Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/epf4Duxjvjc97t0rRzPf90L4848.roa
File: epf4Duxjvjc97t0rRzPf90L4848.roa (raw, json)
Hash identifier: CH6mjJ8oN5Gnkfut8+DR38f8nnzFUzB3KnIfkGnwJbY=
Subject key identifier: 7A:97:F8:0E:EC:63:BE:37:3D:EE:DD:2B:47:33:DF:F7:42:F8:F3:8F
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 018D401B0F1D475115FD54BA0E524E09C119
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/epf4Duxjvjc97t0rRzPf90L4848.roa
Signing time: Thu 25 Jan 2024 10:12:11 +0000
ROA not before: Thu 25 Jan 2024 10:12:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 62.138.64.0/22 maxlen: 22
194.64.152.0/22 maxlen: 22
194.163.192.0/20 maxlen: 22
195.180.196.0/22 maxlen: 22
195.180.224.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 13 Mar 2024 15:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:40:1b:0f:1d:47:51:15:fd:54:ba:0e:52:4e:09:c1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 25 10:12:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a97f80eec63be373deedd2b4733dff742f8f38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:bb:21:c6:0c:5a:ac:57:5c:34:ce:a4:32:
95:1b:d8:81:c6:37:db:2f:56:5e:44:d3:61:56:0a:
cb:6c:b9:cc:ab:7b:17:3c:1d:7b:ab:73:33:38:2b:
01:6a:32:c9:69:b1:93:26:02:20:1f:d6:8d:cc:c5:
fb:a2:6c:4b:e5:ba:62:21:89:45:d5:a0:0d:28:ac:
5a:69:26:a0:4f:24:9b:1a:98:a4:39:84:e3:fa:64:
2c:e1:10:a9:37:21:26:eb:c3:e5:61:0d:1a:0e:ab:
f5:e4:84:22:08:5b:16:63:fe:a4:97:2b:d6:f9:26:
83:22:55:f1:5f:e4:5a:93:e9:8e:f5:98:20:40:33:
ac:3f:f2:f4:ef:8c:a8:e6:20:84:6b:05:ff:16:8a:
25:65:a3:0c:d2:b3:6a:cc:06:70:0f:1c:05:35:08:
55:08:c2:25:5e:e0:38:4d:81:84:67:d7:b7:ba:4e:
e9:11:9e:68:5d:97:bb:00:6e:76:1a:af:ba:df:fd:
7a:80:3a:b2:09:e0:d9:9e:3b:37:49:ec:43:a6:d3:
58:fb:25:9b:d3:93:b4:59:29:6a:e9:09:78:35:f4:
5c:fd:4c:b5:b7:67:34:d6:1a:3d:30:7e:66:22:55:
3b:f3:6d:0a:5a:f7:0d:9e:90:9d:ee:0c:9d:e2:ed:
50:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:97:F8:0E:EC:63:BE:37:3D:EE:DD:2B:47:33:DF:F7:42:F8:F3:8F
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/epf4Duxjvjc97t0rRzPf90L4848.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.138.64.0/22
194.64.152.0/22
194.163.192.0/20
195.180.196.0/22
195.180.224.0/22
Signature Algorithm: sha256WithRSAEncryption
74:cf:e2:63:82:39:fb:69:3f:a3:07:fd:fc:92:61:59:5d:4d:
ec:58:ce:a4:55:1e:19:f2:ea:85:2a:de:8e:c3:6b:38:31:dc:
66:b8:b4:63:75:54:4d:89:9c:3e:5a:91:74:b8:e6:80:df:af:
d9:fd:68:c3:29:d7:65:08:bd:d3:7f:a1:87:c1:43:a4:34:30:
72:18:4b:31:b3:78:05:8e:fb:0c:10:0d:6e:53:ae:7e:08:46:
53:bb:c9:66:ef:2c:50:5b:91:3f:6b:ec:96:50:bd:26:af:92:
91:44:4e:9a:d2:0a:8c:4f:41:4f:4c:ca:e9:25:7f:f6:da:ef:
d3:b8:cd:56:3b:83:7c:b5:be:64:20:0f:a5:35:3a:86:d6:dd:
39:02:a8:01:96:5d:f0:0f:4a:ab:c7:6a:56:6d:8b:af:75:16:
1c:b3:9a:0c:a4:09:2f:b0:e6:3d:09:5f:be:9e:24:33:77:ed:
40:30:81:ed:3d:47:9d:3e:87:f5:94:2d:85:94:53:cb:24:5f:
e6:d9:e3:88:65:00:87:88:4e:72:fa:f6:72:14:d8:ff:54:b1:
4a:4c:45:d9:2c:df:d6:97:cb:68:70:96:e4:29:d6:a9:25:2a:
1a:35:fb:eb:56:d7:03:a9:eb:42:b2:9f:67:74:08:18:42:95:
e7:93:fb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 19:43:29 2024 by rpki-client on console-fra.rpki-client.org