Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/_v29Kt24LgrYW5pwiVnZYUrqmOg.roa
File: _v29Kt24LgrYW5pwiVnZYUrqmOg.roa (raw, json)
Hash identifier: wvE3ysdHpGAISIc73G9Tb3BnfePcPMpIZJmLEZaiEoU=
Subject key identifier: FE:FD:BD:2A:DD:B8:2E:0A:D8:5B:9A:70:89:59:D9:61:4A:EA:98:E8
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 0186C54277C9D63394DCA5A2B014E6CCDA00
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/_v29Kt24LgrYW5pwiVnZYUrqmOg.roa
Signing time: Thu 09 Mar 2023 07:25:12 +0000
ROA not before: Thu 09 Mar 2023 07:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54994
IP address blocks: 163.171.64.0/24 maxlen: 24
163.171.67.0/24 maxlen: 24
163.171.70.0/24 maxlen: 24
163.171.71.0/24 maxlen: 24
163.171.222.0/24 maxlen: 24
163.171.231.0/24 maxlen: 24
163.171.252.0/24 maxlen: 24
163.171.166.0/24 maxlen: 24
93.188.135.0/24 maxlen: 24
163.171.177.0/24 maxlen: 24
163.171.182.0/24 maxlen: 24
163.171.188.0/24 maxlen: 24
148.253.231.0/24 maxlen: 24
148.253.232.0/24 maxlen: 24
148.253.233.0/24 maxlen: 24
148.253.237.0/24 maxlen: 24
148.253.234.0/24 maxlen: 24
148.253.235.0/24 maxlen: 24
148.253.246.0/24 maxlen: 24
148.253.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Mar 2023 04:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:42:77:c9:d6:33:94:dc:a5:a2:b0:14:e6:cc:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Mar 9 07:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fefdbd2addb82e0ad85b9a708959d9614aea98e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4e:c4:77:df:d5:67:c1:60:a1:dd:8f:85:2a:
04:2d:f5:7f:e8:93:6f:c9:ef:e8:52:af:e4:e7:63:
bd:3c:67:9a:20:7e:ec:08:61:77:9f:ea:28:5c:74:
f2:f9:a1:87:b4:1f:7c:69:9a:d3:79:b2:03:2a:83:
1c:b9:5e:12:e2:fe:c6:d8:5c:07:cd:50:1f:e9:f8:
35:4a:3c:94:ef:b5:32:94:fd:0a:64:89:b2:bd:e4:
df:d4:bc:87:1e:68:20:36:b0:ad:2c:2f:04:2d:6a:
7e:80:76:90:9e:6a:d1:2c:58:cd:cf:b9:1a:39:15:
c0:c9:bd:5f:02:2b:5f:64:1d:31:56:6e:9b:34:a1:
bf:16:2f:1e:73:43:90:69:d7:24:4c:4c:97:34:c4:
8a:fc:96:7e:a6:3c:37:e1:d6:ba:79:f0:50:db:0e:
52:52:f1:24:ea:f5:f9:8b:91:e8:c5:39:4b:db:6d:
12:fd:fb:cc:cd:f2:8a:e9:81:d2:a1:cb:28:9a:bf:
29:8c:a4:85:57:62:53:60:3f:f2:e6:53:38:99:c9:
b9:1e:cf:fc:ac:7d:9e:73:28:e5:f7:d5:96:54:8b:
1a:7d:2f:8e:07:79:93:68:30:cd:0d:15:09:ef:6b:
6a:5b:13:f3:69:6e:ec:d6:94:5d:b2:36:e7:9a:ef:
cf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FD:BD:2A:DD:B8:2E:0A:D8:5B:9A:70:89:59:D9:61:4A:EA:98:E8
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/_v29Kt24LgrYW5pwiVnZYUrqmOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.135.0/24
148.253.34.0/24
148.253.231.0-148.253.235.255
148.253.237.0/24
148.253.246.0/24
163.171.64.0/24
163.171.67.0/24
163.171.70.0/23
163.171.166.0/24
163.171.177.0/24
163.171.182.0/24
163.171.188.0/24
163.171.222.0/24
163.171.231.0/24
163.171.252.0/24
Signature Algorithm: sha256WithRSAEncryption
76:bd:eb:ae:7f:65:f5:30:20:49:2b:d6:a5:e8:9d:73:76:e3:
bb:82:d7:ad:8a:d6:1d:08:e9:b2:3c:90:4e:4e:65:b8:bc:c5:
f6:3d:06:f0:bf:04:f7:19:7d:ad:ba:ef:ef:8f:bd:73:85:27:
58:d3:10:e2:1b:2b:72:0f:9d:3c:8c:a2:ff:bc:82:7b:25:27:
38:a7:0a:4d:4d:b2:56:fd:bc:ea:5a:c4:bd:ff:f3:01:47:dc:
9d:30:35:67:c2:01:ba:2e:7a:90:34:b4:c8:2a:93:a2:f8:b9:
9e:92:21:2f:99:ea:ce:02:f3:af:f5:8c:3a:ef:82:c4:65:01:
d6:9c:a3:e3:72:f8:c6:60:e4:a6:4c:72:8b:98:32:30:68:1a:
80:4c:fb:aa:95:cf:dc:bb:cc:84:98:5e:35:de:9e:05:b0:26:
3b:12:b6:f0:10:57:60:3b:a3:b1:77:15:13:cd:68:0d:55:94:
b7:6e:05:72:8f:3d:82:d1:25:3d:b9:80:92:b3:d5:21:41:ab:
d1:91:6d:47:fc:df:76:91:a1:bd:3c:e8:51:5f:a7:0d:8e:56:
49:da:7e:42:27:74:ff:76:0b:2c:5b:42:aa:f4:6b:cf:ef:33:
36:cd:02:bc:4d:8b:3a:28:5c:5a:8c:20:e3:f3:a6:c3:e3:ad:
e0:57:67:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:27 2024 by rpki-client on console-ams.rpki-client.org