Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/7cX4GPBuPn2m0CWm8aAkFq43tZk.roa
File: 7cX4GPBuPn2m0CWm8aAkFq43tZk.roa (raw, json)
Hash identifier: ByzqsmdArP0TrWhzyxO1o3hBW3xUDgqbqAghbK9UItU=
Subject key identifier: ED:C5:F8:18:F0:6E:3E:7D:A6:D0:25:A6:F1:A0:24:16:AE:37:B5:99
Certificate issuer: /CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Certificate serial: 018B379B4E6B2C0693D66AB021B17C6E958A
Authority key identifier: 78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/7cX4GPBuPn2m0CWm8aAkFq43tZk.roa
Signing time: Mon 16 Oct 2023 08:30:06 +0000
ROA not before: Mon 16 Oct 2023 08:30:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25355
IP address blocks: 82.144.64.0/19 maxlen: 29
82.144.64.0/24 maxlen: 24
82.144.68.0/24 maxlen: 24
82.144.69.0/24 maxlen: 24
82.144.67.0/24 maxlen: 24
82.144.65.0/24 maxlen: 24
82.144.66.0/24 maxlen: 24
82.144.70.0/24 maxlen: 24
82.144.71.0/24 maxlen: 24
82.144.77.0/24 maxlen: 24
82.144.78.0/24 maxlen: 24
82.144.75.0/24 maxlen: 24
82.144.76.0/24 maxlen: 24
82.144.74.0/24 maxlen: 24
82.144.72.0/24 maxlen: 24
82.144.73.0/24 maxlen: 24
82.144.82.0/24 maxlen: 24
82.144.83.0/24 maxlen: 24
82.144.81.0/24 maxlen: 24
82.144.79.0/24 maxlen: 24
82.144.80.0/24 maxlen: 24
82.144.84.0/24 maxlen: 24
82.144.85.0/24 maxlen: 24
82.144.91.0/24 maxlen: 24
82.144.89.0/24 maxlen: 24
82.144.90.0/24 maxlen: 24
82.144.88.0/24 maxlen: 24
82.144.86.0/24 maxlen: 24
82.144.87.0/24 maxlen: 24
82.144.93.0/24 maxlen: 24
82.144.94.0/24 maxlen: 24
82.144.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:9b:4e:6b:2c:06:93:d6:6a:b0:21:b1:7c:6e:95:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Validity
Not Before: Oct 16 08:30:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edc5f818f06e3e7da6d025a6f1a02416ae37b599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:ed:80:0f:98:eb:a6:27:38:16:1b:c0:fd:
ce:ed:9a:56:54:ea:3b:95:0f:c6:70:29:d6:01:94:
55:12:72:c9:e0:7a:27:e4:56:18:d3:6f:34:2b:77:
1f:e7:23:0e:62:af:80:33:a8:97:79:b7:8d:86:30:
9c:a6:43:f3:5c:5f:19:75:cc:82:a4:ea:38:79:19:
20:97:77:d4:ec:67:88:9f:41:53:db:76:3f:ae:fa:
f2:8a:66:d6:1d:ee:a0:c4:24:c9:ca:d7:ee:e9:93:
f4:cb:d5:28:3e:ab:20:94:ab:a7:03:25:40:24:e0:
cc:83:58:b2:6a:e8:4d:80:32:3b:aa:92:a9:0d:be:
65:4d:db:ec:5d:d5:6a:ab:02:3e:0a:93:f4:27:de:
92:99:e4:22:72:de:11:9c:00:6a:5a:39:c3:57:97:
3e:33:9c:57:0d:9b:75:e8:f8:e8:b5:3e:a9:f0:5c:
05:cd:a1:a9:43:90:bc:26:c2:2d:dc:21:75:16:f2:
df:5e:c1:d6:cc:32:1b:f7:dc:0e:bf:1a:d1:6a:fe:
ea:43:ba:da:0e:d0:72:46:aa:55:c7:e5:ce:ac:10:
20:70:36:fc:fb:6d:a3:35:0e:82:3b:98:81:97:7b:
6b:5b:e1:30:22:e9:37:5f:53:1f:87:e6:6f:d9:e2:
9f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C5:F8:18:F0:6E:3E:7D:A6:D0:25:A6:F1:A0:24:16:AE:37:B5:99
X509v3 Authority Key Identifier:
keyid:78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/7cX4GPBuPn2m0CWm8aAkFq43tZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.144.64.0/19
Signature Algorithm: sha256WithRSAEncryption
a2:39:18:b6:d6:8e:08:03:cb:32:f2:cc:bd:00:bf:40:13:14:
eb:55:33:39:12:c3:7f:68:a2:c2:d9:94:61:50:87:d7:37:0d:
41:3c:6f:69:be:72:74:30:a3:30:e6:e7:94:53:52:88:6d:f6:
ef:9e:29:3d:dc:38:00:79:30:e7:5c:c0:29:56:e5:a9:24:83:
72:c1:61:c6:90:89:96:69:62:c3:5c:a7:90:80:dd:c7:6c:c4:
73:0d:ae:0e:9b:e9:0c:7b:60:cc:23:a1:b2:49:f8:f3:89:64:
4e:8c:f6:8c:87:3d:0e:da:4c:ac:72:4b:3c:e3:db:94:77:71:
f8:77:57:f5:7e:d7:21:4d:26:a0:7f:28:76:3d:fa:57:89:f1:
45:22:51:d5:a4:19:28:65:67:ff:4f:2b:a1:fd:c1:88:de:ac:
69:58:27:0e:5b:96:ea:ac:37:44:59:77:25:ca:5d:19:c3:85:
b9:09:a3:cf:1e:2d:ba:f8:5b:1b:50:fa:4f:d7:86:49:b3:a5:
79:76:30:04:13:e6:44:59:89:03:92:fe:16:53:71:37:f0:fe:
97:d8:6d:90:90:23:92:9e:bc:48:c3:4c:86:9f:b6:1e:75:7a:
e0:a5:12:02:6c:c5:04:3a:22:7c:a8:2c:8d:77:3a:89:65:85:
f7:3d:a2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:10 2024 by rpki-client on console-ams.rpki-client.org