Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/aO_bOvFhSx3vveyJtrDct1mu3O4.roa
File: aO_bOvFhSx3vveyJtrDct1mu3O4.roa (raw, json)
Hash identifier: rd6YMG5rMm6IGFO9Vawk3EAbQyny6/E7GVBeg5TD2zY=
Subject key identifier: 68:EF:DB:3A:F1:61:4B:1D:EF:BD:EC:89:B6:B0:DC:B7:59:AE:DC:EE
Certificate issuer: /CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Certificate serial: 01857082AFDED2389BC391CB57F42309A19E
Authority key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/aO_bOvFhSx3vveyJtrDct1mu3O4.roa
Signing time: Mon 02 Jan 2023 03:24:50 +0000
ROA not before: Mon 02 Jan 2023 03:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47564
IP address blocks: 176.107.226.0/23 maxlen: 23
176.107.232.0/23 maxlen: 23
176.107.228.0/23 maxlen: 23
176.107.236.0/23 maxlen: 23
176.107.234.0/23 maxlen: 23
91.204.200.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:af:de:d2:38:9b:c3:91:cb:57:f4:23:09:a1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Validity
Not Before: Jan 2 03:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68efdb3af1614b1defbdec89b6b0dcb759aedcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ec:fd:fd:1f:47:51:15:00:c1:a9:6c:08:ff:
01:3d:9f:47:75:86:ff:aa:52:dc:34:8a:ae:0a:58:
7a:2b:eb:a4:4b:96:e8:bb:de:68:7a:e5:9f:a6:94:
55:1c:5c:9e:69:b5:df:18:30:cb:56:75:26:6c:5c:
d9:9b:3c:b6:29:df:5f:c9:4f:01:9c:c6:82:a7:96:
ce:2f:15:49:77:d2:8a:3c:5a:e3:b4:9c:91:db:71:
e3:c8:56:73:77:42:ec:cf:9f:e4:fe:17:68:d2:bb:
2a:4d:7a:df:42:c8:bc:f7:f2:03:86:79:dd:70:72:
f4:27:c2:41:f7:9e:b6:c7:b1:33:21:d8:26:bb:5b:
f8:65:37:da:0c:38:ac:b9:29:db:fc:c3:6c:6e:cc:
61:80:99:21:e2:3d:16:06:13:da:ed:71:fb:42:b7:
dd:16:7e:57:11:b1:63:f0:4b:da:d9:fa:27:b9:d5:
c0:64:17:2e:fc:9c:f7:f7:89:b8:7a:3a:30:2f:7b:
b8:44:16:d7:02:61:c3:92:ca:6a:74:4c:15:fa:8d:
c5:b4:9f:6f:57:05:ce:99:e7:41:cd:f9:4b:8c:70:
88:5a:75:f0:a4:cb:58:eb:c2:32:50:b1:78:e3:8f:
39:0a:d7:14:88:fe:69:44:ef:f4:e6:2f:33:34:5e:
d1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EF:DB:3A:F1:61:4B:1D:EF:BD:EC:89:B6:B0:DC:B7:59:AE:DC:EE
X509v3 Authority Key Identifier:
keyid:CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/aO_bOvFhSx3vveyJtrDct1mu3O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.200.0/22
176.107.226.0-176.107.229.255
176.107.232.0-176.107.237.255
Signature Algorithm: sha256WithRSAEncryption
2c:09:24:d4:b9:dc:02:ff:0c:bc:0a:e0:60:fa:d7:b4:16:f5:
26:8c:a2:30:da:a1:5e:08:4e:dd:3d:55:c2:42:8c:93:0d:af:
90:b5:6d:a1:cc:1d:cd:32:89:78:9a:f3:c5:32:5a:ff:ee:de:
08:6f:30:b1:89:51:e4:37:dc:e8:70:8e:b1:c3:5c:ae:8c:5e:
9d:d7:b2:4a:75:f4:5f:46:45:83:a8:17:b8:b4:6f:fc:a6:68:
15:80:0f:8e:9f:69:59:97:dd:ef:09:9a:c8:b2:09:31:7e:bf:
fb:62:bf:6b:51:41:4f:11:fe:33:5d:57:8f:3d:d7:31:9d:9c:
02:ec:4d:35:bf:3d:2b:2e:d6:a4:d4:10:65:ae:02:39:3b:4b:
1e:8d:58:59:49:3d:c4:23:e7:68:43:5f:bc:d6:02:5a:fd:55:
64:b8:a3:ca:ab:05:ea:11:e2:17:da:b2:a4:cd:02:02:d3:c2:
19:04:cf:c1:4c:47:56:4a:d1:5f:7c:65:ad:ab:04:0d:73:88:
13:dc:a6:86:05:fe:01:b3:a6:d7:13:68:16:40:f1:26:1d:3e:
b9:21:37:dc:73:a5:4a:06:4f:e3:6e:74:90:dc:54:61:8f:5d:
20:6f:04:0a:c3:35:f7:7a:e3:b0:49:8b:fb:45:b2:ed:16:f3:
71:84:12:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org