Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/648xSwp7I8i7_tXgVFNX4qWj7iE.roa
File: 648xSwp7I8i7_tXgVFNX4qWj7iE.roa (raw, json)
Hash identifier: BlSiWdv7ABkRPuI+9LgLlk3tDeQ3gNL3T+yKC+w2QG4=
Subject key identifier: EB:8F:31:4B:0A:7B:23:C8:BB:FE:D5:E0:54:53:57:E2:A5:A3:EE:21
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 01856CCB0F53C1986E40493EEFAD4CE6E165
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/648xSwp7I8i7_tXgVFNX4qWj7iE.roa
Signing time: Sun 01 Jan 2023 10:05:25 +0000
ROA not before: Sun 01 Jan 2023 10:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206452
IP address blocks: 188.74.40.0/22 maxlen: 22
2a03:4b27:d000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 19 Oct 2023 13:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:0f:53:c1:98:6e:40:49:3e:ef:ad:4c:e6:e1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Jan 1 10:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb8f314b0a7b23c8bbfed5e0545357e2a5a3ee21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:ef:2d:98:f2:7e:b7:b8:ad:40:a9:a4:39:
cf:b4:7c:79:d2:ef:1e:b7:63:aa:dc:d6:85:3e:cd:
68:c5:59:32:57:cb:95:e0:99:29:c0:68:9e:c4:9b:
4f:79:76:8b:bf:1d:c2:e8:2a:4c:19:dc:04:ec:81:
49:60:46:47:b4:eb:b9:3a:22:9e:6a:f8:1e:f4:03:
da:87:83:8d:fd:b9:1e:83:29:6a:6b:5f:e8:45:06:
45:ba:4f:9c:f8:f8:31:e4:72:1a:36:20:75:b1:01:
1b:1b:33:53:0f:78:5f:03:9a:34:55:bc:75:fd:57:
ea:26:d2:33:54:eb:dc:d6:d8:57:c3:09:dd:08:af:
22:6a:87:85:5f:86:98:85:7d:14:09:b8:a2:96:ee:
73:2d:ff:0e:50:fa:16:58:de:f7:bb:7c:4d:e0:7f:
ad:10:a2:a1:02:34:50:99:75:8c:6f:de:c0:1d:9f:
f4:62:56:3c:c6:79:39:7a:e0:61:51:74:e1:ac:0b:
7e:46:61:9c:23:e2:35:d1:b1:7a:0b:2d:86:7c:79:
70:6d:ad:c8:11:46:0b:5a:fd:35:47:76:d3:cb:96:
b7:ad:0b:29:2d:18:b0:83:d8:3a:fe:13:c7:05:b8:
c9:53:94:77:db:b6:df:27:d4:c8:67:46:55:b8:ae:
12:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8F:31:4B:0A:7B:23:C8:BB:FE:D5:E0:54:53:57:E2:A5:A3:EE:21
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/648xSwp7I8i7_tXgVFNX4qWj7iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.74.40.0/22
IPv6:
2a03:4b27:d000::/36
Signature Algorithm: sha256WithRSAEncryption
56:09:ca:5b:b9:21:cd:25:75:13:13:b8:91:a5:de:b7:e2:23:
a5:6c:67:bf:0e:63:47:95:45:5d:55:3b:09:a3:85:83:b4:b1:
91:12:b6:65:53:82:77:fa:a7:69:40:39:e5:57:fc:6e:9a:34:
af:5f:4e:2d:05:c8:f5:2f:4e:de:69:28:f2:a6:9b:1f:da:b6:
ba:5d:70:45:cf:a7:a9:7b:44:89:bf:29:46:d1:e0:f9:08:68:
2b:62:f3:06:68:8c:4c:2f:61:ee:1f:29:b7:e9:fa:5d:a9:e0:
34:a9:a4:ee:e7:90:26:3b:a1:94:7d:db:93:4b:1d:13:c6:50:
83:70:7c:58:19:7d:91:89:19:ed:41:a6:8c:18:96:aa:84:70:
d5:a2:b6:a0:fe:02:25:37:d5:4e:21:aa:c9:e0:79:52:58:03:
20:ca:fe:02:03:36:50:1a:84:63:99:f8:1d:59:13:22:12:77:
8f:e0:ea:c6:95:dd:96:51:95:26:d5:e4:b4:bf:45:69:d2:f3:
c2:ff:f4:62:41:48:b5:37:99:fd:ed:37:e9:a2:37:18:89:ba:
bd:c1:ec:d9:10:ea:6d:05:ec:47:54:f6:0d:aa:2a:93:75:4e:
55:84:6e:63:ed:c7:ed:b5:b7:db:2a:9a:93:f9:b3:fa:e8:41:
57:41:39:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:27 2024 by rpki-client on console-ams.rpki-client.org