Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/SCEgWvu9G9GnTJX6hp6eTb7XBTE.roa
File: SCEgWvu9G9GnTJX6hp6eTb7XBTE.roa (raw, json)
Hash identifier: rUUnGVQ64yjzgYxTpGqIJUqXZ7NfHreOkD3Zl6vDPqk=
Subject key identifier: 48:21:20:5A:FB:BD:1B:D1:A7:4C:95:FA:86:9E:9E:4D:BE:D7:05:31
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01896348EFC789FE43CFC46D6A4117D4E9E7
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/SCEgWvu9G9GnTJX6hp6eTb7XBTE.roa
Signing time: Mon 17 Jul 2023 09:57:51 +0000
ROA not before: Mon 17 Jul 2023 09:57:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 86.62.31.0/24 maxlen: 24
86.62.28.0/24 maxlen: 24
86.62.29.0/24 maxlen: 24
86.62.30.0/24 maxlen: 24
194.107.161.0/24 maxlen: 24
194.107.162.0/24 maxlen: 24
194.36.32.0/23 maxlen: 23
45.80.30.0/24 maxlen: 24
45.80.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Aug 2023 12:20:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:48:ef:c7:89:fe:43:cf:c4:6d:6a:41:17:d4:e9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jul 17 09:57:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4821205afbbd1bd1a74c95fa869e9e4dbed70531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:83:b2:f0:28:22:29:f5:7f:5b:30:65:d9:32:
e4:8a:10:eb:6d:c8:fc:69:ee:3a:76:d6:a4:7e:12:
b7:29:e6:b4:da:80:1c:2d:28:fc:25:c9:0d:84:51:
d1:fc:0a:ea:76:e9:86:de:aa:90:fa:41:fd:e6:94:
d9:7b:49:2d:a1:2f:8f:70:19:10:e9:47:6f:02:57:
b4:6c:31:57:8f:c3:20:75:bf:94:46:de:a4:94:56:
b4:01:cd:57:c0:5a:af:0b:2d:b0:17:f1:95:0a:bf:
29:85:2e:b5:df:35:1e:74:90:91:68:31:cc:06:3c:
00:17:5f:8b:8e:10:46:bb:b3:b4:da:aa:63:b1:fe:
c6:29:2b:06:33:09:d7:98:5d:d9:cc:04:f1:40:8d:
ea:5a:24:d3:e6:62:8e:f8:35:81:12:96:a3:57:a8:
8a:47:a8:45:41:ba:82:bb:a4:19:36:08:2f:9a:79:
b3:56:5b:c0:81:d6:2a:4d:99:b3:2c:83:d0:c2:5f:
bc:91:ee:c8:66:7d:17:c8:1b:66:47:91:d1:78:26:
0a:04:66:90:d0:c3:99:20:01:4a:68:17:9d:0e:ac:
71:99:f3:c6:86:08:48:36:9f:cb:ba:67:04:c8:1c:
2e:a7:50:32:56:28:cc:1a:fc:5b:13:10:c9:98:99:
9d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:21:20:5A:FB:BD:1B:D1:A7:4C:95:FA:86:9E:9E:4D:BE:D7:05:31
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/SCEgWvu9G9GnTJX6hp6eTb7XBTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.30.0/23
86.62.28.0/22
194.36.32.0/23
194.107.161.0-194.107.162.255
Signature Algorithm: sha256WithRSAEncryption
22:f4:3b:69:77:bc:9a:34:54:c6:38:76:81:75:58:28:ff:4a:
34:39:e7:ba:39:b2:3b:22:9c:6b:38:6e:7a:c7:02:11:8b:e3:
33:1e:ce:4b:71:57:a6:a0:db:2f:2e:5a:63:49:cb:64:fb:69:
a7:a4:b1:dc:0f:fd:68:03:3c:9b:11:3a:61:12:52:d9:e8:ef:
91:ff:ff:1d:0c:61:0b:81:78:78:3c:1d:84:3c:8b:0f:08:42:
4c:7b:f2:f7:a9:78:7e:0f:1a:ae:a1:21:bb:f9:9a:0c:da:fe:
85:e4:8a:f1:bf:d4:0d:e7:1c:7e:03:4d:a1:a5:9a:66:5c:6a:
f0:2a:2c:03:2e:96:82:f2:89:db:a1:e9:ec:63:c9:c1:b9:55:
28:f2:95:27:14:54:28:38:fc:b2:f8:61:cc:46:e7:41:af:72:
1f:4b:7a:09:95:0c:4e:03:f3:02:d8:85:2a:a0:8b:93:1e:fd:
66:63:66:04:17:64:cd:e8:fa:86:5a:b4:76:ea:ec:88:60:5c:
28:9f:6a:a8:f4:c6:ce:56:e7:07:d8:a2:75:77:db:e9:19:aa:
82:dd:7e:ad:8f:ff:10:f0:28:ea:1b:ee:a2:ae:41:e8:a0:52:
2b:14:b2:99:6e:b8:9f:fd:98:4c:f9:6e:50:ab:ec:78:fc:55:
91:e9:f5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:39 2024 by rpki-client on console-ams.rpki-client.org