Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/Fr6fHreHihH1hwDxha3uh3zlh24.roa
File: Fr6fHreHihH1hwDxha3uh3zlh24.roa (raw, json)
Hash identifier: 0jZRCOnk2uP8yAK1wkxYLn1ENFkDlckhib9wRQ1S45U=
Subject key identifier: 16:BE:9F:1E:B7:87:8A:11:F5:87:00:F1:85:AD:EE:87:7C:E5:87:6E
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 018CB0052CB664129D8E044482D2BCC0B813
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/Fr6fHreHihH1hwDxha3uh3zlh24.roa
Signing time: Thu 28 Dec 2023 10:42:58 +0000
ROA not before: Thu 28 Dec 2023 10:42:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35112
IP address blocks: 217.119.129.0/24 maxlen: 24
193.163.203.0/24 maxlen: 24
146.19.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:05:2c:b6:64:12:9d:8e:04:44:82:d2:bc:c0:b8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Dec 28 10:42:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16be9f1eb7878a11f58700f185adee877ce5876e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:82:7e:c1:2b:ae:63:c6:fa:1d:25:4b:e4:
12:09:28:d0:98:5c:65:74:3d:e1:b4:53:11:c6:8c:
41:22:50:43:fa:25:8e:34:7e:16:d8:24:22:40:9d:
96:12:98:0d:9a:f1:c3:42:99:5f:b5:57:e6:b7:61:
eb:00:18:ae:de:bf:d3:f7:68:32:50:fe:a3:05:9c:
ee:ae:fc:6b:6b:44:69:df:c5:28:2b:c5:25:8f:01:
5f:4c:36:13:d0:39:67:fd:c8:c3:4b:63:06:41:89:
13:32:2e:0c:ce:6f:32:76:31:9f:af:c3:91:91:1b:
db:92:fc:1e:33:47:91:54:bd:31:d9:ba:98:bf:27:
09:fa:3e:57:38:18:ca:a0:2a:92:5a:65:22:aa:ac:
29:1d:db:af:02:40:c2:32:8e:f1:26:0f:63:a2:74:
91:72:31:13:b3:cd:99:28:e5:50:40:c8:0d:4d:89:
d9:2e:e0:8a:51:be:54:3c:e7:97:f3:a7:41:93:f2:
86:ec:5b:14:e2:e2:6b:3c:b0:50:64:e8:7c:03:99:
ff:06:8d:ca:c8:19:e7:58:1c:76:4b:1a:40:15:7b:
5d:8f:46:c2:65:ae:56:ef:54:d9:6d:5e:f2:ac:19:
d5:27:4b:04:d7:8e:c2:3c:47:f9:5b:17:4d:a9:78:
c6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BE:9F:1E:B7:87:8A:11:F5:87:00:F1:85:AD:EE:87:7C:E5:87:6E
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/Fr6fHreHihH1hwDxha3uh3zlh24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.128.0/24
193.163.203.0/24
217.119.129.0/24
Signature Algorithm: sha256WithRSAEncryption
54:13:fc:1d:85:38:f6:02:61:f8:bb:b8:51:e7:3a:9b:88:85:
84:0e:17:59:52:c2:c2:3f:2b:e0:86:d7:d3:d7:fd:2d:16:e1:
7d:5b:3b:86:06:7f:f0:1d:b6:2e:c8:44:46:16:06:e4:d4:32:
2b:06:99:86:8d:33:f9:90:dd:a6:a5:05:85:f2:cb:37:3b:81:
69:15:01:9e:db:39:46:08:84:f7:a9:0c:74:4a:7d:52:6b:57:
04:4d:41:24:5f:a3:e4:2e:11:b7:49:72:06:ad:96:67:7f:51:
c9:3c:ca:07:93:f7:dd:16:5e:ba:1e:20:03:e6:d6:ad:98:6e:
ae:65:a3:d6:81:17:42:12:02:e8:fb:b4:c1:ed:3f:a8:6e:29:
79:54:f8:a6:e5:7e:7f:c3:1f:92:b8:24:bf:25:c2:86:b2:21:
51:5c:69:1d:4d:1e:d2:ba:e6:6e:14:70:64:f1:6c:c4:ec:3b:
7d:39:e9:aa:8a:3f:fa:6a:cc:65:94:99:99:63:c8:0b:59:a1:
86:17:4f:6d:3d:e7:54:18:8a:f4:03:ea:53:c7:15:4d:9d:a8:
17:fc:38:df:2f:47:a9:80:41:a7:96:12:da:ab:e8:e3:41:f5:
47:c4:3b:8f:81:fd:c1:02:2b:5c:9b:e4:3a:65:8d:9b:68:bd:
4b:32:2b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:53 2024 by rpki-client on console-ams.rpki-client.org