Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/vMjxbyqEEkWhuy7JYmTm7zFOpGo.roa
File: vMjxbyqEEkWhuy7JYmTm7zFOpGo.roa (raw, json)
Hash identifier: 89e6jqoNGmZ3f/Eht8nnb5o8BJcJ90T4I3TvmRBUOvA=
Subject key identifier: BC:C8:F1:6F:2A:84:12:45:A1:BB:2E:C9:62:64:E6:EF:31:4E:A4:6A
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 018570705A36F93909DCE1624804CBFCF490
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/vMjxbyqEEkWhuy7JYmTm7zFOpGo.roa
Signing time: Mon 02 Jan 2023 03:04:49 +0000
ROA not before: Mon 02 Jan 2023 03:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21438
IP address blocks: 178.76.215.0/24 maxlen: 24
86.110.162.0/23 maxlen: 23
86.110.164.0/23 maxlen: 23
86.110.172.0/24 maxlen: 24
86.110.166.0/23 maxlen: 23
5.149.147.0/24 maxlen: 24
5.149.148.0/24 maxlen: 24
178.76.192.0/24 maxlen: 24
178.76.193.0/24 maxlen: 24
178.76.200.0/22 maxlen: 22
178.76.204.0/24 maxlen: 24
178.76.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:5a:36:f9:39:09:dc:e1:62:48:04:cb:fc:f4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 2 03:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcc8f16f2a841245a1bb2ec96264e6ef314ea46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:2b:c2:ad:f2:b1:d9:63:50:48:d8:9d:1d:
bf:d6:3d:1a:d4:cb:1b:62:78:d8:84:fd:fe:12:d2:
f9:c5:42:eb:67:b4:ad:17:6f:67:35:87:f6:b7:ae:
43:26:3e:35:8d:96:4a:84:fc:c9:45:01:8f:3f:3b:
08:3e:a9:d7:04:7e:14:7e:8d:0e:13:df:f9:b3:a4:
8a:86:a4:e0:f2:cf:83:04:db:7b:0a:14:18:fb:1b:
a7:5d:ac:be:25:70:6e:2a:49:5a:19:fe:ce:5f:79:
d8:e3:02:1e:7a:4a:47:ec:6b:9b:85:b6:ae:b1:63:
db:cb:04:b4:26:3b:36:b4:62:08:d8:e0:35:13:a9:
84:2b:b8:95:5d:a6:e3:b6:00:c3:ad:47:11:df:f2:
e5:6b:6e:2f:2c:f9:71:a6:93:e4:10:30:ed:b8:e6:
79:99:c9:8e:0b:44:11:ef:b2:b4:57:87:07:09:05:
f7:25:2c:1d:fe:5f:ee:3e:44:5f:d5:eb:97:5c:1b:
ef:eb:db:97:34:07:ba:07:38:95:f7:db:f2:2b:62:
a6:57:5d:ba:82:f1:d5:0a:97:36:50:7c:f0:04:7c:
b1:d2:45:6d:1e:68:fa:56:2e:39:cf:c5:f2:fd:ee:
fc:8b:84:99:3a:3d:7a:9a:36:36:4c:ed:68:34:0a:
c4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C8:F1:6F:2A:84:12:45:A1:BB:2E:C9:62:64:E6:EF:31:4E:A4:6A
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/vMjxbyqEEkWhuy7JYmTm7zFOpGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.147.0-5.149.148.255
86.110.162.0-86.110.167.255
86.110.172.0/24
178.76.192.0/23
178.76.200.0-178.76.204.255
178.76.206.0/24
178.76.215.0/24
Signature Algorithm: sha256WithRSAEncryption
57:5f:66:8a:23:86:81:1b:9b:1c:cb:16:05:7d:4e:77:85:fd:
b9:ac:03:87:ff:52:42:61:70:92:e0:f8:0d:ea:8e:ec:ee:56:
3c:b8:dc:a6:99:f8:c1:31:36:a1:fd:3f:18:f7:e7:0c:f7:ec:
a2:04:62:d2:89:d8:92:1f:c7:af:8c:dd:0c:56:a8:8b:96:a3:
8b:58:1b:fd:05:4e:ca:97:69:68:2d:c8:6f:67:b9:ef:28:9c:
0e:d1:dd:4d:be:21:09:e2:ca:35:a8:3f:67:cc:61:bb:48:18:
5f:90:26:12:6d:80:86:fa:d4:fc:40:0c:a3:e1:98:0a:a0:b1:
34:40:4d:fd:4c:c8:72:7c:ee:7d:3f:0a:62:35:c4:09:25:02:
37:97:78:8e:53:aa:ba:4c:f1:d5:86:2c:c8:d5:51:e9:95:fd:
2f:11:3d:03:e9:3a:c8:d8:49:85:6d:06:b1:1f:e0:ff:17:02:
75:28:77:57:12:49:d0:22:ff:b8:c2:f8:7c:e2:de:d7:24:a2:
f1:a7:8f:be:b6:31:2b:e1:b3:fb:d8:ba:59:10:44:35:3e:af:
9a:94:f1:0b:3b:f2:c4:8d:74:2a:66:fd:2a:7b:c7:df:55:43:
f2:91:c1:94:4f:e8:ae:28:8c:35:56:db:e1:29:68:7c:8e:8e:
d5:41:a2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:51 2024 by rpki-client on console-ams.rpki-client.org