Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/9ki_AoGZSd9WAIwJg1xpN9DraRA.roa
File: 9ki_AoGZSd9WAIwJg1xpN9DraRA.roa (raw, json)
Hash identifier: zyOuRh3hAx40qEutG3byBHqyl5l+NgUhyckJxVioUX4=
Subject key identifier: F6:48:BF:02:81:99:49:DF:56:00:8C:09:83:5C:69:37:D0:EB:69:10
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 018570705F2AF32F7CCC603D0F2FA7BC689D
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/9ki_AoGZSd9WAIwJg1xpN9DraRA.roa
Signing time: Mon 02 Jan 2023 03:04:50 +0000
ROA not before: Mon 02 Jan 2023 03:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51813
IP address blocks: 37.61.182.0/23 maxlen: 32
81.18.140.0/23 maxlen: 32
46.20.76.0/22 maxlen: 32
193.150.108.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:5f:2a:f3:2f:7c:cc:60:3d:0f:2f:a7:bc:68:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 2 03:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f648bf02819949df56008c09835c6937d0eb6910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4b:1a:b0:e1:70:6d:4b:cb:64:1a:fe:7d:8a:
d3:98:8e:11:2e:80:65:cb:c2:8f:ce:14:9a:77:b7:
98:bb:9b:d7:5b:a6:da:db:fd:32:9d:ce:12:b0:cf:
19:b3:f6:90:52:2b:3f:5a:8c:2d:cf:37:7d:57:18:
ec:a6:2b:56:77:f6:1f:3e:50:10:6b:01:e2:02:a6:
15:d6:31:05:1d:1d:79:43:81:eb:f3:a4:c3:16:7c:
16:c2:1c:f7:8e:e5:9c:8c:d5:bf:44:e1:d0:be:e4:
e4:f6:9c:c6:03:68:ee:f6:5b:9b:67:d4:6a:aa:14:
ae:c4:41:0a:2d:de:81:0d:52:f5:aa:c8:47:8b:e0:
b3:8e:7d:fc:71:a0:c0:38:df:a5:7f:18:1f:8d:ec:
8c:94:c6:b9:15:8e:94:19:da:b2:f0:93:18:c4:d4:
a1:6b:7e:9c:55:a1:37:db:86:cc:e8:18:06:59:c2:
48:fa:cd:b0:e9:cd:09:dc:f1:a1:1e:06:4e:d3:bc:
f1:3b:6d:e2:98:de:63:f8:60:c8:1d:94:77:c4:a6:
d3:10:5c:8b:87:ed:fb:57:46:0d:d6:b4:4e:b8:ec:
0f:93:f2:e1:fa:f4:d4:f2:56:9d:f7:68:1d:b8:a1:
72:c6:77:dc:b1:cb:cb:34:15:5c:b6:b8:f6:23:65:
c1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:48:BF:02:81:99:49:DF:56:00:8C:09:83:5C:69:37:D0:EB:69:10
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/9ki_AoGZSd9WAIwJg1xpN9DraRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.182.0/23
46.20.76.0/22
81.18.140.0/23
193.150.108.0/22
Signature Algorithm: sha256WithRSAEncryption
e4:c6:68:18:e6:75:3f:8c:a6:2e:ae:cc:12:d2:ab:bc:72:21:
5a:cb:7c:f1:5d:ff:d2:12:58:18:8c:aa:5a:f4:99:e5:9e:ca:
1f:6c:1f:23:de:7b:32:96:a6:96:81:f9:60:ab:78:76:d7:7e:
c2:58:43:04:ba:2d:3e:a4:47:ff:1f:6f:c9:6a:b0:b9:fa:a8:
39:78:7b:6b:01:1c:78:e2:27:02:34:3f:79:be:c2:51:37:f7:
0e:8e:fe:48:97:72:11:59:cb:a8:30:5c:1b:05:df:4f:d1:7c:
21:4a:a9:80:25:f1:e0:14:32:dc:66:23:85:54:12:9c:25:f6:
5f:0a:02:29:0e:2d:06:c6:ed:6f:b0:0d:09:a9:ad:97:34:b0:
e6:ac:fe:93:7e:57:b5:57:3d:66:38:6b:73:7f:32:e1:22:df:
27:9a:38:b6:4e:3c:1d:61:98:48:c7:20:9c:47:00:0c:bd:07:
1d:b7:04:b3:94:50:20:f5:68:03:65:1d:ba:ee:fd:75:d4:17:
4c:f2:4c:84:49:2c:90:4f:99:29:1a:80:5a:b5:a2:a9:0a:56:
a1:bf:5a:b5:c9:14:48:49:46:07:9e:98:86:7f:75:ca:fe:3e:
68:7f:45:62:99:24:60:42:5f:df:8e:11:9a:0c:3a:73:44:39:
3d:10:cc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:08 2024 by rpki-client on console-fra.rpki-client.org