:8a:9b:8a:6b:
5f:43:9d:9a:cd:07:bc:b9:2a:9a:c6:68:2b:1c:b1:e0:81:b3:
87:b6:0b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 17:38:59 2024 by rpki-client on console-ams.rpki-client.org