Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/RTcjJZrv0puelAWFl1gJU5C3yGc.roa
File: RTcjJZrv0puelAWFl1gJU5C3yGc.roa (raw, json)
Hash identifier: zxmz90rvzoyp6LcYUMKmHKvGw8/YzujR6sr5CK/PCaY=
Subject key identifier: 45:37:23:25:9A:EF:D2:9B:9E:94:05:85:97:58:09:53:90:B7:C8:67
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 0187E0DF9BE23C6E361023DFFEB17B614767
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/RTcjJZrv0puelAWFl1gJU5C3yGc.roa
Signing time: Wed 03 May 2023 09:09:23 +0000
ROA not before: Wed 03 May 2023 09:09:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49455
IP address blocks: 82.194.192.0/19 maxlen: 19
188.113.64.0/18 maxlen: 18
109.108.192.0/19 maxlen: 19
46.249.224.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:df:9b:e2:3c:6e:36:10:23:df:fe:b1:7b:61:47:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: May 3 09:09:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=453723259aefd29b9e9405859758095390b7c867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:cf:a7:b3:4a:3a:b6:9d:7d:04:75:fc:bb:
de:85:03:2f:71:95:0a:0b:00:e5:f9:98:f1:46:c6:
dc:de:50:12:c3:a1:5d:64:f1:aa:c5:07:bd:15:a8:
dc:6d:75:bc:d3:d7:45:a2:f8:a2:fb:70:5a:4c:96:
07:63:bc:ad:f7:b3:a7:f6:a7:f7:f5:18:0f:07:ac:
77:25:92:06:38:26:d5:e3:c2:71:17:0e:bd:af:d2:
b8:e0:9a:28:22:4a:0f:16:a4:a1:78:7a:4d:fe:10:
84:2b:5d:d1:fe:66:60:dc:0a:45:07:2f:53:11:91:
aa:02:f1:7e:c5:ac:33:37:7f:67:c2:3c:72:3d:73:
a4:13:3b:55:66:8d:0b:c7:e8:9e:57:e9:cc:2b:1b:
1a:37:75:75:01:f3:db:56:13:48:dd:cd:b4:49:94:
b1:66:1b:fe:04:70:65:75:7d:06:4e:69:72:94:50:
8b:ab:e2:b2:1e:1d:12:90:09:89:a4:b5:c8:82:3f:
e0:70:88:fb:45:be:2c:04:bf:0e:8d:bc:1e:34:93:
6f:dc:26:eb:fd:28:0d:35:cd:57:33:ee:ef:4d:15:
08:02:a8:77:44:9a:64:25:ab:d9:52:cf:77:2d:d5:
56:a2:f0:7c:92:c6:3b:75:99:1e:c5:b0:5c:eb:c2:
88:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:37:23:25:9A:EF:D2:9B:9E:94:05:85:97:58:09:53:90:B7:C8:67
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/RTcjJZrv0puelAWFl1gJU5C3yGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.224.0/19
82.194.192.0/19
109.108.192.0/19
188.113.64.0/18
Signature Algorithm: sha256WithRSAEncryption
43:07:40:5d:03:14:40:f4:d1:65:03:dc:71:fb:3a:45:0b:cc:
30:5a:a2:51:bf:be:1b:f7:cc:f7:27:d5:25:ca:12:67:16:da:
22:27:cf:e6:bc:62:24:1b:af:2f:30:e8:0a:4f:46:a8:c7:57:
1f:f7:2a:78:89:7f:d5:e6:7b:b0:90:a7:1b:6a:d3:80:88:58:
3c:78:77:a6:ab:27:c8:54:6a:c8:64:17:83:14:ac:45:dd:b6:
5a:3a:87:88:a8:26:da:02:b4:03:eb:60:53:5c:f1:7d:07:d2:
8f:ff:60:c9:59:6e:73:60:6a:14:0c:33:df:dd:73:3b:59:27:
94:a0:51:d0:f3:c4:98:df:57:cb:e5:19:6d:e3:d9:fa:22:1d:
2e:12:f0:e8:92:40:03:c4:df:1e:c5:3d:9f:c3:50:42:b2:63:
af:99:8d:a5:7c:d5:89:ee:b9:ee:84:5b:46:c9:87:e3:8c:9a:
26:76:b4:e1:a0:0a:22:ee:66:eb:a3:7f:6b:01:26:cf:12:ef:
72:6a:64:ca:fa:52:9b:92:6b:57:ee:8c:f6:c8:fc:85:59:32:
0b:66:d3:11:2c:9b:0e:f8:7b:8e:ee:16:33:5a:02:7f:8f:99:
9b:78:e8:f7:17:f6:95:b5:c3:2a:e8:68:9a:45:70:5f:70:56:
2d:e7:4d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:43 2024 by rpki-client on console-fra.rpki-client.org