Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/rs8Afc4XxBsE3yPhAYDxKsGWkeU.roa
File: rs8Afc4XxBsE3yPhAYDxKsGWkeU.roa (raw, json)
Hash identifier: 0MJy5EidXAjDF5sv87459YQKmVI7UjXnVMDsE59Qcoc=
Subject key identifier: AE:CF:00:7D:CE:17:C4:1B:04:DF:23:E1:01:80:F1:2A:C1:96:91:E5
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0187224A6FC55C8FD83DC265785E95444106
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/rs8Afc4XxBsE3yPhAYDxKsGWkeU.roa
Signing time: Mon 27 Mar 2023 08:58:36 +0000
ROA not before: Mon 27 Mar 2023 08:58:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 83.97.119.0/24 maxlen: 24
178.20.28.0/22 maxlen: 24
88.218.47.0/24 maxlen: 24
88.218.45.0/24 maxlen: 24
194.99.24.0/24 maxlen: 24
77.83.24.0/22 maxlen: 24
194.99.26.0/24 maxlen: 24
193.151.190.0/23 maxlen: 24
193.151.189.0/24 maxlen: 24
83.97.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Jun 2023 17:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:4a:6f:c5:5c:8f:d8:3d:c2:65:78:5e:95:44:41:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 27 08:58:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aecf007dce17c41b04df23e10180f12ac19691e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:9e:5c:84:4e:45:06:97:10:56:3f:f9:0b:
0f:84:30:f3:e0:4b:42:14:36:03:aa:24:0b:f7:60:
4f:b1:57:12:ce:69:5c:6c:8c:2a:58:28:48:1c:81:
9d:16:d8:8d:f7:84:50:41:53:44:f6:66:eb:27:fe:
c6:e2:4f:fa:d6:34:7e:2a:ae:47:2d:12:a0:c1:7b:
92:51:85:6f:3f:db:18:e4:d8:87:d9:b3:c1:0f:89:
86:0e:70:1e:f2:c0:06:e8:87:46:e2:e9:35:0d:17:
14:e3:be:43:14:e5:69:01:8b:2f:0f:17:47:72:9e:
01:0b:55:71:87:e5:81:b6:a3:a6:fb:53:5e:f7:e3:
8e:dd:9c:0a:fd:38:45:47:8d:1a:47:09:1b:6a:b9:
d1:21:91:d9:5b:a2:c4:53:68:30:0d:5f:d8:14:a8:
d5:7c:ac:85:e7:dd:5b:32:fe:9b:e6:3f:7d:6b:9b:
00:55:af:3a:18:52:7a:a7:4b:7e:b7:2d:29:37:9b:
46:8c:95:02:fe:43:f3:76:3a:20:b5:b1:8f:df:ab:
5e:4c:0a:eb:8d:08:dc:d6:16:7d:5f:2f:5e:da:56:
5a:bf:55:f6:79:74:75:77:38:0b:32:94:67:0e:5f:
34:16:15:77:c8:b7:e4:28:7a:fb:fc:31:d4:1b:f3:
9f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CF:00:7D:CE:17:C4:1B:04:DF:23:E1:01:80:F1:2A:C1:96:91:E5
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/rs8Afc4XxBsE3yPhAYDxKsGWkeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.24.0/22
83.97.117.0/24
83.97.119.0/24
88.218.45.0/24
88.218.47.0/24
178.20.28.0/22
193.151.189.0-193.151.191.255
194.99.24.0/24
194.99.26.0/24
Signature Algorithm: sha256WithRSAEncryption
61:0e:40:2d:78:8a:84:3d:48:14:50:4f:d3:db:9b:ef:12:f1:
ec:ff:6e:0b:20:90:7e:16:de:99:52:79:88:6a:9e:20:2a:db:
00:f2:ce:31:b6:d5:54:fc:9c:f6:05:88:b9:98:3e:e6:14:65:
d1:1e:b3:db:f0:94:6a:55:b9:96:c0:d9:43:65:7b:ad:1b:34:
fb:61:4e:00:9d:d7:70:af:00:97:12:7c:a2:bc:55:b3:fe:7f:
63:47:e8:8c:65:2a:c5:15:62:66:46:2e:1e:91:1e:20:b4:42:
87:9d:50:4c:b9:d8:11:95:2c:19:d0:92:31:4d:d1:7b:03:7a:
9e:2c:93:ba:ed:7b:06:b3:c3:08:95:87:ed:4a:9b:0f:2e:2d:
bc:05:98:e3:60:bd:57:6e:a1:2c:e4:0d:b0:42:43:c6:38:6e:
38:db:c8:45:2b:27:d7:bc:ee:bc:37:b1:77:5a:9a:9d:b3:1a:
d0:2e:ea:db:1d:5d:28:25:53:c5:82:63:5e:fe:c7:34:87:16:
87:3d:81:20:7f:ba:73:3a:4c:50:9d:9f:7e:33:52:ca:27:36:
12:24:58:dc:27:ce:c1:88:40:b1:6d:71:2f:75:e8:8e:0e:f1:
18:e3:27:d4:0c:8e:2b:6e:d4:65:44:76:b0:d4:d0:64:24:d9:
04:cd:ac:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:20 2024 by rpki-client on console-ams.rpki-client.org