Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/dWCgMMpwifeXMG9AFnjBfGtr6X0.roa
File: dWCgMMpwifeXMG9AFnjBfGtr6X0.roa (raw, json)
Hash identifier: m/vH8bRGNhS1YYwDmsizoMGe3Nqv5qXDp5vcX1HaVrA=
Subject key identifier: 75:60:A0:30:CA:70:89:F7:97:30:6F:40:16:78:C1:7C:6B:6B:E9:7D
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 0186C0192CA27B46B11465AB83FC31E286BE
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/dWCgMMpwifeXMG9AFnjBfGtr6X0.roa
Signing time: Wed 08 Mar 2023 07:22:00 +0000
ROA not before: Wed 08 Mar 2023 07:22:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 163.171.77.0/24 maxlen: 24
163.171.89.0/24 maxlen: 24
148.253.239.0/24 maxlen: 24
148.253.240.0/24 maxlen: 24
148.253.241.0/24 maxlen: 24
148.253.243.0/24 maxlen: 24
185.27.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Mar 2023 04:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c0:19:2c:a2:7b:46:b1:14:65:ab:83:fc:31:e2:86:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Mar 8 07:22:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7560a030ca7089f797306f401678c17c6b6be97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:09:b9:0b:85:82:f5:ff:30:53:45:e2:41:36:
d6:cd:6d:32:f2:1d:3b:c4:9b:70:99:90:5d:3d:fb:
69:1e:84:cf:c2:55:74:e6:73:c1:63:ed:6d:bb:07:
14:dc:fe:bf:d9:e3:56:72:d5:e0:8f:8b:1a:70:3a:
59:be:b7:59:4a:45:8b:e3:d0:ec:a0:b7:70:3d:3f:
aa:e2:ed:01:f7:b6:0a:4f:48:6b:23:fa:c7:bf:8b:
8b:49:58:2b:5b:42:f8:db:11:a7:01:4f:1e:92:4e:
31:63:a3:93:41:17:85:83:7c:aa:d0:2d:dc:8a:3d:
58:16:e1:ba:63:6d:41:e7:e5:30:18:eb:2e:ba:8e:
fe:70:d4:9a:2b:35:41:64:69:95:05:79:f2:2a:68:
08:5f:4b:3d:c8:ac:27:a4:6c:a5:53:f8:11:89:79:
15:41:93:bb:2b:bf:6a:76:ca:b3:06:5e:de:9f:cb:
7e:b3:59:a6:ac:62:35:37:8f:bf:89:91:70:32:3f:
1c:89:2b:18:55:db:cc:16:4e:e8:2f:17:ab:8b:47:
3f:ac:e7:5f:96:35:f0:b5:56:f1:82:c6:89:69:a7:
a4:a8:39:0d:1b:42:39:3d:3c:9d:b2:05:95:57:3b:
2c:e6:41:cf:6a:be:34:2e:eb:09:b8:5b:e2:67:bf:
03:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:60:A0:30:CA:70:89:F7:97:30:6F:40:16:78:C1:7C:6B:6B:E9:7D
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/dWCgMMpwifeXMG9AFnjBfGtr6X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.253.239.0-148.253.241.255
148.253.243.0/24
163.171.77.0/24
163.171.89.0/24
185.27.228.0/24
Signature Algorithm: sha256WithRSAEncryption
79:31:c3:96:08:b0:44:c8:85:96:02:ad:2d:09:d1:40:d0:cd:
07:61:68:be:ba:18:36:b7:61:61:1c:c1:20:65:94:e5:d1:5b:
57:e1:cb:cd:47:85:3f:61:7d:a3:cd:a1:dd:ac:0c:bb:f4:91:
48:76:63:76:b6:4b:b2:19:f2:0a:b2:2f:95:cb:13:dd:2d:de:
32:da:40:bf:1c:eb:6d:b7:de:e8:c0:0e:05:37:4e:c4:24:34:
10:86:a9:2b:c6:6d:98:56:c3:44:90:18:0c:94:00:9b:4b:d4:
13:6e:67:8d:ba:37:f1:43:db:e6:d3:65:dd:b1:d1:bc:3d:7e:
45:09:de:fd:8c:2d:3a:40:4b:8d:b9:6f:2b:60:65:43:ac:61:
83:9d:c7:f9:cc:2c:58:a8:8e:8b:8e:a5:8d:d7:44:04:41:e6:
bb:5b:65:b4:f1:84:e8:0f:3c:d3:ad:cd:07:7e:1f:7d:d0:ce:
2b:fa:07:57:6a:ce:34:00:a7:d1:bb:38:e2:04:3f:6c:bd:b1:
ea:c1:ab:ee:bb:bd:95:3e:c4:d9:1b:de:2a:66:5a:5f:2a:7e:
77:ee:f5:59:80:99:7e:1c:ac:f1:42:5b:f4:9f:54:47:d0:6e:
8f:1a:f6:f3:83:42:8c:e4:af:43:e3:c1:c6:67:2c:22:71:1f:
80:37:dd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:27 2024 by rpki-client on console-ams.rpki-client.org