Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/h_X6ok_IYihyH9EmMXthx_7fID0.roa
File: h_X6ok_IYihyH9EmMXthx_7fID0.roa (raw, json)
Hash identifier: LqCNn34vFNpZVZTexr1YnBiWDEnFdj8e1RfJbZhHqe8=
Subject key identifier: 87:F5:FA:A2:4F:C8:62:28:72:1F:D1:26:31:7B:61:C7:FE:DF:20:3D
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018F24CE8AA83B0C4B2116FC36CE671778DB
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/h_X6ok_IYihyH9EmMXthx_7fID0.roa
Signing time: Sun 28 Apr 2024 13:04:26 +0000
ROA not before: Sun 28 Apr 2024 13:04:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 37.218.208.0/21 maxlen: 24
37.218.216.0/21 maxlen: 24
82.163.68.0/22 maxlen: 24
86.104.160.0/22 maxlen: 24
86.104.164.0/22 maxlen: 24
89.46.180.0/22 maxlen: 24
149.126.88.0/22 maxlen: 24
185.86.140.0/23 maxlen: 24
185.86.142.0/23 maxlen: 24
188.215.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 May 2024 06:44:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:24:ce:8a:a8:3b:0c:4b:21:16:fc:36:ce:67:17:78:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Apr 28 13:04:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87f5faa24fc86228721fd126317b61c7fedf203d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:8d:83:87:ad:06:3e:86:0a:e8:96:b7:ce:
bb:bd:26:2f:30:7c:c2:28:59:c4:c5:84:a1:44:d8:
8f:89:37:2f:e0:b3:8f:01:cf:52:9c:1f:29:12:35:
26:3e:b6:99:63:72:57:89:fd:ad:10:c3:68:f1:16:
82:7e:93:74:ef:be:4a:a0:50:51:e8:99:51:3c:48:
b8:e4:ca:b2:ca:a5:cb:16:8e:0d:80:0b:e3:08:5d:
70:80:27:96:45:96:4c:f8:dd:ce:fc:44:c7:34:02:
33:99:8c:b4:b6:06:15:96:cc:f2:2f:88:8b:b0:05:
c4:30:fa:b4:fa:3d:57:cf:f3:7b:d9:c8:d4:71:e0:
aa:9a:3b:fd:22:80:83:ef:84:01:66:34:b7:dc:c6:
c4:ef:95:91:f3:12:d8:27:20:cc:80:49:8e:4b:e6:
80:ee:3f:1b:4a:bc:df:fb:da:93:a3:3a:98:a6:60:
c1:10:2a:75:35:f0:f4:3f:60:6a:54:d4:94:d1:a3:
b5:eb:46:98:c7:fb:6b:f9:5d:0e:d1:e2:0e:e1:68:
e4:4b:80:21:d8:ba:c2:a5:e8:1a:5f:e7:99:54:32:
65:ab:f0:12:75:06:d0:67:89:e5:b4:ed:9b:d6:d1:
e5:46:87:f6:fb:d4:30:f1:37:04:34:ad:33:fe:10:
1d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F5:FA:A2:4F:C8:62:28:72:1F:D1:26:31:7B:61:C7:FE:DF:20:3D
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/h_X6ok_IYihyH9EmMXthx_7fID0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.218.208.0/20
82.163.68.0/22
86.104.160.0/21
89.46.180.0/22
149.126.88.0/22
185.86.140.0/22
188.215.124.0/22
Signature Algorithm: sha256WithRSAEncryption
98:5d:cb:b7:3b:8a:c5:cf:84:3f:14:0d:8e:da:c9:37:f5:62:
02:eb:dd:66:33:81:67:c0:9b:41:46:0f:2c:b7:45:af:4a:e3:
ea:7e:22:b3:08:68:a9:a9:77:d6:07:d3:b2:5b:92:69:89:9e:
44:70:1e:85:18:64:90:ad:e4:eb:e9:ba:9e:ff:6c:c2:f8:fd:
85:ea:83:92:31:df:5f:31:89:f4:3c:bb:57:e2:41:ea:db:fc:
e6:c3:d0:55:3d:81:4d:6c:e3:42:61:a4:81:c7:d8:17:b7:bb:
92:b6:d7:4b:ba:80:06:78:e6:a6:1e:bd:29:6c:9d:94:14:59:
4c:58:92:2d:4a:ed:74:05:77:61:c2:21:90:cb:ae:bb:f7:a4:
7e:05:64:0a:b8:12:12:66:57:56:a9:24:f5:1e:c5:76:8f:be:
32:57:5f:eb:8d:8f:a5:5c:6d:73:2d:d3:b4:2d:8a:67:c8:11:
a9:62:66:c6:94:cb:74:87:1c:ce:db:ed:98:9c:69:6b:09:80:
5a:3c:ec:8a:19:36:f7:a8:b2:a2:63:9f:30:b9:64:fe:c8:64:
58:80:11:73:69:a7:7c:90:13:87:f4:a5:a9:41:d4:7c:2c:d0:
40:d0:05:e2:52:ec:e9:1a:96:87:d3:16:b7:f9:32:94:32:e0:
c8:d2:ba:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 09:26:09 2024 by rpki-client on console-fra.rpki-client.org