Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/RHLiKW4pCreYHMqrORjTZcsN3p8.roa
File: RHLiKW4pCreYHMqrORjTZcsN3p8.roa (raw, json)
Hash identifier: 5anSMfmVqESAscItVsLBc04y6u5sxyQCGO8T5IVSpms=
Subject key identifier: 44:72:E2:29:6E:29:0A:B7:98:1C:CA:AB:39:18:D3:65:CB:0D:DE:9F
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 018A4AC4787D975D1171E49A9A1EF405AFF7
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/RHLiKW4pCreYHMqrORjTZcsN3p8.roa
Signing time: Thu 31 Aug 2023 08:45:04 +0000
ROA not before: Thu 31 Aug 2023 08:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 188.240.217.0/24 maxlen: 24
188.240.218.0/24 maxlen: 24
188.240.219.0/24 maxlen: 24
188.240.216.0/24 maxlen: 24
188.240.10.0/24 maxlen: 24
188.240.11.0/24 maxlen: 24
84.247.98.0/24 maxlen: 24
84.247.94.0/24 maxlen: 24
84.247.95.0/24 maxlen: 24
84.247.96.0/24 maxlen: 24
84.247.97.0/24 maxlen: 24
84.247.92.0/24 maxlen: 24
84.247.93.0/24 maxlen: 24
84.247.101.0/24 maxlen: 24
84.247.102.0/24 maxlen: 24
84.247.103.0/24 maxlen: 24
84.247.99.0/24 maxlen: 24
84.247.100.0/24 maxlen: 24
84.247.90.0/24 maxlen: 24
84.247.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:c4:78:7d:97:5d:11:71:e4:9a:9a:1e:f4:05:af:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Aug 31 08:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4472e2296e290ab7981ccaab3918d365cb0dde9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:31:d2:76:0f:85:1f:e4:74:22:86:b1:8b:
a9:4c:40:3f:93:4e:25:ef:e7:44:ba:8b:e7:25:eb:
37:04:af:e5:d6:d4:f2:90:1b:6a:5f:d1:b2:f1:e4:
e1:aa:49:26:b4:6e:f8:22:84:87:54:c0:c9:3a:52:
a6:99:c1:66:75:ef:7b:5d:63:77:ca:8a:65:7c:fd:
00:50:d4:b9:ce:f1:d8:f1:c4:91:24:35:5c:74:b9:
1f:be:a0:b8:ad:5c:40:4f:e5:5c:8c:a9:f3:c7:4e:
93:37:be:4a:92:03:b5:a0:be:35:d9:97:0c:d3:73:
c3:7f:de:e8:ff:94:36:31:a5:01:ea:ab:9a:c1:a5:
bf:4f:a2:11:8c:18:57:67:d9:5c:24:d6:c9:81:e2:
94:e5:64:c3:33:6a:0c:ef:5b:a9:5d:54:44:72:8b:
92:dc:17:a6:30:05:6f:a1:1b:a7:84:8e:d1:08:49:
69:e7:43:ee:28:bf:07:b3:23:a7:bb:4c:d6:94:f1:
ad:12:10:d7:2c:ae:d0:7d:14:e9:e6:12:2d:10:7b:
fe:04:8a:17:62:3e:fe:3c:38:36:5c:e9:58:38:44:
e3:e6:17:67:6b:d1:d8:60:db:fc:73:f8:72:33:63:
88:9e:d4:c2:45:aa:49:37:5f:31:a7:61:9e:8f:09:
51:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:72:E2:29:6E:29:0A:B7:98:1C:CA:AB:39:18:D3:65:CB:0D:DE:9F
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/RHLiKW4pCreYHMqrORjTZcsN3p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.90.0-84.247.103.255
188.240.10.0/23
188.240.216.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:64:d2:47:38:50:a1:cf:51:39:1c:28:67:eb:5b:2d:a9:66:
89:5a:b4:66:25:ef:4c:45:26:ea:d4:52:9a:c0:2e:35:27:00:
4e:1a:07:7b:fc:b6:f5:23:4c:3a:75:c5:f6:28:ba:18:ee:71:
c8:16:db:85:85:4b:52:2f:d4:5f:ba:d1:a8:38:00:50:1f:01:
d5:00:e2:82:88:15:be:e7:07:49:d6:2e:ce:3a:3c:94:a6:74:
cc:4c:5d:b7:3f:85:38:3b:7a:7d:b6:f2:4b:7e:85:d1:25:2f:
6c:7e:3f:ab:57:e8:af:42:8a:1a:42:65:12:5f:5b:da:5e:cc:
98:37:0a:43:45:02:d5:af:db:90:bc:a0:62:87:c0:73:bf:da:
49:a6:a0:c6:ce:30:d1:f7:12:6c:46:d4:82:89:6d:64:2c:2f:
47:0a:86:32:2e:7f:0b:b2:84:04:7a:ee:ad:39:28:e3:02:16:
9d:13:da:32:b1:bb:16:f6:95:e3:d4:4e:27:7f:e4:28:ec:85:
2f:3e:fd:68:a6:aa:29:1d:9f:39:6b:26:02:08:5e:a4:22:e3:
67:95:0b:63:53:b1:ea:42:67:3a:ca:b9:cd:28:58:dc:94:ab:
c4:a5:de:dc:8d:6a:fe:2a:d1:97:21:29:bf:49:e5:0d:44:2c:
74:d3:bc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:47 2024 by rpki-client on console-ams.rpki-client.org