Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7db802-04ad-4c2d-b11a-64964976f7b3/1/htoyIRx4ZxJgkPn0yhCCtp7fnyM.roa
File: htoyIRx4ZxJgkPn0yhCCtp7fnyM.roa (raw, json)
Hash identifier: PiQTZJ/MCVIYZC4FRT63CukLoT69B0PZiUHFfQz5aGA=
Subject key identifier: 86:DA:32:21:1C:78:67:12:60:90:F9:F4:CA:10:82:B6:9E:DF:9F:23
Certificate issuer: /CN=a8cface114d8cdea6dc5e7a49943f322346cb35d
Certificate serial: 01901210931768B29917026859394AFD3A30
Authority key identifier: A8:CF:AC:E1:14:D8:CD:EA:6D:C5:E7:A4:99:43:F3:22:34:6C:B3:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qM-s4RTYzeptxeekmUPzIjRss10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/7db802-04ad-4c2d-b11a-64964976f7b3/1/htoyIRx4ZxJgkPn0yhCCtp7fnyM.roa
Signing time: Thu 13 Jun 2024 14:46:34 +0000
ROA not before: Thu 13 Jun 2024 14:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 37.157.60.0/22 maxlen: 24
62.244.70.0/23 maxlen: 24
62.244.72.0/22 maxlen: 24
62.244.90.0/23 maxlen: 24
62.244.92.0/23 maxlen: 24
103.73.172.0/22 maxlen: 24
103.73.172.0/24 maxlen: 24
103.73.173.0/24 maxlen: 24
103.73.174.0/24 maxlen: 24
103.73.175.0/24 maxlen: 24
185.247.248.0/22 maxlen: 24
193.47.139.0/24 maxlen: 24
193.222.142.0/23 maxlen: 24
193.222.188.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jun 2024 15:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:12:10:93:17:68:b2:99:17:02:68:59:39:4a:fd:3a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8cface114d8cdea6dc5e7a49943f322346cb35d
Validity
Not Before: Jun 13 14:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86da32211c7867126090f9f4ca1082b69edf9f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:42:01:b6:b1:81:86:50:bf:c4:d2:08:6e:
ee:9f:98:a2:5a:a8:b1:04:ec:ea:d7:5f:8b:8e:38:
ad:eb:db:ce:1c:0c:6a:84:a6:2a:28:74:35:7a:5c:
c7:8d:73:c2:ab:09:00:54:73:f6:40:b6:52:6b:07:
bb:4c:9d:fc:17:9c:b1:e4:f8:11:46:ab:7b:30:f5:
b0:cf:45:ec:db:d1:7f:f3:2b:55:63:14:a7:f1:f1:
99:ae:30:5d:c6:9c:c0:a5:f6:c9:94:a1:76:cf:3d:
46:c1:23:70:60:88:9d:26:91:f4:59:79:75:5a:8a:
d5:86:2d:4a:d1:a8:dd:b1:89:3a:f5:19:c6:dc:66:
9e:08:1d:c1:cd:0c:73:b5:c4:4a:40:13:ed:28:b9:
a0:08:6e:43:ab:66:8d:70:e9:e0:27:6b:34:4c:1c:
49:71:88:69:1f:08:8c:a4:c6:b4:8b:9a:8e:eb:1a:
35:7f:20:bf:d9:bb:bf:9a:f7:fa:b1:35:b1:c8:3b:
cb:ed:8d:63:93:07:fc:64:42:c2:68:b4:92:e6:83:
18:91:93:30:81:ef:b1:34:52:4e:af:d5:f4:ea:68:
f8:9d:71:dc:92:49:78:b5:7c:e5:39:db:5c:44:33:
25:d5:3b:aa:51:ff:c2:f3:ab:6f:5a:25:8b:55:b3:
30:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DA:32:21:1C:78:67:12:60:90:F9:F4:CA:10:82:B6:9E:DF:9F:23
X509v3 Authority Key Identifier:
keyid:A8:CF:AC:E1:14:D8:CD:EA:6D:C5:E7:A4:99:43:F3:22:34:6C:B3:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qM-s4RTYzeptxeekmUPzIjRss10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7db802-04ad-4c2d-b11a-64964976f7b3/1/htoyIRx4ZxJgkPn0yhCCtp7fnyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7db802-04ad-4c2d-b11a-64964976f7b3/1/qM-s4RTYzeptxeekmUPzIjRss10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.60.0/22
62.244.70.0-62.244.75.255
62.244.90.0-62.244.93.255
103.73.172.0/22
185.247.248.0/22
193.47.139.0/24
193.222.142.0/23
193.222.188.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:3d:e0:9e:ff:f1:fc:24:70:46:4f:93:22:8f:a9:03:1c:09:
ac:87:ee:da:ce:7d:b5:c5:c6:c1:f1:a8:ad:24:17:4a:c2:98:
92:44:c2:69:2d:cf:9a:bb:75:a9:ba:d2:bd:f5:a6:b0:02:17:
5b:37:98:22:44:ca:7d:b6:61:9a:78:c5:d3:8f:a7:a3:09:07:
60:40:9c:3a:99:af:d9:24:90:13:c0:26:10:d1:13:c3:26:90:
73:53:3f:4f:b4:63:77:61:22:bb:77:09:68:6d:f5:07:d5:41:
55:bc:48:5c:f9:84:9c:73:1a:bc:c8:be:aa:39:73:0e:d6:60:
83:50:69:5f:2d:b6:13:e8:29:8d:55:9f:51:58:bb:f4:6a:3b:
f9:27:9f:5c:ec:19:18:c4:c0:cf:49:56:34:03:8b:c5:7e:a7:
32:9c:ce:f1:31:c2:cb:20:da:99:fe:3e:2f:39:03:bd:71:81:
d6:be:3b:1c:67:70:9b:c9:86:0f:a3:4e:9e:8a:26:16:dc:af:
a9:10:60:ff:9d:d6:33:ff:f2:73:02:51:30:21:f2:ff:d1:54:
5e:2d:9f:4c:1b:df:89:f3:22:16:b4:ea:af:19:90:06:63:a9:
f0:c2:ef:24:d5:75:bc:87:0f:87:6c:3a:a0:bd:03:12:84:26:
5e:0b:44:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 20:20:15 2024 by rpki-client on console-ams.rpki-client.org