Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/R_3ibvi0aEPW_rSEIlrHM4_nAZQ.roa
File: R_3ibvi0aEPW_rSEIlrHM4_nAZQ.roa (raw, json)
Hash identifier: lQPr+QAUl1USaMzzBh5urx9wqiT1NuW62Q9M60o8d4g=
Subject key identifier: 47:FD:E2:6E:F8:B4:68:43:D6:FE:B4:84:22:5A:C7:33:8F:E7:01:94
Certificate issuer: /CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Certificate serial: 018FC2C4B60BE8E6FA129C6E458AC40E6E66
Authority key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/R_3ibvi0aEPW_rSEIlrHM4_nAZQ.roa
Signing time: Wed 29 May 2024 05:13:42 +0000
ROA not before: Wed 29 May 2024 05:13:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39251
IP address blocks: 77.76.16.0/20 maxlen: 20
85.217.252.0/22 maxlen: 24
91.92.72.0/21 maxlen: 24
91.92.80.0/20 maxlen: 24
91.92.96.0/21 maxlen: 24
91.207.190.0/23 maxlen: 23
91.207.190.0/24 maxlen: 24
91.207.191.0/24 maxlen: 24
91.223.66.0/24 maxlen: 24
91.245.192.0/24 maxlen: 24
185.163.140.0/22 maxlen: 24
185.225.84.0/22 maxlen: 24
185.229.252.0/22 maxlen: 24
193.37.238.0/24 maxlen: 24
194.169.223.0/24 maxlen: 24
194.169.230.0/24 maxlen: 24
194.169.237.0/24 maxlen: 24
194.169.242.0/24 maxlen: 24
195.238.84.0/23 maxlen: 23
195.238.84.0/24 maxlen: 24
195.238.85.0/24 maxlen: 24
212.70.140.0/22 maxlen: 22
212.70.140.0/24 maxlen: 24
212.70.141.0/24 maxlen: 24
212.70.144.0/22 maxlen: 22
213.232.88.0/22 maxlen: 24
2a0b:f800::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 Aug 2024 13:09:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c2:c4:b6:0b:e8:e6:fa:12:9c:6e:45:8a:c4:0e:6e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Validity
Not Before: May 29 05:13:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47fde26ef8b46843d6feb484225ac7338fe70194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:52:83:02:f1:fe:ae:0e:a5:2d:56:57:85:bb:
bc:32:c1:96:19:1b:b1:b1:31:ff:4b:5e:40:22:d4:
de:46:4c:d6:00:81:81:b5:b0:96:70:e4:46:18:e7:
64:06:0f:97:8c:a4:70:75:53:7d:2c:80:a6:d2:d3:
77:13:83:ca:3a:15:71:39:9d:1f:29:1c:6b:71:67:
f6:35:f3:19:4b:26:fb:05:e0:34:e5:2a:b9:1d:30:
cc:0c:3a:bf:6f:dc:92:64:fc:9e:ca:36:dc:be:16:
d0:25:c6:f5:40:0f:52:5b:ea:da:29:11:36:c7:6f:
0c:34:2c:7c:d3:71:05:16:e3:0e:0e:42:6d:95:79:
43:65:b9:83:a2:9b:87:8c:7b:f4:9e:14:2b:4d:d7:
0e:ad:e2:4c:ce:fa:6b:d6:49:50:a9:36:ff:b1:a5:
5d:19:a6:1b:56:4e:ba:b1:eb:a3:1d:b5:e4:36:80:
9d:59:ce:8b:eb:3b:e9:3d:4d:15:76:ac:7c:8d:eb:
6f:22:a5:44:ee:91:20:a6:61:c1:8e:f3:a2:aa:89:
b0:c8:13:53:b5:38:9b:ab:62:cf:a9:b6:3f:cc:73:
13:fb:ae:98:40:6e:ac:17:71:08:27:af:8c:eb:3c:
4d:87:a1:9c:d3:de:92:94:6d:9f:24:cb:f0:03:97:
61:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FD:E2:6E:F8:B4:68:43:D6:FE:B4:84:22:5A:C7:33:8F:E7:01:94
X509v3 Authority Key Identifier:
keyid:AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/R_3ibvi0aEPW_rSEIlrHM4_nAZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.16.0/20
85.217.252.0/22
91.92.72.0-91.92.103.255
91.207.190.0/23
91.223.66.0/24
91.245.192.0/24
185.163.140.0/22
185.225.84.0/22
185.229.252.0/22
193.37.238.0/24
194.169.223.0/24
194.169.230.0/24
194.169.237.0/24
194.169.242.0/24
195.238.84.0/23
212.70.140.0-212.70.147.255
213.232.88.0/22
IPv6:
2a0b:f800::/32
Signature Algorithm: sha256WithRSAEncryption
9a:1e:d7:1c:4a:7b:53:bd:98:28:9d:63:8e:12:33:04:b7:e6:
df:ae:af:99:3c:28:2a:cc:b2:a7:a9:06:60:8f:64:c8:5b:1e:
0c:0b:71:e7:50:a6:57:51:0c:ac:e1:62:ab:32:03:cb:ac:74:
b3:cf:92:f0:2b:9a:3d:a1:86:b8:82:fa:90:ba:26:13:19:df:
38:5e:60:37:16:6f:13:d9:e0:1c:4f:4c:7b:83:fa:96:f0:d1:
c2:1f:51:2b:52:60:e3:ce:90:72:f3:ef:a2:b2:97:94:5f:ce:
67:f8:3d:05:41:e3:77:ae:a7:55:a0:4a:bc:2d:04:6e:63:8c:
25:fe:55:2c:e6:1b:f2:aa:6e:94:ba:f9:47:e8:55:e8:bd:04:
43:42:31:0c:a5:55:24:e2:b9:09:5d:5f:58:b2:2f:06:9e:49:
7e:93:a3:fe:e6:ac:f3:a9:b4:29:49:35:c4:53:1e:3d:6a:89:
18:80:da:bc:bc:e6:96:31:aa:8c:c0:cf:0c:0f:fd:bf:36:29:
fa:17:49:26:e3:bf:a0:fa:8e:40:08:13:7b:66:d8:2d:0c:a9:
dd:f3:a2:d9:35:3c:60:2a:46:d6:e1:6c:69:27:27:89:8d:8f:
39:31:a0:19:4b:3a:75:29:e3:db:cc:75:5d:47:d9:6b:6c:30:
dd:ae:97:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 19:04:16 2024 by rpki-client on console-ams.rpki-client.org