Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1-_8r2X0vguMcThHkmHrhL0_q6b0.roa
File: 1-_8r2X0vguMcThHkmHrhL0_q6b0.roa (raw, json)
Hash identifier: WirdpOj0i6o8wS0NDLOUWSXgd2npK2LB397ZdYffCXY=
Subject key identifier: FB:FF:2B:D9:7D:2F:82:E3:1C:4E:11:E4:98:7A:E1:2F:4F:EA:E9:BD
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018A07C54BFA953F3507F5071AC48B5DB260
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1-_8r2X0vguMcThHkmHrhL0_q6b0.roa
Signing time: Fri 18 Aug 2023 08:31:25 +0000
ROA not before: Fri 18 Aug 2023 08:31:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 194.156.1.0/24 maxlen: 24
2.57.148.0/24 maxlen: 24
5.133.110.0/24 maxlen: 24
45.143.140.0/24 maxlen: 24
192.144.16.0/24 maxlen: 24
194.59.12.0/24 maxlen: 24
45.91.161.0/24 maxlen: 24
45.88.83.0/24 maxlen: 24
45.88.82.0/24 maxlen: 24
87.247.143.0/24 maxlen: 24
45.138.145.0/24 maxlen: 24
109.94.217.0/24 maxlen: 24
109.94.216.0/24 maxlen: 24
109.94.219.0/24 maxlen: 24
109.94.218.0/24 maxlen: 24
45.136.248.0/24 maxlen: 24
80.242.62.0/24 maxlen: 24
45.147.244.0/24 maxlen: 24
45.147.245.0/24 maxlen: 24
45.132.207.0/24 maxlen: 24
45.147.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Nov 2023 11:18:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:07:c5:4b:fa:95:3f:35:07:f5:07:1a:c4:8b:5d:b2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Aug 18 08:31:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbff2bd97d2f82e31c4e11e4987ae12f4feae9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:c7:5f:f7:f3:c8:a3:c9:67:8f:67:16:5a:
48:8b:e0:69:0c:45:20:16:a2:2c:9b:bc:4a:9f:47:
b3:1a:0b:49:7a:6a:58:ce:b4:f0:d8:53:bf:fd:ac:
ba:f9:59:eb:24:bc:00:bc:72:81:e4:e2:8c:fa:ca:
b6:f1:dd:19:d7:cc:66:d7:45:a6:28:10:fe:e8:fc:
92:ea:5f:9c:50:74:df:5f:1e:a2:3c:e6:c2:31:7d:
58:95:73:0b:a8:2d:f1:a7:ab:98:d8:90:44:e0:b0:
2e:7a:3c:52:79:f6:53:92:d2:02:32:da:78:22:90:
be:06:da:38:34:5d:b7:4c:1a:bc:43:e1:03:ad:23:
3b:da:c8:c2:10:91:a4:80:9c:5e:4b:0c:17:c2:7e:
5f:ae:7d:8b:31:bb:50:5f:e6:c4:84:32:7f:e1:ec:
58:c9:f1:7e:6c:45:c5:02:a7:41:6a:8c:b8:6b:f9:
cc:9e:f9:45:86:d5:e7:25:65:14:54:01:45:16:02:
8a:6b:66:3b:65:61:c2:24:0f:7e:07:a9:7a:bd:de:
20:fb:89:c8:f3:2a:47:4a:73:9e:a2:f1:34:f0:a4:
12:31:a9:8b:9c:d9:67:87:01:57:03:4a:dd:de:cd:
8a:9a:eb:79:00:ab:8d:cd:95:a4:e9:96:1c:c0:9a:
b6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FF:2B:D9:7D:2F:82:E3:1C:4E:11:E4:98:7A:E1:2F:4F:EA:E9:BD
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1-_8r2X0vguMcThHkmHrhL0_q6b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.148.0/24
5.133.110.0/24
45.88.82.0/23
45.91.161.0/24
45.132.207.0/24
45.136.248.0/24
45.138.145.0/24
45.143.140.0/24
45.147.244.0/23
45.147.247.0/24
80.242.62.0/24
87.247.143.0/24
109.94.216.0/22
192.144.16.0/24
194.59.12.0/24
194.156.1.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d8:de:66:da:29:ed:af:83:ba:65:f1:8f:bb:90:4d:3d:88:
68:32:e7:54:92:3e:37:7e:c1:ba:aa:13:7e:a8:1a:66:ac:9c:
cd:c6:34:00:3e:76:19:8a:c3:2f:52:5f:78:7a:e0:4c:da:fe:
ef:2b:45:18:79:56:31:a5:7d:ae:93:23:c2:92:90:e7:3d:ad:
32:f5:e1:36:47:ec:8b:38:a2:a1:cb:49:52:8b:db:e2:7e:26:
42:42:20:b3:68:43:41:21:41:fa:c6:b2:24:f2:6a:01:f5:30:
66:7d:3c:4a:91:4a:29:ef:94:08:25:c0:50:d9:a5:d8:bc:25:
c6:a6:ad:b3:5e:14:cb:1b:dd:21:e0:ce:f8:3e:f3:a9:9d:77:
cb:e3:bb:64:43:03:02:37:03:5d:5b:47:70:55:d7:f2:a2:ec:
4e:dc:7e:83:9f:e2:0c:78:76:e9:d6:df:cd:5c:a3:1c:78:60:
3c:3f:5e:ba:a0:2e:16:f6:66:4b:1f:a1:e4:c5:fd:4d:d1:85:
42:1a:78:3a:d8:b6:6d:0f:25:6e:5e:eb:7c:01:6d:91:06:01:
cd:d2:aa:a1:b6:77:79:3a:61:70:47:fe:4e:ff:9f:75:f4:c4:
d2:20:d2:06:1e:78:89:4e:46:a0:29:b3:ca:52:03:49:d4:96:
b0:6a:91:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org