Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/amCQGoXvOnDuwJ1E8-blUmxhb_A.roa
File: amCQGoXvOnDuwJ1E8-blUmxhb_A.roa (raw, json)
Hash identifier: G9B4468KtCXkzvXuEK2qcrz1wiRbRlX7QDSX6hqck04=
Subject key identifier: 6A:60:90:1A:85:EF:3A:70:EE:C0:9D:44:F3:E6:E5:52:6C:61:6F:F0
Certificate issuer: /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Certificate serial: 01856D9D0D0658A3BF601373E7EB075B79B5
Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/amCQGoXvOnDuwJ1E8-blUmxhb_A.roa
Signing time: Sun 01 Jan 2023 13:54:47 +0000
ROA not before: Sun 01 Jan 2023 13:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 159.253.66.0/23 maxlen: 23
213.249.188.0/22 maxlen: 22
178.78.108.0/22 maxlen: 22
178.78.106.0/23 maxlen: 23
94.72.248.0/21 maxlen: 21
178.78.112.0/21 maxlen: 21
178.78.120.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:0d:06:58:a3:bf:60:13:73:e7:eb:07:5b:79:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Validity
Not Before: Jan 1 13:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a60901a85ef3a70eec09d44f3e6e5526c616ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:77:ca:dd:f2:48:3f:18:e2:a0:84:79:32:
8c:75:00:5e:33:04:99:d5:cf:d0:bc:c5:fe:ec:34:
4e:2b:30:38:95:ed:cf:dc:4b:02:bc:3b:c1:61:20:
ca:cf:78:0f:4d:af:10:a4:c6:7d:2e:b4:97:2c:da:
9a:08:41:d6:ac:35:2d:3c:02:f2:55:93:1e:53:60:
9a:dd:93:25:4d:d1:e6:c6:48:d1:f3:91:83:7e:e7:
96:c5:74:62:68:97:b6:06:c9:61:5a:b8:46:49:21:
b6:e2:b6:a2:74:56:07:cd:35:72:a6:6d:4a:62:bf:
e8:15:42:9b:46:f3:dc:c7:1d:c5:56:df:68:f6:58:
9b:a6:09:b2:a0:fb:92:45:11:f5:ce:65:18:f2:da:
8f:01:04:f7:f9:f4:6e:76:50:08:08:24:b8:80:15:
b7:55:e7:27:5c:f9:10:cf:ec:56:ca:6c:c8:24:be:
93:6a:7d:ec:9b:c0:af:d9:0a:17:fb:f4:35:30:f5:
f7:ee:5d:42:85:6f:a4:cc:25:29:38:5e:8d:d2:91:
01:41:e5:ce:77:4d:58:22:ab:77:f7:d9:0a:9c:10:
ad:6f:f5:c8:04:f2:2b:3b:7b:dc:fa:e4:ac:64:e2:
e0:75:3a:af:3f:eb:77:8d:e6:66:4e:dc:3a:b0:4f:
7f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:60:90:1A:85:EF:3A:70:EE:C0:9D:44:F3:E6:E5:52:6C:61:6F:F0
X509v3 Authority Key Identifier:
keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/amCQGoXvOnDuwJ1E8-blUmxhb_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.72.248.0/21
159.253.66.0/23
178.78.106.0-178.78.127.255
213.249.188.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:53:ed:ec:ab:13:29:bd:94:d9:07:da:e2:62:b4:e1:da:40:
39:04:b6:75:b1:b9:c7:46:66:ab:da:1a:82:c1:13:d2:7d:90:
7b:4f:c6:67:97:d3:bc:b0:ca:b7:dc:71:17:a5:27:d7:98:1f:
e9:3e:39:0c:0d:d3:26:58:c9:bb:d0:d0:dd:c7:9a:d5:34:50:
77:4c:b1:33:ea:8e:b9:be:a4:35:7d:45:13:27:72:9e:3d:15:
df:a9:9d:b5:68:e2:af:2b:87:8a:d6:ea:a4:20:6a:8e:79:2c:
25:04:7b:02:92:c0:07:ca:9b:11:0e:c5:3f:f0:4b:b7:67:1f:
5e:ba:2d:cc:c7:6f:73:91:33:7d:ef:47:99:73:64:77:6e:0f:
91:2a:ff:20:05:de:d0:84:d8:27:0c:76:ec:c8:23:c3:99:8c:
cd:7b:24:a3:19:c8:89:4a:1e:9b:fb:87:7a:77:32:23:42:53:
3c:8f:4d:66:48:ff:f4:60:34:1f:3f:cc:ec:7a:d1:df:89:50:
dd:24:46:73:43:ab:85:86:76:c2:ab:b7:88:d0:0f:c3:15:fb:
d3:38:05:ae:e1:ba:ef:93:70:a1:c5:10:70:a0:03:24:cd:b7:
3c:54:86:05:35:f0:bd:77:98:3e:35:0b:ca:58:28:22:7b:8b:
ee:22:dc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:20 2024 by rpki-client on console-fra.rpki-client.org