Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/fS13pGSUfgVtGs0xcO3oHr4I3dY.roa
File: fS13pGSUfgVtGs0xcO3oHr4I3dY.roa (raw, json)
Hash identifier: pYIUoGUWhnJTrlaBtwTApea/kdqfTtiyKrIC8H/W56o=
Subject key identifier: 7D:2D:77:A4:64:94:7E:05:6D:1A:CD:31:70:ED:E8:1E:BE:08:DD:D6
Certificate issuer: /CN=278f62f3a5f84722852fc70f052cf13dea2374d0
Certificate serial: 018CC801192662B9983F6CF6E262FC5842E7
Authority key identifier: 27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/fS13pGSUfgVtGs0xcO3oHr4I3dY.roa
Signing time: Tue 02 Jan 2024 02:29:24 +0000
ROA not before: Tue 02 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205741
IP address blocks: 94.136.179.0/24 maxlen: 24
94.136.178.0/24 maxlen: 24
94.136.177.0/24 maxlen: 24
94.136.176.0/24 maxlen: 24
94.136.176.0/22 maxlen: 22
185.141.67.0/24 maxlen: 24
185.141.66.0/24 maxlen: 24
185.141.65.0/24 maxlen: 24
185.207.209.0/24 maxlen: 24
185.207.208.0/24 maxlen: 24
185.207.208.0/22 maxlen: 22
185.207.211.0/24 maxlen: 24
185.207.210.0/24 maxlen: 24
185.141.64.0/24 maxlen: 24
185.141.64.0/22 maxlen: 22
2a0b:2c40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 15 Jan 2024 07:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:19:26:62:b9:98:3f:6c:f6:e2:62:fc:58:42:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278f62f3a5f84722852fc70f052cf13dea2374d0
Validity
Not Before: Jan 2 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d2d77a464947e056d1acd3170ede81ebe08ddd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:79:db:11:15:c6:e9:97:55:e2:73:a6:c9:08:
33:56:86:16:25:f4:8b:82:bb:ad:c8:4c:cf:54:32:
7f:69:45:09:18:d4:12:f8:5d:78:5d:3d:35:3e:8e:
99:4a:37:ac:36:46:f6:43:27:83:6b:c7:52:a6:70:
b0:0e:ea:fc:2b:6f:8b:69:8a:54:20:b0:f7:27:46:
92:e0:00:3d:d8:d0:43:01:12:5a:f4:87:da:3c:73:
c7:32:16:63:ff:ff:76:8e:e0:cb:29:21:86:eb:2a:
4b:96:e8:6e:01:12:d2:22:24:0e:24:90:23:27:e6:
d5:87:8c:2b:20:43:75:a6:5b:89:30:3d:7b:d2:92:
05:f1:74:01:84:ce:c6:93:26:1a:e9:90:5d:db:2e:
20:52:8f:24:9f:da:6a:ae:c6:f8:b5:2e:13:ff:15:
93:b4:ec:fd:af:32:0c:0f:7f:5a:90:26:4e:63:30:
70:63:61:53:e4:12:d7:b3:52:4c:cf:c1:91:57:d4:
3b:57:d4:38:c8:fa:60:2a:bc:04:d3:ca:a7:8a:a8:
13:78:3d:bc:88:bd:41:75:b8:77:d8:72:e1:f1:c0:
54:0c:97:aa:41:84:bb:50:ff:4e:58:c0:55:22:44:
5d:7d:75:3e:8a:7b:3f:53:47:45:f6:1a:b4:27:7e:
1e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2D:77:A4:64:94:7E:05:6D:1A:CD:31:70:ED:E8:1E:BE:08:DD:D6
X509v3 Authority Key Identifier:
keyid:27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/fS13pGSUfgVtGs0xcO3oHr4I3dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.136.176.0/22
185.141.64.0/22
185.207.208.0/22
IPv6:
2a0b:2c40::/29
Signature Algorithm: sha256WithRSAEncryption
93:bd:78:52:0e:a7:44:19:89:87:71:ed:00:d2:51:6c:46:09:
51:f9:0e:8c:13:66:ae:71:a7:8b:61:2a:4d:97:18:ea:99:20:
e4:f4:5c:75:c9:13:e9:d6:dc:00:ed:4f:fa:47:a7:72:85:c1:
02:a4:cb:02:4a:d2:68:37:f0:f5:bd:68:d0:21:0d:ba:79:a4:
35:73:d3:76:36:68:42:77:50:25:f1:44:16:bf:30:3d:36:40:
d2:92:76:05:89:3b:e9:0b:53:ef:53:49:7e:9d:20:0d:f3:6f:
ee:f4:d1:e0:b4:1e:a2:f1:db:9d:b3:2c:6d:79:ee:ef:94:2b:
00:ad:d5:d6:5d:f1:59:51:aa:da:5b:a0:64:7d:68:a4:2e:aa:
d1:36:f6:92:b8:90:18:9b:06:5a:21:68:d6:07:b6:04:6b:72:
99:fc:8f:fd:aa:9f:55:b5:79:a9:f7:c3:61:a4:95:38:31:bc:
c5:60:1e:42:b8:65:94:49:a5:1c:e4:5e:2e:d0:b9:3e:f4:a3:
93:9f:64:cf:ec:bd:a9:7a:ae:3e:c5:68:50:c8:f4:86:2b:73:
04:1c:ae:d6:3e:2f:d6:8b:e8:8a:91:32:92:fc:9e:0e:bc:92:
2d:e9:57:d9:9e:57:06:ea:ef:68:da:55:8b:7b:8b:01:47:dd:
80:3b:75:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:29 2024 by rpki-client on console-ams.rpki-client.org