Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/9S4X87hZV6DKkV8-zWQtMKTgjoY.roa
File: 9S4X87hZV6DKkV8-zWQtMKTgjoY.roa (raw, json)
Hash identifier: gXEmjhTWbsyqfBmhuNXA4Z2fYzrEzLHr80DZzsRaHDM=
Subject key identifier: F5:2E:17:F3:B8:59:57:A0:CA:91:5F:3E:CD:64:2D:30:A4:E0:8E:86
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 0185A1488E9E64ED1CCA1B3F8CB40FF1B26E
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/9S4X87hZV6DKkV8-zWQtMKTgjoY.roa
Signing time: Wed 11 Jan 2023 14:42:44 +0000
ROA not before: Wed 11 Jan 2023 14:42:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34224
IP address blocks: 82.112.171.0/24 maxlen: 24
82.112.175.0/24 maxlen: 24
82.112.174.0/24 maxlen: 24
185.143.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jul 2023 11:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:48:8e:9e:64:ed:1c:ca:1b:3f:8c:b4:0f:f1:b2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Jan 11 14:42:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f52e17f3b85957a0ca915f3ecd642d30a4e08e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f2:10:5d:cd:d9:96:b8:a4:ad:af:7e:07:71:
48:c6:aa:aa:d4:f6:db:d5:4b:64:ec:73:53:24:be:
73:ff:bd:87:94:0c:60:fb:e1:1f:05:1e:07:c6:ab:
c4:01:2f:16:a6:6e:c4:e5:76:9e:84:25:55:1c:87:
2f:ed:1f:d0:5d:e3:be:76:6c:8e:4d:a2:d3:e6:e1:
74:76:62:39:80:1f:13:86:d5:96:02:4a:e9:95:5a:
78:5c:96:16:4f:64:d1:51:d5:5e:78:25:38:cb:50:
36:09:a9:88:ff:3a:13:f7:eb:07:56:e9:6f:c6:35:
7c:73:8d:80:2f:d1:5a:64:a8:99:29:1b:e8:00:83:
9a:40:bc:a1:b6:d6:2c:8a:0c:0f:73:6f:64:79:c2:
75:10:43:9f:d7:a7:34:0a:39:85:f8:56:5d:08:c1:
ef:64:ea:78:38:2e:fb:10:4d:67:a3:47:af:9a:0c:
99:7b:75:e9:ef:b5:d4:35:e9:75:f9:9e:c6:3d:3e:
72:ac:ca:51:c7:73:11:74:40:ba:d0:ac:1f:77:61:
b6:59:57:ba:a7:6d:40:b5:bd:07:f9:84:28:70:b1:
ef:88:0f:7e:9b:a7:d7:e9:1c:87:60:87:ff:1c:c7:
9f:57:e4:ee:6c:02:2b:d7:69:4b:f9:6a:13:c9:c6:
10:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2E:17:F3:B8:59:57:A0:CA:91:5F:3E:CD:64:2D:30:A4:E0:8E:86
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/9S4X87hZV6DKkV8-zWQtMKTgjoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.171.0/24
82.112.174.0/23
185.143.78.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:f8:c0:ce:9f:e4:6d:aa:08:57:dd:56:77:75:e3:28:48:93:
5f:ce:f1:71:c0:05:37:cb:4d:c9:e6:ec:7d:f2:90:87:be:b9:
b9:c9:85:55:cd:8d:64:9a:46:0f:a9:17:f6:3a:42:d3:68:a6:
8c:17:b9:4c:e2:94:dc:6f:82:af:41:5d:28:81:7e:2f:4e:d3:
c8:33:df:87:ec:25:28:16:25:e3:19:f3:cf:ed:e8:10:76:31:
e6:32:1e:f7:f8:31:d7:67:91:8a:6c:14:e0:c3:79:b4:d1:2f:
97:73:b5:d1:f0:bb:4e:b2:1d:7e:fe:fc:3f:dc:6a:12:b3:8a:
a7:55:b8:f3:ed:aa:53:60:a7:5a:9e:7a:e1:7a:69:75:36:58:
ad:67:65:1c:6f:17:ee:0c:68:79:72:ac:19:48:da:5b:2c:4d:
7f:f8:4f:96:d0:74:95:e3:d4:94:38:01:18:1f:16:c1:92:dc:
e3:8e:1f:64:bd:f2:18:4c:0f:08:01:f7:b7:b0:ae:fc:eb:97:
f4:be:8e:83:05:d1:b0:23:9c:ef:4a:57:df:3a:35:51:18:7b:
c0:96:58:1f:ed:ec:1a:ba:7c:39:6e:ee:5a:3a:65:85:df:e7:
be:91:49:c6:02:50:40:78:8b:09:f7:81:e4:1e:df:35:75:26:
d3:ed:6a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:08 2024 by rpki-client on console-ams.rpki-client.org