Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/GVd3QmRtdfU0IZKsriq3qzCf0eE.roa
File: GVd3QmRtdfU0IZKsriq3qzCf0eE.roa (raw, json)
Hash identifier: Cld8MWZtja9VANlf7Zd5z0qnMw6h1zWWfXHvYqmfOK0=
Subject key identifier: 19:57:77:42:64:6D:75:F5:34:21:92:AC:AE:2A:B7:AB:30:9F:D1:E1
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01921DE12B293EE79C5A631E518604897D34
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/GVd3QmRtdfU0IZKsriq3qzCf0eE.roa
Signing time: Mon 23 Sep 2024 07:55:48 +0000
ROA not before: Mon 23 Sep 2024 07:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 14.102.60.0/24 maxlen: 24
14.102.61.0/24 maxlen: 24
107.150.166.0/24 maxlen: 24
185.161.111.0/24 maxlen: 24
203.188.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 09:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1d:e1:2b:29:3e:e7:9c:5a:63:1e:51:86:04:89:7d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 23 07:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19577742646d75f5342192acae2ab7ab309fd1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:ea:44:ab:01:b9:14:8f:4c:7b:27:f0:e7:
19:ce:fc:f4:1b:af:19:da:f2:e3:cc:c2:82:7c:21:
c2:96:14:54:f2:7a:91:5a:52:d7:62:bb:36:79:78:
22:9b:91:00:4a:4d:59:56:ac:1f:23:3e:7b:fb:57:
df:11:6e:0e:f2:e9:69:d7:ec:f7:a7:b5:2d:c4:f8:
0d:53:23:7a:ab:78:fa:36:78:da:fd:7f:56:b9:79:
fb:3e:d0:a9:53:a0:fa:7e:14:3e:b5:90:66:4c:07:
7c:60:b2:28:3f:8e:08:f9:dd:8b:0d:91:84:b3:e2:
a8:e6:30:3a:f6:4a:6f:05:d9:6f:49:18:b4:c7:cf:
3e:2f:7d:05:a2:80:9f:01:75:12:86:10:9a:14:5d:
39:a9:24:72:69:b5:ef:f2:c4:2c:62:fa:ab:7b:ab:
b0:05:6d:6c:b9:68:97:de:04:b5:ae:25:a1:4c:3c:
68:0b:32:f9:9a:60:3d:57:b0:2a:98:35:b0:98:b4:
bb:b5:c3:98:9f:30:6d:8b:cb:b7:ca:af:90:7d:81:
75:73:dc:b1:18:b9:9f:36:2f:ee:89:b1:f8:69:fa:
4f:fc:38:b6:3e:d6:fd:95:87:2d:94:2b:7f:50:fc:
29:de:49:a1:b4:4e:f7:a0:7b:89:17:87:a1:11:dc:
b0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:57:77:42:64:6D:75:F5:34:21:92:AC:AE:2A:B7:AB:30:9F:D1:E1
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/GVd3QmRtdfU0IZKsriq3qzCf0eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.60.0/23
107.150.166.0/24
185.161.111.0/24
203.188.165.0/24
Signature Algorithm: sha256WithRSAEncryption
65:27:71:83:10:a3:04:e3:89:34:2a:51:4d:3b:a5:a8:b1:2e:
21:65:e9:3c:8d:60:20:25:ed:f6:b4:b9:f5:62:b7:e8:69:28:
42:72:5c:ab:a3:d2:78:6e:28:57:94:3c:45:09:22:79:81:cc:
fd:c2:5c:b5:ce:92:4a:58:27:ca:86:52:4b:1d:0c:e8:db:d8:
54:29:70:c3:da:fe:db:e6:f8:07:99:a7:55:db:e7:25:27:a5:
15:33:8f:b2:5a:e2:c9:10:8d:af:a0:03:dc:c8:60:d6:5b:f5:
d9:67:17:0a:cc:5d:04:e5:86:5f:fc:f2:56:52:ce:f1:d2:1c:
db:af:10:53:a9:e4:0c:0f:70:54:d0:e6:93:e6:ff:8c:96:6c:
e6:2c:9a:78:b0:76:c3:26:68:a9:a6:98:5a:0c:bf:d1:70:66:
58:62:d1:af:c5:83:da:f8:f2:fe:46:ec:f1:9a:4f:80:ec:2f:
48:2a:a4:9e:f1:77:f9:33:e6:ff:c1:83:b6:37:49:53:73:50:
77:e7:18:c8:6d:7c:1d:a6:59:96:eb:dd:dd:07:50:96:29:57:
20:f3:a8:8b:be:c3:d8:c4:d0:35:f4:86:aa:06:9b:9e:40:8c:
b8:62:57:3c:50:d6:47:b3:ff:cc:3d:51:5f:7a:df:8e:a6:e2:
bc:45:1f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 12:17:59 2024 by rpki-client on console-ams.rpki-client.org