Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/18o9cQJvPnOodpjrOKPrripi0RM.roa
File: 18o9cQJvPnOodpjrOKPrripi0RM.roa (raw, json)
Hash identifier: SOsxq7KMtwn7Ahsodz0WHfyo73GEpJxTqBELMDrvRSA=
Subject key identifier: D7:CA:3D:71:02:6F:3E:73:A8:76:98:EB:38:A3:EB:AE:2A:62:D1:13
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 018B8BBD39F38E0646BEC4C9AA21E6D60CAB
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/18o9cQJvPnOodpjrOKPrripi0RM.roa
Signing time: Wed 01 Nov 2023 16:35:15 +0000
ROA not before: Wed 01 Nov 2023 16:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60150
IP address blocks: 194.38.48.0/22 maxlen: 24
43.240.148.0/22 maxlen: 22
2a07:5b40::/29 maxlen: 48
2a05:ff00::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Nov 2023 20:46:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:bd:39:f3:8e:06:46:be:c4:c9:aa:21:e6:d6:0c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Nov 1 16:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7ca3d71026f3e73a87698eb38a3ebae2a62d113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6d:b5:8b:62:9e:db:96:ce:97:e6:25:e2:a4:
4f:a0:a7:7c:b2:b9:14:55:8f:cf:3e:c2:8e:b9:ce:
73:cc:fc:68:e5:d3:9c:75:bd:76:3a:8b:05:39:cd:
47:dc:1b:12:32:4e:fd:8b:01:66:35:dc:1d:7f:65:
e1:20:34:df:5a:60:88:e1:dc:de:2d:b2:31:d2:d6:
92:43:7a:24:a7:b5:d4:88:f4:cb:b3:30:d5:2a:a4:
df:81:01:c2:43:f4:cc:90:7f:0a:43:cf:62:b7:cc:
63:8f:f1:32:5c:07:26:0d:3d:5a:ff:30:0e:ee:d0:
14:de:7e:a4:ad:27:08:ad:6d:f0:ee:52:d1:ed:e8:
bf:c2:74:4d:d7:b8:86:74:04:d4:06:f7:ef:64:c8:
09:8d:91:75:52:fd:39:8b:80:e8:38:61:2c:a1:cf:
fe:9e:16:66:2d:65:2a:77:8f:7b:df:35:ea:fe:d1:
93:2e:18:63:7f:f6:a8:8c:d4:30:11:8e:ba:09:6c:
ac:94:c4:f4:1b:7a:f6:4b:a7:23:d9:ef:14:f2:d3:
90:a1:2e:27:ea:03:85:52:fc:47:67:f3:44:be:25:
9d:fd:58:23:9d:9b:d6:70:d1:f4:b9:61:d5:78:5a:
c3:2e:3c:dd:f0:b7:9c:25:e9:70:a0:b2:2e:52:d3:
a1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CA:3D:71:02:6F:3E:73:A8:76:98:EB:38:A3:EB:AE:2A:62:D1:13
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/18o9cQJvPnOodpjrOKPrripi0RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.148.0/22
194.38.48.0/22
IPv6:
2a05:ff00::/29
2a07:5b40::/29
Signature Algorithm: sha256WithRSAEncryption
4f:ac:fe:6d:0d:67:ea:c1:c4:21:55:a5:08:aa:d4:71:2c:df:
01:0c:32:88:91:65:e4:d6:06:4f:ac:d0:14:19:0f:b1:be:6f:
de:42:6e:62:40:71:b3:25:d1:46:a6:10:9c:a0:7c:98:c9:a0:
22:45:b9:2c:45:e3:27:90:13:f2:74:9b:6f:c9:bd:04:f2:bc:
57:25:53:ce:63:f0:7c:0a:c1:ad:bf:15:26:dd:4d:9e:67:7d:
26:d9:a3:3d:99:ef:46:00:f5:f4:76:ef:70:b0:3a:31:3e:d5:
23:80:c8:40:2b:c2:7c:44:ae:e3:ae:b6:43:62:8f:d1:64:af:
1a:72:ed:3b:f1:b2:bc:e8:07:8a:bd:51:e2:bb:28:e4:cf:ae:
1e:95:ab:11:dc:1e:90:5e:8c:53:f7:8e:32:fb:8a:c1:6f:9d:
42:4f:33:82:d7:0b:53:eb:a2:7e:20:14:76:44:af:82:27:80:
12:d9:7b:2c:d0:cf:6a:0f:09:3f:79:bb:fe:56:db:18:80:45:
ef:33:8a:30:ad:7a:b2:2b:ec:aa:0d:a5:22:35:b2:64:7d:53:
6e:40:9e:ff:bc:13:c5:de:16:23:52:49:8b:c8:21:2c:a3:10:
a9:91:f5:75:b7:19:dc:29:82:7d:fc:a2:be:53:44:71:da:76:
05:3a:23:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:23 2024 by rpki-client on console-ams.rpki-client.org