Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ghbJiVUfE--Jn_XfCV3HD62EB0I.roa
File: ghbJiVUfE--Jn_XfCV3HD62EB0I.roa (raw, json)
Hash identifier: F+5oUCWHRsLzI8lQy0UjDvU4ZO2diBvRZRoHPevtBQQ=
Subject key identifier: 82:16:C9:89:55:1F:13:EF:89:9F:F5:DF:09:5D:C7:0F:AD:84:07:42
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018CC801C3A12C79D88713A501C7A4347DA6
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ghbJiVUfE--Jn_XfCV3HD62EB0I.roa
Signing time: Tue 02 Jan 2024 02:30:07 +0000
ROA not before: Tue 02 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 176.46.145.0/24 maxlen: 24
109.203.164.0/24 maxlen: 24
109.203.166.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
37.49.146.0/24 maxlen: 24
37.49.151.0/24 maxlen: 24
31.170.55.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:05:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:c3:a1:2c:79:d8:87:13:a5:01:c7:a4:34:7d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 2 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8216c989551f13ef899ff5df095dc70fad840742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:6f:c2:b5:e2:4b:6a:5f:a0:d1:d0:c6:7d:
de:db:5d:46:bb:b0:8a:87:f4:87:13:29:4b:17:8e:
19:7a:06:8b:ac:99:21:b2:25:f2:d5:77:f8:bf:77:
17:2b:fc:e3:93:c4:54:57:19:3b:1f:e2:bf:0d:d9:
1c:1a:71:79:98:28:4a:7b:a7:50:e1:de:c4:c4:17:
d3:4b:cb:8d:79:44:3c:55:35:1b:2b:05:51:4f:06:
88:f3:7b:4b:e6:d0:49:08:e3:f8:6e:8e:fe:37:ca:
e2:64:f4:0a:c6:08:11:a1:0c:fd:9e:b2:5d:a2:3b:
c5:14:55:8c:07:d2:6a:2e:6a:b9:77:2c:e0:9e:df:
d8:76:51:84:93:56:4c:61:de:cc:fb:ed:1d:de:09:
a7:00:ae:7e:61:83:0b:d5:93:c0:c0:8f:ae:7d:7c:
67:25:7b:f8:cf:8b:0d:f6:a8:c4:24:92:f4:6c:63:
7f:d7:e8:f8:41:0d:73:72:59:73:59:0a:6e:b2:f5:
ce:70:54:90:6a:ce:b6:f2:23:79:a4:12:c3:53:2c:
37:52:16:d8:3d:95:26:ba:c3:90:b0:71:b3:2b:ce:
38:a2:c4:96:b6:a6:c0:c2:c3:59:bc:e8:93:27:91:
47:12:7d:d6:52:e6:8e:b3:0d:bc:07:35:a6:32:78:
66:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:16:C9:89:55:1F:13:EF:89:9F:F5:DF:09:5D:C7:0F:AD:84:07:42
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ghbJiVUfE--Jn_XfCV3HD62EB0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.146.0/24
37.49.151.0/24
94.74.168.0/24
94.74.173.0/24
109.203.164.0/24
109.203.166.0/24
176.46.145.0/24
176.46.147.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:89:45:e6:79:df:37:fc:0c:ef:cd:dd:a2:3b:d3:5d:e6:e3:
56:29:78:3f:ca:9f:21:cf:d8:04:8a:98:38:4c:53:0b:04:44:
09:d5:86:c6:af:ff:71:4d:27:ab:c8:eb:53:6b:97:de:dd:a5:
89:6c:5a:3d:3c:d4:7f:6b:06:be:fa:72:d0:48:ac:79:3a:0b:
03:75:08:80:42:b0:29:7a:5e:85:59:03:d0:95:1b:f5:90:b9:
2b:cc:c5:77:15:3b:d3:3f:a4:ba:e3:5c:79:20:50:3b:04:e8:
54:08:a4:1a:4c:0d:4b:7c:5d:f0:dd:6d:67:12:49:04:7e:a9:
cf:45:c6:a2:18:7d:41:38:94:1a:9f:13:54:77:03:ae:72:ba:
a6:cf:42:ee:28:f1:92:81:ce:cd:2a:76:9a:2b:b3:df:5d:26:
a1:f5:3f:fb:ef:e2:54:08:c0:d4:e8:a9:c1:d0:69:8e:3e:0e:
06:06:4f:35:5d:b2:92:d9:c9:48:77:41:d9:9b:bd:ee:9e:ef:
20:39:bb:11:31:53:e8:2d:02:3b:3d:64:02:cd:1d:61:60:0e:
fa:cc:07:2c:59:95:21:7d:7d:29:ec:29:d9:c5:63:57:4e:9b:
69:c7:69:6b:d7:bf:b8:08:4e:29:5f:f0:15:82:8a:1a:8d:b4:
47:8c:7f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:24 2025 by rpki-client