Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/602_vHRmA58Q4tIOKjIdo3HZEcw.roa
File: 602_vHRmA58Q4tIOKjIdo3HZEcw.roa (raw, json)
Hash identifier: PBFsflIUQeeA8fbK9Lp1vXAZ+HrgusDdzW/HUFn7TJs=
Subject key identifier: EB:4D:BF:BC:74:66:03:9F:10:E2:D2:0E:2A:32:1D:A3:71:D9:11:CC
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DE6B3A8FA736E253A51BFC960A1A5841D
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/602_vHRmA58Q4tIOKjIdo3HZEcw.roa
Signing time: Mon 26 Feb 2024 18:35:50 +0000
ROA not before: Mon 26 Feb 2024 18:35:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 91.246.48.0/24 maxlen: 24
91.247.166.0/24 maxlen: 24
91.247.173.0/24 maxlen: 24
109.107.136.0/24 maxlen: 24
176.97.203.0/24 maxlen: 24
193.160.219.0/24 maxlen: 24
194.105.60.0/24 maxlen: 24
194.107.92.0/24 maxlen: 24
217.198.176.0/24 maxlen: 24
217.198.179.0/24 maxlen: 24
217.198.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 18:35:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e6:b3:a8:fa:73:6e:25:3a:51:bf:c9:60:a1:a5:84:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 26 18:35:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb4dbfbc7466039f10e2d20e2a321da371d911cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b9:d1:b7:e5:c2:a5:a9:f5:ee:54:81:15:74:
c3:3f:e2:1e:d7:c4:ca:2d:e4:a2:62:0e:2e:88:08:
ec:69:a8:97:82:9a:b9:ca:49:e7:06:7e:0f:09:30:
2e:38:d0:5d:66:18:68:79:7e:ed:f1:6a:0d:cc:b1:
dd:87:0e:fd:fc:35:60:ff:05:5c:0d:73:bc:09:28:
77:b2:5a:7c:fe:c4:9f:61:e2:c9:c8:d8:ef:9b:c9:
ae:7d:3e:74:c5:b6:e3:29:58:c2:59:36:37:73:71:
b3:69:59:ff:40:64:6e:67:0d:c5:a5:f8:c8:41:31:
ca:51:b9:29:72:80:65:f3:0b:f7:70:21:65:46:71:
5f:b5:52:73:95:4f:fe:e8:85:43:91:1e:4f:7b:af:
98:c0:b4:f4:4a:1b:97:40:f8:8d:15:cc:52:96:30:
05:c5:6f:eb:bd:53:29:62:8e:04:27:2f:b4:71:d5:
e2:0f:66:5a:5e:4f:40:be:41:55:8b:10:b7:fb:1d:
31:db:aa:e4:72:10:1f:2b:06:de:9d:a7:67:be:1e:
e8:7f:a7:a8:b9:e5:92:53:45:96:c8:e4:4e:93:3b:
4a:1a:9a:b6:26:b6:de:61:cb:e3:38:30:78:dc:e8:
f5:0b:0d:6f:55:59:65:20:f1:f6:59:b4:82:a2:df:
ce:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4D:BF:BC:74:66:03:9F:10:E2:D2:0E:2A:32:1D:A3:71:D9:11:CC
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/602_vHRmA58Q4tIOKjIdo3HZEcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.48.0/24
91.247.166.0/24
91.247.173.0/24
109.107.136.0/24
176.97.203.0/24
193.160.219.0/24
194.105.60.0/24
194.107.92.0/24
217.198.176.0/24
217.198.179.0-217.198.180.255
Signature Algorithm: sha256WithRSAEncryption
27:64:3e:79:94:2e:d0:67:4e:27:48:7e:ca:dd:1c:8e:9b:f9:
2c:ec:5b:e0:0d:96:d1:69:73:47:fe:ce:97:f6:25:b9:71:79:
49:71:96:a9:50:70:8a:44:28:e4:db:96:b2:15:71:dd:57:bf:
f4:1a:1a:00:90:d3:6e:87:b6:8a:0c:e1:cf:89:4d:b0:36:eb:
00:92:8a:b6:04:62:78:a8:20:23:cc:de:1b:9f:63:a3:d0:4c:
65:cc:e1:7c:a9:2b:5f:45:5d:d1:57:6d:4e:3f:df:ba:57:aa:
c8:a2:10:da:7b:38:eb:5d:66:89:1c:89:11:2c:46:42:56:87:
e1:cc:a5:dd:32:37:7d:a6:ef:07:43:3e:8e:c8:e8:94:c8:2b:
a9:47:82:bd:cc:b9:65:6c:5c:68:93:a2:36:e9:90:53:c8:ab:
cb:3f:c3:83:5e:a6:50:fe:f1:d0:68:f7:0a:82:88:72:cd:a8:
87:bf:8e:69:0f:ef:3a:af:9d:29:9c:ce:f0:25:fc:66:ea:11:
11:c8:e8:5a:db:7f:e9:9b:54:31:51:ae:98:19:61:41:45:7b:
bb:57:32:25:6f:64:63:57:fb:9f:a3:3a:56:e5:1c:6b:f3:c1:
78:9f:48:04:02:01:35:2f:67:15:b6:73:34:ed:21:9c:14:45:
b4:cc:ec:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:48 2024 by rpki-client on console-ams.rpki-client.org