Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/C63WWPveQBg9LI42K6Fp95HJV7o.roa
File: C63WWPveQBg9LI42K6Fp95HJV7o.roa (raw, json)
Hash identifier: cMONkJ1xc4I3gKuV46CC5G+L+8qH4macoyqR98pCV3Q=
Subject key identifier: 0B:AD:D6:58:FB:DE:40:18:3D:2C:8E:36:2B:A1:69:F7:91:C9:57:BA
Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Certificate serial: 018BFB9757DF917172523DB948A14D054CF1
Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/C63WWPveQBg9LI42K6Fp95HJV7o.roa
Signing time: Thu 23 Nov 2023 09:51:21 +0000
ROA not before: Thu 23 Nov 2023 09:51:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29684
IP address blocks: 193.242.127.0/24 maxlen: 24
176.98.35.0/24 maxlen: 24
176.98.32.0/24 maxlen: 24
176.98.32.0/22 maxlen: 22
176.98.33.0/24 maxlen: 24
176.98.34.0/24 maxlen: 24
176.98.34.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 04 Dec 2023 09:45:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:97:57:df:91:71:72:52:3d:b9:48:a1:4d:05:4c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Validity
Not Before: Nov 23 09:51:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0badd658fbde40183d2c8e362ba169f791c957ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c7:80:38:41:77:22:a2:88:5b:da:07:04:ed:
f5:dd:01:ec:b1:99:d3:93:62:37:69:e7:9c:8f:10:
0d:65:2f:9d:34:53:b6:1d:b6:ea:ce:42:dc:e0:42:
0b:08:87:b6:d9:40:da:45:3c:26:d0:39:3e:7f:6d:
ef:7e:30:ca:43:9e:32:89:f5:07:12:d8:5c:90:6b:
cc:2d:48:8c:ef:a3:e6:d8:60:31:9e:e1:5b:46:e7:
09:bd:0a:c5:a6:ef:a6:dd:51:63:de:dd:9d:4b:bf:
f4:a9:c0:34:62:96:34:9f:1c:d4:07:92:9e:f1:2b:
b0:d6:e0:2b:dd:38:51:1b:25:cd:bc:0f:1c:e5:aa:
70:1d:42:13:cd:44:6f:90:67:25:2e:a1:f4:fc:47:
de:3a:1d:8e:da:ca:9d:0b:d3:59:32:40:62:3d:b8:
9d:60:c8:39:43:4c:03:40:67:2d:16:ca:8f:76:3c:
4f:92:4f:4e:9e:bd:70:ea:cb:b0:a7:78:71:e3:8a:
77:24:da:9e:78:9f:8e:f9:72:fa:44:ae:76:d3:d3:
51:83:17:5f:10:f6:cf:0c:4a:a2:78:01:70:29:72:
16:f9:dd:6d:b7:5c:f8:fd:2b:1e:71:4a:f6:f0:f5:
07:2d:3e:7b:ff:f3:4c:97:4d:96:1f:5a:fa:8f:c6:
18:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AD:D6:58:FB:DE:40:18:3D:2C:8E:36:2B:A1:69:F7:91:C9:57:BA
X509v3 Authority Key Identifier:
keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/C63WWPveQBg9LI42K6Fp95HJV7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.32.0/22
193.242.127.0/24
Signature Algorithm: sha256WithRSAEncryption
72:1f:86:ad:cd:c8:84:07:d5:75:50:ed:45:e6:4e:a9:42:f9:
e9:13:9d:ef:bd:9b:e6:e5:c0:c6:d0:75:45:15:a6:3a:ec:82:
4d:25:62:35:c8:ed:35:b9:90:c5:f7:cb:65:d2:70:85:bf:0b:
a8:78:dd:2f:15:7e:39:2d:7b:5b:b2:f5:09:fc:81:d5:c9:e2:
b1:f4:3f:f1:1d:33:45:41:94:1e:dc:a1:4f:d8:be:33:2e:f7:
b9:12:82:94:b1:8f:4e:18:12:bb:7b:a0:11:69:bf:3f:d3:9c:
86:0f:c1:ca:a7:95:24:ea:1c:33:24:8a:9d:c3:1a:fc:34:b3:
23:c5:20:76:f8:f8:33:9a:fd:50:b8:73:b5:7f:7d:86:8f:ae:
85:98:0d:10:f6:f2:8d:39:44:92:03:0a:c4:75:27:80:01:c7:
40:06:58:98:e8:5c:00:35:24:b5:8a:23:d3:05:be:8f:0e:92:
12:8a:ba:56:a5:12:ed:c9:0c:94:d2:f7:b8:99:e7:e8:b6:f0:
bc:2d:82:95:8a:29:3c:63:53:9c:54:ce:de:d9:55:ad:e2:f8:
05:83:77:6e:e2:ea:4f:a6:ae:ae:79:47:63:62:d8:56:8f:07:
a5:6d:c8:22:50:7e:5c:af:a7:94:2e:cc:4d:82:ca:27:b7:3a:
14:d9:3d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:08 2024 by rpki-client on console-ams.rpki-client.org