Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/f__pgVH5-1Uv-GHjysOpm5A1DVE.roa
File: f__pgVH5-1Uv-GHjysOpm5A1DVE.roa (raw, json)
Hash identifier: 8IgfKKD2FtI5AuRVYV7QnClHx1iLD6phhLz1BuKMVUc=
Subject key identifier: 7F:FF:E9:81:51:F9:FB:55:2F:F8:61:E3:CA:C3:A9:9B:90:35:0D:51
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 018CC4939FF399A776C4B07EBFAB5561DD18
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/f__pgVH5-1Uv-GHjysOpm5A1DVE.roa
Signing time: Mon 01 Jan 2024 10:30:58 +0000
ROA not before: Mon 01 Jan 2024 10:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 62.182.170.0/24 maxlen: 24
62.182.171.0/24 maxlen: 24
62.182.168.0/24 maxlen: 24
62.182.169.0/24 maxlen: 24
62.182.174.0/24 maxlen: 24
62.182.173.0/24 maxlen: 24
83.97.96.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 07 Jan 2024 21:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:9f:f3:99:a7:76:c4:b0:7e:bf:ab:55:61:dd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jan 1 10:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fffe98151f9fb552ff861e3cac3a99b90350d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:d0:69:da:73:27:a5:2c:f5:05:78:f2:95:
6a:3a:07:04:14:94:c8:4c:6f:92:3c:c5:6c:fc:e6:
fe:35:24:71:21:20:75:68:25:31:2d:30:d9:b5:0e:
52:a2:f4:97:de:a0:40:08:c4:e7:47:2a:60:38:f9:
a7:0e:f3:d1:3e:e7:ab:df:a1:1a:ae:ee:8c:0f:0a:
b5:fb:04:b9:dd:9d:ad:e8:a8:c6:8a:2d:da:a9:f0:
24:ef:cf:c6:e8:57:1c:67:c4:42:24:44:05:20:0b:
43:62:2e:f6:49:aa:28:a7:0e:e5:7f:d4:75:fe:75:
59:be:1e:5c:1a:9b:99:36:c2:52:f4:46:12:c2:06:
a4:a3:a9:af:af:08:25:7a:e0:96:c9:52:b1:5b:1d:
2a:09:91:f2:68:4c:79:f0:b2:d7:07:72:1f:40:5d:
5c:95:93:ba:04:b8:0d:d5:2a:87:04:73:c7:a4:cd:
45:a0:ce:35:24:38:5e:7e:d6:35:3f:57:98:9f:bd:
8d:8a:30:3b:d8:bc:b8:43:c2:69:a2:9d:46:9e:1a:
df:f5:4d:68:e6:1f:f6:ca:39:ba:a5:1c:48:f3:15:
df:3b:c1:01:6c:b5:84:5e:dc:70:20:d1:e1:98:d9:
cc:97:f7:61:af:8a:ed:e4:b7:8e:17:fa:ff:74:0a:
91:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FF:E9:81:51:F9:FB:55:2F:F8:61:E3:CA:C3:A9:9B:90:35:0D:51
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/f__pgVH5-1Uv-GHjysOpm5A1DVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.168.0/22
62.182.173.0-62.182.174.255
83.97.96.0/22
Signature Algorithm: sha256WithRSAEncryption
40:30:d9:ef:1b:71:26:d8:f1:82:af:e3:65:54:ce:6a:8a:0a:
f9:ef:ba:2a:5c:ec:90:31:0e:27:68:f3:49:55:49:5d:e5:5e:
dd:c0:b2:5f:b4:34:68:30:55:05:66:6c:be:22:cc:12:a3:04:
56:c3:99:f7:08:68:88:22:06:55:86:e0:5e:00:df:ae:2d:c6:
6d:ac:ad:7c:e1:42:c7:29:5a:8c:40:34:cc:7f:a8:4d:9b:b0:
35:a9:1d:ca:12:c6:12:01:f6:85:01:71:77:0c:66:0e:97:fd:
14:92:27:7b:6e:db:a8:b5:00:81:eb:44:07:fe:86:52:91:c2:
21:46:ca:86:88:76:78:79:35:19:df:bf:e6:e1:81:61:5d:22:
cf:c1:25:9a:9e:18:96:80:e4:b9:4a:f4:fc:88:0b:0d:05:4d:
71:3f:27:af:04:2b:91:f8:a2:09:d6:27:b2:08:61:01:8d:b5:
76:91:99:57:0b:c2:63:0f:12:77:50:95:e0:53:5b:38:60:be:
21:e1:95:b9:d4:82:f7:fc:39:95:77:77:db:b4:d3:24:ae:ee:
e0:4b:4b:17:d4:d0:f8:0e:24:10:99:0c:a4:95:36:2c:e2:3d:
44:1b:9c:ed:7a:70:e3:18:f0:77:05:de:a5:99:1d:97:a6:97:
0a:03:47:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 7 23:03:33 2024 by rpki-client on console-ams.rpki-client.org