Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/AJu2s0xiKTjaKaVFPxdMiy6v72c.roa
File: AJu2s0xiKTjaKaVFPxdMiy6v72c.roa (raw, json)
Hash identifier: FWqf3lO/MTbayOGh3t6bDlYgJ++3yJi7+V2+lgszXQs=
Subject key identifier: 00:9B:B6:B3:4C:62:29:38:DA:29:A5:45:3F:17:4C:8B:2E:AF:EF:67
Certificate issuer: /CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Certificate serial: 01946FC59342D699C6B47CF1FE9E82567AC3
Authority key identifier: 8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/AJu2s0xiKTjaKaVFPxdMiy6v72c.roa
Signing time: Thu 16 Jan 2025 15:40:06 +0000
ROA not before: Thu 16 Jan 2025 15:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206114
IP address blocks: 87.255.160.0/19 maxlen: 19
87.255.189.0/24 maxlen: 24
2a04:2800::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 20 Jan 2025 15:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:c5:93:42:d6:99:c6:b4:7c:f1:fe:9e:82:56:7a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Validity
Not Before: Jan 16 15:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=009bb6b34c622938da29a5453f174c8b2eafef67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:db:dd:97:62:58:44:10:1f:4b:2c:48:95:f7:
51:37:46:69:a1:bb:6c:91:ef:7b:86:22:74:b8:0b:
39:d0:df:b5:1b:92:b9:73:4d:36:8a:47:58:2d:77:
df:01:95:28:55:a9:3c:0d:af:a6:ea:c5:0b:2a:42:
59:46:71:f2:96:09:bc:a8:fb:6a:37:71:56:a6:6a:
2d:fd:97:21:c6:b1:d3:3c:26:26:09:b4:35:2d:ae:
c7:bf:e0:b9:20:ba:6f:86:9b:c3:5d:ca:6a:a4:e7:
c7:0a:6f:60:ec:cd:b1:c9:67:d4:fa:16:2c:7f:14:
f7:4f:78:a3:05:1f:0d:02:24:dc:50:10:c9:c3:cf:
e7:c9:f7:15:89:22:8e:34:0b:94:db:c4:10:1c:51:
dc:cc:b5:72:a0:a4:4b:27:17:7d:89:44:98:22:2c:
34:25:e0:12:24:3f:f5:15:af:f0:a2:68:e2:1c:46:
87:d3:7c:6f:f5:50:a7:c5:21:64:64:8f:84:ee:71:
fd:0e:88:1a:3d:45:ed:a1:6b:71:a0:7f:c2:a2:a6:
a8:a7:b9:2f:dc:c9:c6:f6:80:92:63:7a:a9:40:61:
7e:a7:cc:fe:cc:78:6d:69:88:4d:42:cd:da:45:e3:
98:43:48:46:df:f2:93:1e:20:2c:51:4c:72:6e:f0:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9B:B6:B3:4C:62:29:38:DA:29:A5:45:3F:17:4C:8B:2E:AF:EF:67
X509v3 Authority Key Identifier:
keyid:8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/AJu2s0xiKTjaKaVFPxdMiy6v72c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.255.160.0/19
IPv6:
2a04:2800::/29
Signature Algorithm: sha256WithRSAEncryption
6c:b5:a0:ef:cd:d2:06:4b:d4:21:68:04:e8:f4:b0:a0:4d:10:
29:0f:63:cc:a1:7d:31:ea:81:fe:71:ca:23:92:c2:60:af:c7:
35:09:b9:34:49:9e:95:8e:d4:22:9e:81:8e:c5:09:f0:c3:2a:
3c:60:6d:f6:dc:99:7c:a9:e6:3b:da:90:3a:9f:00:74:3a:25:
d3:bb:5c:5a:39:09:e9:62:53:55:05:64:64:97:45:d0:aa:0d:
3f:58:c4:79:31:6b:b4:77:8c:19:ae:12:61:3a:1e:20:68:bf:
c4:2c:d5:a1:4b:93:53:d6:3b:6e:71:8f:95:f4:fe:e5:fd:95:
89:e1:88:59:b3:ca:27:90:f4:d2:b4:8d:04:f4:f4:26:d9:e9:
69:f5:29:3c:6e:10:cb:e1:09:e1:89:e2:0d:7c:8e:fa:5e:0f:
14:14:f8:aa:14:e0:b7:0a:22:db:98:13:98:41:e0:8c:0e:34:
fd:41:2b:ea:2a:05:39:48:de:ce:b5:0a:2d:29:e3:1f:b9:e3:
d2:47:a1:2c:14:a3:ef:05:8a:1b:dc:1c:6b:f3:08:e0:eb:a4:
ae:b9:03:c2:ad:ba:9f:4e:d1:1b:f4:8e:1e:70:26:a5:57:c5:
96:67:39:be:c5:68:f1:29:09:cd:27:26:96:69:38:94:1c:bc:
c1:5b:1e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 20 19:38:48 2025 by rpki-client on console.sobornost.net