Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/1-8zNLDDAbHHqG3ZwBy_3aClCx-0.roa
File: 1-8zNLDDAbHHqG3ZwBy_3aClCx-0.roa (raw, json)
Hash identifier: jb9ERO3x1wbJAh264CQzFZ/AHxkuAE5es7g4Rk/kSto=
Subject key identifier: FB:CC:CD:2C:30:C0:6C:71:EA:1B:76:70:07:2F:F7:68:29:42:C7:ED
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 0190EEB653E58713BAB25BD5F626992A140D
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/1-8zNLDDAbHHqG3ZwBy_3aClCx-0.roa
Signing time: Fri 26 Jul 2024 11:04:04 +0000
ROA not before: Fri 26 Jul 2024 11:04:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6939
IP address blocks: 23.252.67.0/24 maxlen: 24
23.252.68.0/24 maxlen: 24
23.252.71.0/24 maxlen: 24
23.252.75.0/24 maxlen: 24
23.252.76.0/24 maxlen: 24
23.252.79.0/24 maxlen: 24
107.150.162.0/23 maxlen: 23
107.150.164.0/24 maxlen: 24
107.150.171.0/24 maxlen: 24
107.150.175.0/24 maxlen: 24
107.150.177.0/24 maxlen: 24
162.222.88.0/23 maxlen: 23
162.222.90.0/24 maxlen: 24
167.160.4.0/24 maxlen: 24
167.160.11.0/24 maxlen: 24
167.160.19.0/24 maxlen: 24
167.160.21.0/24 maxlen: 24
167.160.27.0/24 maxlen: 24
167.160.30.0/24 maxlen: 24
185.4.224.0/23 maxlen: 23
185.162.72.0/23 maxlen: 23
185.165.47.0/24 maxlen: 24
185.252.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 06:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ee:b6:53:e5:87:13:ba:b2:5b:d5:f6:26:99:2a:14:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Jul 26 11:04:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbcccd2c30c06c71ea1b7670072ff7682942c7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:f4:4b:d2:34:07:40:3f:72:4d:ae:af:88:
77:04:a4:a0:cd:6f:b1:fc:d9:94:fb:d1:f8:7e:41:
f1:a5:27:8d:9d:71:4f:4a:11:f2:fc:c7:68:5e:5f:
6a:c3:68:5f:8c:19:7f:3b:9a:8c:5f:de:c3:00:a9:
14:ec:4a:39:49:86:f0:55:a9:e7:95:8d:92:b3:b8:
8b:d5:26:65:89:57:1c:dd:0b:8f:c3:ea:dc:6b:d3:
b6:90:12:09:d5:ef:f4:a9:fc:24:aa:7a:de:c8:dc:
4f:59:26:b6:bb:d6:ce:9c:56:ec:65:cc:4d:fe:b1:
85:43:96:8c:21:45:3a:94:fd:51:91:57:c7:68:13:
a1:e8:08:32:a2:d4:ad:a0:1d:38:d8:f6:30:0a:72:
10:c2:18:13:74:01:c8:07:b7:c0:a6:22:99:9c:d4:
c6:af:b3:9b:9c:bc:82:7f:fd:8c:2a:c9:82:2d:a3:
f0:b0:8a:6a:2b:4f:c8:51:06:00:e3:f0:0f:64:58:
d7:ad:7e:9b:c1:e4:d8:f6:ac:74:23:d8:f6:12:17:
20:aa:e9:11:d6:81:3a:f8:36:ae:08:b1:f9:26:de:
dc:09:53:38:3c:0c:07:12:ff:e1:69:77:b3:6e:04:
c2:0d:f9:a8:51:ca:38:a2:20:e4:ee:63:3f:17:00:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CC:CD:2C:30:C0:6C:71:EA:1B:76:70:07:2F:F7:68:29:42:C7:ED
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/1-8zNLDDAbHHqG3ZwBy_3aClCx-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.252.67.0-23.252.68.255
23.252.71.0/24
23.252.75.0-23.252.76.255
23.252.79.0/24
107.150.162.0-107.150.164.255
107.150.171.0/24
107.150.175.0/24
107.150.177.0/24
162.222.88.0-162.222.90.255
167.160.4.0/24
167.160.11.0/24
167.160.19.0/24
167.160.21.0/24
167.160.27.0/24
167.160.30.0/24
185.4.224.0/23
185.162.72.0/23
185.165.47.0/24
185.252.210.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c4:3d:66:86:9d:53:06:24:f6:b4:e1:b5:96:97:84:92:1f:
27:d1:4f:ec:1c:52:d3:12:c7:42:0f:56:4f:9b:a5:23:c6:11:
29:73:e5:6c:76:d5:43:bd:ad:7b:82:a6:90:88:91:1d:2c:bf:
c2:9c:38:d7:db:ea:a9:85:96:d9:49:ca:81:b5:07:66:a5:4a:
65:f0:a0:18:09:02:c4:3b:29:19:b0:24:43:3e:41:61:57:af:
aa:41:56:90:31:91:fd:0b:5b:1d:5a:a4:81:d1:23:ab:2d:53:
8b:0e:a2:46:84:5b:0b:e3:a6:e7:b8:7f:06:83:b5:f7:e0:6e:
15:0e:65:08:50:fe:70:09:01:66:ff:52:d6:4a:7f:ba:3d:f9:
98:72:4e:87:44:63:72:ba:7e:d4:ac:42:c7:da:30:63:21:86:
ef:27:0b:43:0a:a5:46:3d:60:3b:7a:6b:d2:8c:39:f5:ce:c0:
2f:3c:e3:1c:3e:9f:bd:9a:fa:67:69:f7:23:9b:83:75:35:44:
64:c6:24:3f:5c:31:bf:b0:12:c7:0c:e2:05:50:9b:d7:50:96:
97:df:ed:20:48:e2:92:08:41:5b:3d:f9:95:b4:fe:68:97:44:
94:ef:74:78:72:fc:f8:3e:44:5a:ad:33:5e:12:81:17:31:1c:
34:aa:20:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 07:53:21 2024 by rpki-client on console-fra.rpki-client.org