Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/aPDJTD0mTpDfsCMMB7_xMfcZOYA.roa
File: aPDJTD0mTpDfsCMMB7_xMfcZOYA.roa (raw, json)
Hash identifier: TvndRqAGho+bilMUS3Xdm61o+J96LkZrrQbnt1f8EPs=
Subject key identifier: 68:F0:C9:4C:3D:26:4E:90:DF:B0:23:0C:07:BF:F1:31:F7:19:39:80
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018E3894960023991AA4000CD01865BDCCAF
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/aPDJTD0mTpDfsCMMB7_xMfcZOYA.roa
Signing time: Wed 13 Mar 2024 16:10:45 +0000
ROA not before: Wed 13 Mar 2024 16:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 91.240.33.0/24 maxlen: 24
109.196.104.0/24 maxlen: 24
109.196.105.0/24 maxlen: 24
109.196.106.0/24 maxlen: 24
109.196.107.0/24 maxlen: 24
109.196.108.0/24 maxlen: 24
109.196.109.0/24 maxlen: 24
109.196.110.0/24 maxlen: 24
109.196.111.0/24 maxlen: 24
213.109.108.0/24 maxlen: 24
213.109.109.0/24 maxlen: 24
213.109.110.0/24 maxlen: 24
213.109.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 11:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:94:96:00:23:99:1a:a4:00:0c:d0:18:65:bd:cc:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 13 16:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68f0c94c3d264e90dfb0230c07bff131f7193980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:29:3b:ed:3d:6f:eb:03:e5:17:dc:b4:8c:92:
91:c4:48:5d:fe:bd:65:ec:eb:19:b8:8a:17:fa:18:
b4:90:6d:ab:11:8a:f1:a1:df:70:66:d2:83:77:09:
62:89:a3:1f:ec:be:66:a7:be:85:70:65:00:0f:d8:
5e:a3:bd:7b:a2:90:ca:a1:2a:39:11:ee:2c:68:45:
c9:d9:df:6b:db:c5:e3:5e:11:e5:b1:58:a4:ee:33:
36:60:4f:30:83:d4:88:e6:48:5b:bb:ae:a9:c1:36:
85:e4:d4:8e:91:96:c9:73:0b:a0:5d:24:fc:22:a4:
ea:44:df:8b:14:f7:48:3a:68:bd:b0:39:ae:5c:d9:
3c:5e:83:6e:e9:7e:45:83:ad:a9:3a:78:f1:8e:97:
fa:fc:35:bf:d5:b7:60:11:72:46:b1:1f:88:82:90:
e5:21:5b:79:65:cd:f8:bc:68:cb:80:71:51:49:8a:
1c:4a:18:9b:af:ef:e9:00:3a:a8:9f:e3:4a:20:ae:
3d:91:0d:4a:92:d8:27:83:c8:49:9e:a5:0f:89:8e:
a9:aa:0f:e4:78:e3:3b:7a:72:e8:38:f8:ac:37:c1:
72:34:41:e7:86:18:63:85:5e:e5:b3:9e:92:8a:7f:
2f:54:f4:f8:73:69:9f:a3:7f:dc:a4:22:70:18:c5:
05:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F0:C9:4C:3D:26:4E:90:DF:B0:23:0C:07:BF:F1:31:F7:19:39:80
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/aPDJTD0mTpDfsCMMB7_xMfcZOYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.33.0/24
109.196.104.0/21
213.109.108.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:28:37:8e:18:ea:2f:3e:92:24:91:c6:40:9d:ea:f5:3f:4c:
a4:fc:8a:c4:75:c6:36:6a:53:38:95:a3:d1:e9:cf:aa:7e:c8:
2e:3d:b2:93:b6:b6:d5:80:23:db:32:98:44:02:f0:ab:85:a1:
7c:56:2a:68:4e:5d:7b:fe:02:d9:f5:32:72:b2:69:b5:d3:df:
49:6b:dd:ea:77:a5:5a:48:88:31:f2:20:44:59:97:77:09:6a:
85:4b:34:7a:95:89:96:ad:70:06:ad:66:c7:24:5b:7d:f7:89:
3b:16:9a:31:bf:c2:8e:92:f4:70:e2:c0:5f:d1:a1:d3:fd:e3:
05:0e:92:cf:40:cf:82:e7:44:c0:e1:88:e6:82:ca:b2:b9:69:
c9:da:69:d5:2c:be:61:63:e2:0a:40:a6:18:c5:8c:41:a8:9a:
05:41:e4:8c:20:31:5b:0a:eb:c8:67:9b:e0:45:09:c5:22:e8:
f8:27:a3:f0:e6:36:8a:32:dd:75:58:77:59:79:f4:4a:12:88:
74:a4:fd:57:1f:0b:3f:69:c8:77:d8:f0:b2:6e:8d:7f:11:d2:
ed:a4:19:5c:91:ed:d0:74:a8:96:b9:bc:65:8f:53:05:db:75:
0e:1c:ca:38:6c:3a:79:2f:15:e4:10:9e:11:25:e6:be:29:47:
34:3f:0d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org