Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/7_HLGfQb0TkJgMbewy-f75My1Hc.roa
File: 7_HLGfQb0TkJgMbewy-f75My1Hc.roa (raw, json)
Hash identifier: hyc2ZoJ3RlzvAvznIne4EuEARSlMyJeZBGWMvmzP1yk=
Subject key identifier: EF:F1:CB:19:F4:1B:D1:39:09:80:C6:DE:C3:2F:9F:EF:93:32:D4:77
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 018F38AA01A2E45FE80A1BA6519E42E64083
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/7_HLGfQb0TkJgMbewy-f75My1Hc.roa
Signing time: Thu 02 May 2024 09:36:56 +0000
ROA not before: Thu 02 May 2024 09:36:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60490
IP address blocks: 176.109.64.0/23 maxlen: 23
176.109.64.0/24 maxlen: 24
176.109.65.0/24 maxlen: 24
176.109.67.0/24 maxlen: 24
176.109.70.0/24 maxlen: 24
194.150.88.0/24 maxlen: 24
194.150.89.0/24 maxlen: 24
194.150.90.0/24 maxlen: 24
194.150.91.0/24 maxlen: 24
2a02:28:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 06 May 2024 07:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:aa:01:a2:e4:5f:e8:0a:1b:a6:51:9e:42:e6:40:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: May 2 09:36:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eff1cb19f41bd1390980c6dec32f9fef9332d477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:61:87:2d:18:e3:5d:96:48:21:8f:04:40:
33:85:9f:23:26:92:c6:9f:a2:2d:45:72:44:d9:a8:
55:64:1b:83:96:83:f0:10:cb:b8:70:2b:70:2a:ce:
16:60:6e:cb:b2:9a:4c:b1:08:2a:70:c3:65:ef:08:
e4:66:e7:41:07:ac:95:1c:1c:e1:e4:56:88:14:b6:
4b:06:8c:8d:40:4f:b3:9f:c4:5c:ac:86:32:4a:2a:
a7:8d:25:81:54:c0:13:a1:90:7a:48:30:0e:50:18:
40:f4:3e:34:58:dc:53:d2:b7:16:5a:bb:a6:0c:50:
54:a8:a9:32:9e:8d:fa:45:f9:90:dd:97:18:67:fc:
f5:83:96:f7:1f:99:30:df:94:e4:2f:87:a1:41:81:
15:1a:14:05:76:2e:43:fb:17:eb:5e:7b:df:e8:eb:
77:eb:eb:8d:d2:e7:17:be:99:c6:10:06:3a:e4:e0:
7f:3e:51:11:2f:54:b4:86:e5:dd:6f:a5:61:57:48:
c6:4e:83:8f:74:1d:98:e0:46:3a:fc:be:69:39:90:
16:8e:3c:8c:71:d1:94:cb:83:3d:e0:d4:35:a5:a9:
c4:36:cb:e0:80:2e:60:e0:14:c8:9e:75:b4:5a:2b:
14:53:37:0e:fa:8e:23:f5:5b:d7:56:69:d8:f7:76:
fa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F1:CB:19:F4:1B:D1:39:09:80:C6:DE:C3:2F:9F:EF:93:32:D4:77
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/7_HLGfQb0TkJgMbewy-f75My1Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.109.64.0/23
176.109.67.0/24
176.109.70.0/24
194.150.88.0/22
IPv6:
2a02:28:7::/48
Signature Algorithm: sha256WithRSAEncryption
3f:3d:24:44:0d:df:9f:a3:91:fc:52:93:12:8f:9a:05:79:70:
1d:31:84:85:d5:07:30:63:ae:23:80:bf:b0:e0:89:f0:af:11:
31:3b:ed:97:7d:53:95:45:fe:88:24:42:4c:e8:59:0b:1b:58:
21:d5:3f:17:fd:3e:31:24:81:c7:b1:84:dc:94:88:4c:cc:24:
bf:04:8e:98:d5:13:91:09:dc:1a:87:8a:91:7e:64:54:e6:19:
ee:c7:23:d8:4f:10:ef:5e:3b:61:c5:ba:dd:ef:cb:df:18:21:
0c:ca:cc:6a:3d:eb:3c:f9:ea:ac:dc:29:63:31:0f:ae:e0:4a:
6a:b9:5d:07:a8:8e:8a:85:36:dd:5e:e6:b0:02:5f:f8:15:56:
f9:9c:9a:fc:36:8f:48:8f:7b:69:2e:8b:64:4e:33:2b:ca:d7:
e1:f7:c9:cc:d8:01:dc:1a:cd:cd:5a:78:e1:a0:d5:f1:80:7c:
07:4a:2d:3d:e2:45:6e:36:17:ed:2b:59:45:b7:94:ee:ed:10:
5c:b8:73:ab:72:75:e7:8d:5c:69:5b:9b:34:6b:9a:2a:6b:fe:
6b:d5:aa:54:f8:5e:96:c7:73:f9:ae:cd:c9:50:fc:48:52:e7:
53:4a:52:e5:8a:8d:7a:1c:c1:e7:4e:65:e5:e5:7e:84:be:02:
db:f0:24:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 11:11:24 2024 by rpki-client on console-fra.rpki-client.org