Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/2hJAcwKvf9TWVJ2v-xu2qILheI4.roa
File: 2hJAcwKvf9TWVJ2v-xu2qILheI4.roa (raw, json)
Hash identifier: bXcwwSEIMULMiCSxo1BmR0AJe/dSmVjzw+Kadce1who=
Subject key identifier: DA:12:40:73:02:AF:7F:D4:D6:54:9D:AF:FB:1B:B6:A8:82:E1:78:8E
Certificate issuer: /CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Certificate serial: 018925EE736A3CE4DF9F855D62856C089A5D
Authority key identifier: 82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/2hJAcwKvf9TWVJ2v-xu2qILheI4.roa
Signing time: Wed 05 Jul 2023 12:02:11 +0000
ROA not before: Wed 05 Jul 2023 12:02:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25215
IP address blocks: 155.140.82.0/24 maxlen: 24
155.140.83.0/24 maxlen: 24
155.140.91.0/24 maxlen: 24
155.140.90.0/24 maxlen: 24
159.50.174.0/24 maxlen: 24
155.140.102.0/23 maxlen: 24
155.140.104.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:25:ee:73:6a:3c:e4:df:9f:85:5d:62:85:6c:08:9a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Validity
Not Before: Jul 5 12:02:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da12407302af7fd4d6549daffb1bb6a882e1788e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:2a:2f:87:ae:cb:5e:65:89:bc:00:02:75:
84:0d:13:53:52:1f:40:44:07:07:32:0d:aa:b2:fc:
8c:07:49:15:51:34:b4:c2:a6:22:4b:2b:d4:e9:7b:
85:0f:35:b0:66:cc:6e:a0:0d:a2:89:5e:12:43:8e:
4e:87:12:49:4c:27:75:b6:74:82:4f:20:23:0a:5c:
b3:3e:8b:f7:6b:01:92:a1:48:69:75:84:6e:21:3c:
f5:09:d0:31:13:6a:0a:c0:68:d5:43:c1:ff:41:a0:
33:f6:d3:4f:1f:71:b7:b8:c4:c4:ee:4d:cd:ec:20:
8c:80:57:c0:61:ae:be:d4:32:7a:c0:d1:7a:f8:81:
c1:a2:4b:8a:fe:ca:52:0c:b9:e5:00:23:e8:6a:d3:
2f:b6:c6:3e:be:a0:9c:7c:ad:61:63:eb:31:80:92:
10:59:0e:32:2c:55:a4:33:96:14:82:0e:91:bd:c5:
90:53:24:b4:c4:99:4e:66:2c:0e:a9:d4:3a:4c:b6:
cc:e5:80:5b:b7:b0:70:89:b2:bf:03:b9:6b:6c:28:
4a:96:62:dd:f1:56:ce:e2:ad:84:3d:2f:2c:8e:f8:
5e:cf:65:29:15:d3:9b:37:fb:38:41:21:32:a1:29:
b8:91:f8:2c:cd:2f:e3:25:c3:c4:a9:ba:86:1d:e9:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:12:40:73:02:AF:7F:D4:D6:54:9D:AF:FB:1B:B6:A8:82:E1:78:8E
X509v3 Authority Key Identifier:
keyid:82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/2hJAcwKvf9TWVJ2v-xu2qILheI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.140.82.0/23
155.140.90.0/23
155.140.102.0-155.140.105.255
159.50.174.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:fc:8a:a4:15:ac:0f:b9:44:52:74:3c:69:6f:89:5f:d8:6a:
53:d2:92:7f:e0:c3:bb:54:0b:2d:c5:0b:55:76:f5:e6:b3:f2:
5e:22:35:ed:61:44:e0:31:29:cd:4a:21:cf:2f:e7:b7:05:60:
ef:c4:3a:38:57:66:f7:1e:b6:4a:08:5d:6a:83:62:04:ba:59:
8f:4d:4d:5c:aa:02:c0:2f:93:5b:2e:f8:3e:4b:a0:00:ff:77:
69:46:8d:a4:56:b6:34:b4:6e:ab:42:88:f9:4b:9d:7c:11:81:
d8:87:14:8d:66:0f:fc:67:4f:c9:2d:69:aa:c1:27:03:ed:1c:
ba:aa:a9:9d:48:a8:47:32:c1:5b:d3:7b:69:b9:8c:f0:cd:e3:
26:15:4f:9d:68:96:85:80:36:e7:eb:7c:d0:6b:d3:83:56:3e:
0d:6f:1e:b8:1c:a8:8d:bb:f8:78:50:d7:7f:c7:d5:97:d8:7d:
44:93:95:9f:48:72:0c:8d:99:ea:83:10:e7:3a:7a:7c:16:d0:
85:76:6e:17:e0:67:8c:18:06:4f:58:a7:2b:fb:cc:f8:5b:6b:
5c:d3:99:a5:0e:d2:42:ea:c5:11:24:59:bd:fd:73:41:02:01:
fa:90:ca:c9:be:3d:f6:14:4c:b8:5e:81:57:5e:fb:4f:81:d5:
1e:25:c2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:28 2024 by rpki-client on console-ams.rpki-client.org