Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/6wQ9R0K1qLXwdy4zi-s7lGjFm8c.roa
File: 6wQ9R0K1qLXwdy4zi-s7lGjFm8c.roa (raw, json)
Hash identifier: vn36moAiJhfri44EiFl3FNv/VASukChlGyeYw5jQZWo=
Subject key identifier: EB:04:3D:47:42:B5:A8:B5:F0:77:2E:33:8B:EB:3B:94:68:C5:9B:C7
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018ACB4C1BABBFD07DB976E2D3F029AE26D0
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/6wQ9R0K1qLXwdy4zi-s7lGjFm8c.roa
Signing time: Mon 25 Sep 2023 07:44:37 +0000
ROA not before: Mon 25 Sep 2023 07:44:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48147
IP address blocks: 78.39.47.0/24 maxlen: 24
2.189.242.0/23 maxlen: 23
2.189.242.0/24 maxlen: 24
2.189.243.0/24 maxlen: 24
2.189.254.0/23 maxlen: 23
2.189.254.0/24 maxlen: 24
2.189.255.0/24 maxlen: 24
2.189.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cb:4c:1b:ab:bf:d0:7d:b9:76:e2:d3:f0:29:ae:26:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Sep 25 07:44:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb043d4742b5a8b5f0772e338beb3b9468c59bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cb:2b:a2:34:17:e0:97:dc:0d:9f:ba:4e:f6:
1f:f4:4d:32:26:06:65:ef:60:b8:72:0e:9d:e7:2e:
85:a6:6b:79:15:74:46:cd:9f:22:de:0b:ac:36:f6:
49:9c:0b:a2:c0:0d:02:f1:0d:46:22:f4:33:4d:17:
b0:52:3c:8e:33:cb:11:ba:b6:19:e6:16:ab:aa:e9:
41:cc:91:ef:67:76:62:14:df:0d:be:00:cd:40:21:
35:0d:e1:75:ed:4e:1b:c4:ae:58:95:48:d4:14:75:
cb:92:60:9a:27:3e:93:cb:16:b1:56:94:88:e3:6a:
cc:da:d7:3b:67:43:5a:a0:08:4f:7d:00:d6:a6:a0:
15:9e:d4:99:d1:e8:e3:37:84:60:bb:b1:55:30:84:
7d:f2:6a:b1:85:7f:79:cf:47:81:f5:c4:8f:90:e5:
85:af:f1:04:f0:84:2c:95:b1:e2:ee:5b:d9:dc:aa:
f7:a7:6e:8e:f8:10:16:17:d7:b9:f2:38:a5:e7:00:
60:00:68:67:ae:4e:43:39:b0:ce:d0:2d:cb:68:91:
64:88:50:1e:39:24:6b:77:e1:aa:4d:53:ac:3c:f0:
69:e5:b6:d7:13:0d:d7:94:2f:58:a5:ab:2c:72:a5:
a4:77:64:01:9d:5c:91:1d:46:7e:3c:a2:92:b0:10:
aa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:04:3D:47:42:B5:A8:B5:F0:77:2E:33:8B:EB:3B:94:68:C5:9B:C7
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/6wQ9R0K1qLXwdy4zi-s7lGjFm8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.189.58.0/24
2.189.242.0/23
2.189.254.0/23
78.39.47.0/24
Signature Algorithm: sha256WithRSAEncryption
26:6d:83:b5:63:39:42:9d:00:ee:55:5b:43:cf:a4:15:13:c6:
0d:71:e9:d0:7d:7d:97:ea:0d:35:8a:1c:c4:fc:05:6d:1e:ca:
75:97:8c:28:02:41:52:ab:46:86:5b:8f:8e:c2:0a:49:1b:49:
d4:18:d2:d3:a7:b6:81:cb:1a:9f:83:cf:f7:76:3f:6f:06:bb:
f1:60:69:d1:c4:ed:38:92:d9:ab:24:49:b7:c1:a4:9b:f8:e4:
3e:df:20:ce:3b:20:ae:eb:77:17:94:5c:c2:74:ab:65:c9:68:
e9:7f:a5:b2:9c:43:3b:25:86:5c:db:f2:40:83:af:64:74:b5:
81:7e:70:df:6b:85:36:b7:1e:7f:fc:d9:e0:27:86:7e:51:74:
72:5e:b2:69:cb:0a:5a:1c:f8:04:92:68:3c:08:79:6d:ca:6a:
32:20:b9:40:5e:b5:26:85:67:38:36:35:2d:93:ec:f7:0f:87:
7c:eb:ae:f3:3d:b2:d1:c5:4c:93:fd:af:16:34:e6:80:b2:99:
b8:41:95:1f:b9:58:dc:b8:31:0a:84:08:6a:d3:d6:c6:d8:ad:
8a:92:18:78:1a:31:9b:11:8c:f0:42:6e:c7:0b:5a:cf:06:e7:
62:b5:a9:e4:bd:c5:f1:7e:63:4d:77:74:37:9e:28:59:97:ab:
28:d5:2d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:52 2024 by rpki-client on console-ams.rpki-client.org