Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/hzR0Ri9Npb3-RFNqVeIrBIW3J2o.roa
File: hzR0Ri9Npb3-RFNqVeIrBIW3J2o.roa (raw, json)
Hash identifier: AEzR5oP7Rk8+eLxlYtxMOMHQiRdCMlrq1kQpGzlypno=
Subject key identifier: 87:34:74:46:2F:4D:A5:BD:FE:44:53:6A:55:E2:2B:04:85:B7:27:6A
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 018ACC5A30639ABEBB74E867C8A4D1E08B95
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/hzR0Ri9Npb3-RFNqVeIrBIW3J2o.roa
Signing time: Mon 25 Sep 2023 12:39:37 +0000
ROA not before: Mon 25 Sep 2023 12:39:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16839
IP address blocks: 138.12.128.0/17 maxlen: 24
37.98.232.0/21 maxlen: 24
148.139.96.0/22 maxlen: 22
148.139.0.0/24 maxlen: 24
148.139.0.0/16 maxlen: 24
163.120.128.0/17 maxlen: 24
2a04:37c0:4110::/48 maxlen: 48
2a04:37c0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:5a:30:63:9a:be:bb:74:e8:67:c8:a4:d1:e0:8b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Sep 25 12:39:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=873474462f4da5bdfe44536a55e22b0485b7276a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:e8:9a:39:45:9b:ac:ef:aa:e5:40:7f:42:
9b:88:ca:4e:15:27:33:61:bd:f0:2d:fc:00:d5:75:
45:65:47:9c:8a:32:2c:f1:7f:b9:d5:28:55:0e:f9:
f1:19:f3:76:49:69:47:a1:4f:15:c4:b4:0a:b5:ed:
c7:78:db:28:36:5b:34:50:cd:e2:42:ff:65:02:fb:
d2:9e:1f:0c:3a:00:3b:28:a0:22:f1:ff:c4:a8:1d:
6c:a1:e9:75:4b:ff:51:57:d7:c1:06:fb:b4:b8:c2:
a0:8c:90:7e:40:64:c8:25:1f:e0:9d:d4:ed:ac:93:
45:71:d8:ae:23:63:72:43:0d:6e:21:e6:88:14:82:
58:92:82:2f:91:5f:89:39:92:51:62:4a:05:dd:ab:
4e:1d:e2:93:5f:7c:7c:70:90:1d:02:14:ba:08:0c:
b6:2b:55:77:3d:74:6a:90:d6:25:71:84:2e:4f:c2:
41:32:41:ed:06:62:71:05:8b:7a:b6:d0:a3:4f:5d:
57:b3:af:62:da:ee:df:1b:be:88:4d:fc:71:53:a3:
3f:e2:dc:ca:64:a1:41:b7:c3:c7:1f:8c:01:e8:ba:
a9:db:d5:4e:b3:82:c9:b7:9f:e0:c1:c1:28:0c:01:
12:14:85:d2:60:ba:7c:ba:e4:a3:c3:e6:16:19:cd:
e5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:34:74:46:2F:4D:A5:BD:FE:44:53:6A:55:E2:2B:04:85:B7:27:6A
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/hzR0Ri9Npb3-RFNqVeIrBIW3J2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.232.0/21
138.12.128.0/17
148.139.0.0/16
163.120.128.0/17
IPv6:
2a04:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
9d:ac:b8:e1:b8:9d:42:f3:8d:5c:e6:54:9b:fe:70:85:58:92:
d1:05:3d:15:8e:2a:12:66:cb:83:04:aa:79:a2:4c:9a:ba:8e:
d5:68:d3:ae:75:dc:b4:69:ce:87:34:ae:52:b8:8f:4f:a1:ea:
bc:9b:b3:75:ea:b7:c5:ee:69:76:47:8d:a3:d1:5a:86:ff:45:
8c:f8:9a:51:e8:0f:36:71:72:bd:84:1e:a5:83:fb:80:4c:a6:
7a:a0:f1:6b:ac:66:e9:4a:ff:4e:6b:48:21:7d:64:69:e1:fb:
9c:75:78:55:ce:d9:5a:5f:2c:1d:92:5f:b4:4b:ae:57:22:c0:
9a:19:95:ec:43:0e:3d:13:1e:6e:6d:9d:f9:a4:c1:9b:13:b6:
3a:21:32:44:38:5b:18:c5:99:f6:41:b4:e0:c1:61:2e:07:12:
d4:95:ae:d3:c8:3b:11:6a:da:13:7c:9f:a7:2f:45:20:1d:cc:
67:64:bf:91:a8:b4:de:40:b0:b2:49:1b:0e:a0:4e:a9:df:19:
28:55:f8:37:30:02:d7:20:67:66:d5:7d:14:97:a9:0c:81:43:
cc:3a:7e:24:8e:f5:c3:0c:dd:8d:3d:c5:04:40:48:42:61:d3:
da:1e:5b:1d:89:22:ed:e2:0f:18:bd:1a:37:f3:9b:a9:57:0c:
33:23:3c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 13:32:24 2023 by rpki-client on console-fra.rpki-client.org