Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/A9JDrkgvCuyN9sGJcranorBzBZY.roa
File: A9JDrkgvCuyN9sGJcranorBzBZY.roa (raw, json)
Hash identifier: yOMF/3RVETHPfCYmQpg17nGvyYc5fOnluMQwx5oJ1Jg=
Subject key identifier: 03:D2:43:AE:48:2F:0A:EC:8D:F6:C1:89:72:B6:A7:A2:B0:73:05:96
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018571B9F4BEDD7CA3C37178743571007F93
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/A9JDrkgvCuyN9sGJcranorBzBZY.roa
Signing time: Mon 02 Jan 2023 09:04:50 +0000
ROA not before: Mon 02 Jan 2023 09:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60148
IP address blocks: 2.187.255.0/24 maxlen: 24
2.187.254.0/24 maxlen: 24
2.182.255.0/24 maxlen: 24
2.182.254.0/24 maxlen: 24
78.39.221.0/24 maxlen: 24
78.39.152.0/24 maxlen: 24
78.39.157.0/24 maxlen: 24
80.191.56.0/24 maxlen: 24
78.38.239.0/24 maxlen: 24
2.187.253.0/24 maxlen: 24
78.38.238.0/24 maxlen: 24
78.38.237.0/24 maxlen: 24
2.185.254.0/24 maxlen: 24
2.185.255.0/24 maxlen: 24
2.180.255.0/24 maxlen: 24
2.180.254.0/24 maxlen: 24
2.181.222.0/24 maxlen: 24
2.181.223.0/24 maxlen: 24
2.183.254.0/24 maxlen: 24
2.183.255.0/24 maxlen: 24
195.146.37.0/24 maxlen: 24
195.146.59.0/24 maxlen: 24
2.184.255.0/24 maxlen: 24
2.184.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b9:f4:be:dd:7c:a3:c3:71:78:74:35:71:00:7f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 09:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03d243ae482f0aec8df6c18972b6a7a2b0730596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:64:43:ed:b1:e2:08:03:cd:aa:7a:0d:b9:1a:
be:42:61:09:d4:74:fb:99:e3:2f:2e:fb:dd:63:7e:
d4:11:a4:63:a0:e1:bd:c6:3a:e1:c4:7e:67:14:38:
ab:87:ba:cc:e7:aa:70:05:f9:fa:d4:39:f8:57:83:
27:2d:92:e2:20:f9:46:3a:18:96:92:27:ff:3f:c1:
3e:ab:d0:9a:5e:c5:cf:51:d9:db:ad:77:6f:90:85:
a1:6b:a1:22:d2:f7:76:64:02:ab:84:ae:0b:2f:91:
72:48:44:20:9d:0f:ec:fb:14:1e:40:c3:18:bd:f6:
be:36:14:c3:2b:9c:26:c0:df:ee:81:24:90:b9:08:
0f:c2:36:9d:d7:54:a9:bd:ac:8b:35:33:e2:43:b3:
8e:51:be:f1:41:b3:e6:99:95:60:2b:22:43:0c:98:
98:a1:18:26:89:12:d5:1d:64:00:f8:ed:0a:be:d8:
30:b8:7f:02:fd:bc:d2:f2:71:5e:38:4e:5e:1c:a3:
ae:9d:3b:d8:94:82:a2:23:09:6d:82:83:be:a6:eb:
5b:bf:49:af:1d:4b:4d:fd:b2:c9:6b:11:3f:d3:9a:
2a:ca:8f:dc:13:e8:5f:58:45:71:97:0e:e3:fb:40:
e3:f8:0c:d8:ee:43:36:ba:0a:c2:b9:c0:92:b3:f4:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D2:43:AE:48:2F:0A:EC:8D:F6:C1:89:72:B6:A7:A2:B0:73:05:96
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/A9JDrkgvCuyN9sGJcranorBzBZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.180.254.0/23
2.181.222.0/23
2.182.254.0/23
2.183.254.0/23
2.184.254.0/23
2.185.254.0/23
2.187.253.0-2.187.255.255
78.38.237.0-78.38.239.255
78.39.152.0/24
78.39.157.0/24
78.39.221.0/24
80.191.56.0/24
195.146.37.0/24
195.146.59.0/24
Signature Algorithm: sha256WithRSAEncryption
02:e9:53:af:eb:7a:5f:99:72:92:9c:6e:fc:db:c5:b3:0f:6d:
b6:69:0b:2b:b6:de:35:62:01:59:f7:e8:4c:41:7a:08:0c:cd:
a8:20:52:8f:e9:d6:95:b3:1e:d5:19:79:6d:c1:f6:ab:41:27:
5d:4a:df:8f:2c:1f:83:70:9b:8f:f1:8f:08:2e:c4:09:5f:ae:
b6:16:54:e4:a5:ff:82:9a:ec:1e:9e:ed:f2:d1:43:10:00:b9:
ed:20:d8:ed:f2:1c:73:21:4f:47:30:e5:c3:d5:87:88:a1:c0:
22:73:bb:c7:64:e1:f8:d5:20:bc:7c:20:1a:3c:38:01:4b:29:
eb:84:ca:ad:1b:50:05:82:df:59:cd:70:27:d5:9d:33:89:53:
15:17:24:a4:3f:ce:20:14:df:65:78:fe:36:0d:08:4a:77:5a:
ae:13:b5:5e:f0:49:44:76:05:05:ad:bb:11:4b:ab:4b:1d:24:
b7:08:e9:b9:04:17:8f:0c:5e:f3:9f:2d:39:71:24:61:17:64:
d3:0f:74:7a:bc:8c:7a:75:ba:35:91:0b:9c:7f:c4:fb:2f:5d:
8d:ef:8d:6f:57:c4:b2:98:12:97:fe:cf:fd:04:dc:84:87:61:
42:38:9c:8a:e2:c8:d4:8b:11:7b:6d:51:5d:8d:30:6e:bb:6c:
80:e9:98:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:52 2024 by rpki-client on console-ams.rpki-client.org