Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/hJdmwIjKZjwlcriu6YzTWBSBtDQ.roa
File: hJdmwIjKZjwlcriu6YzTWBSBtDQ.roa (raw, json)
Hash identifier: O5xfl/Sr73Eq5CcDoa2r77FV4IMAbY/wbqsfCjfy//w=
Subject key identifier: 84:97:66:C0:88:CA:66:3C:25:72:B8:AE:E9:8C:D3:58:14:81:B4:34
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 018607C2CCC044B1542031E31684CDC5C925
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/hJdmwIjKZjwlcriu6YzTWBSBtDQ.roa
Signing time: Tue 31 Jan 2023 12:17:32 +0000
ROA not before: Tue 31 Jan 2023 12:17:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48847
IP address blocks: 193.84.118.0/24 maxlen: 24
193.84.114.224/27 maxlen: 27
193.84.114.0/23 maxlen: 23
193.84.114.0/24 maxlen: 24
193.84.118.0/26 maxlen: 26
193.84.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:c2:cc:c0:44:b1:54:20:31:e3:16:84:cd:c5:c9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Jan 31 12:17:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=849766c088ca663c2572b8aee98cd3581481b434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:f1:3a:9c:f7:76:a6:28:9d:0c:5f:29:a3:
fc:22:ec:ae:c1:cb:92:28:fc:69:34:c2:d7:0e:00:
32:17:e2:49:b2:be:a6:c0:bf:9b:ed:2d:cc:d2:90:
c1:4c:54:41:99:fd:e8:78:9f:b9:f5:6e:a4:73:cf:
2e:d9:dc:33:7f:53:dc:fb:62:0c:1c:65:8b:89:01:
10:b6:8f:b8:90:00:b5:e9:f1:ce:34:37:52:dc:8e:
f7:31:49:0c:8f:f7:19:51:72:6b:08:a4:d1:90:6f:
9b:46:bc:70:56:dd:c2:0e:aa:75:7a:2c:cd:f2:5a:
24:4c:33:0a:60:f5:74:b1:12:06:45:a0:2e:a9:6c:
f5:07:cc:d5:be:6a:db:0e:57:76:f6:20:eb:7b:88:
e7:15:18:74:05:ae:1c:e3:20:d1:ff:65:79:71:35:
3a:c7:cf:5c:41:25:87:d8:f0:b7:6b:a5:c0:ab:33:
32:51:d0:49:d3:7e:77:ad:03:79:ff:35:d3:c4:43:
b9:57:9c:3c:94:76:bc:aa:3c:58:e2:72:5e:69:80:
12:92:96:71:fd:a2:1d:d0:f7:48:3f:74:6b:19:35:
99:f3:d6:2b:68:11:bc:40:dc:e6:12:9e:cd:de:13:
ff:92:62:99:43:6b:af:40:75:f4:2d:b0:12:c1:7f:
46:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:97:66:C0:88:CA:66:3C:25:72:B8:AE:E9:8C:D3:58:14:81:B4:34
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/hJdmwIjKZjwlcriu6YzTWBSBtDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.114.0/23
193.84.118.0/24
Signature Algorithm: sha256WithRSAEncryption
86:3a:82:0f:20:1b:b3:1d:4e:a0:cf:65:8b:43:78:1f:08:4b:
56:88:75:4f:94:1d:e0:ea:a9:c9:62:36:87:2e:ea:47:78:91:
cb:83:ab:4e:62:b9:73:0d:8e:a0:e4:7b:c8:3c:90:45:30:b2:
26:6d:8e:99:62:03:af:cc:ae:2b:54:2a:6e:b6:17:4e:66:3d:
6b:21:77:75:3d:87:0d:69:1f:48:17:7a:57:65:cf:87:4d:a4:
ec:a2:51:36:c2:f6:6c:e3:cd:0e:0c:d7:3f:7c:c4:45:97:22:
db:56:33:08:7a:02:e9:91:12:0a:e8:b2:ac:8e:26:10:85:48:
bb:bd:26:fb:5e:f8:91:bc:59:2c:02:84:d4:11:d6:03:08:b0:
7a:22:72:3d:04:1e:63:13:5f:ea:96:10:74:85:d2:b8:11:0a:
08:61:20:81:5b:cd:a6:b1:c4:2a:a9:f5:b0:1e:d9:d4:e8:9b:
d5:b0:22:98:ad:95:c4:dc:f1:ea:d2:ab:bb:c5:82:f1:72:e8:
cb:f1:04:66:8d:ba:38:87:f3:2e:13:9c:68:af:2c:b7:e7:b5:
cb:c3:aa:62:e4:82:7d:18:cf:b5:00:66:54:a2:bc:ae:33:7b:
3a:42:3b:6a:b7:e1:4e:b5:79:68:12:e1:26:02:c8:b9:02:65:
04:c9:2d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 5 16:16:40 2023 by rpki-client on console-ams.rpki-client.org