Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/4mOigwBahraWZc6OMcTl7wKw_j8.roa
File: 4mOigwBahraWZc6OMcTl7wKw_j8.roa (raw, json)
Hash identifier: kpURYKC/18zPhtxra/G0AD4/YoctxM9RhXGcuJa58zU=
Subject key identifier: E2:63:A2:83:00:5A:86:B6:96:65:CE:8E:31:C4:E5:EF:02:B0:FE:3F
Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial: 018E084ED6D3FD4C152C74673E87AE530B42
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/4mOigwBahraWZc6OMcTl7wKw_j8.roa
Signing time: Mon 04 Mar 2024 07:12:48 +0000
ROA not before: Mon 04 Mar 2024 07:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39719
IP address blocks: 62.177.24.0/21 maxlen: 21
62.177.24.0/24 maxlen: 24
62.177.25.0/24 maxlen: 24
62.177.26.0/24 maxlen: 24
62.177.27.0/24 maxlen: 24
62.177.28.0/24 maxlen: 24
62.177.29.0/24 maxlen: 24
62.177.30.0/24 maxlen: 24
62.177.31.0/24 maxlen: 24
81.23.80.0/20 maxlen: 22
81.23.84.0/22 maxlen: 22
81.23.84.0/23 maxlen: 23
81.23.84.0/24 maxlen: 24
81.23.88.0/22 maxlen: 22
81.23.92.0/22 maxlen: 22
2a12:1d40::/29 maxlen: 29
2a12:1d40:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 30 Jul 2024 15:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:08:4e:d6:d3:fd:4c:15:2c:74:67:3e:87:ae:53:0b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Validity
Not Before: Mar 4 07:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e263a283005a86b69665ce8e31c4e5ef02b0fe3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8c:29:ae:70:f2:66:3c:02:a8:5d:2a:e4:41:
cd:07:02:95:69:54:50:20:11:7c:b6:18:a2:ee:11:
36:47:e5:53:d1:37:05:f4:84:e1:c3:d7:f5:15:f3:
f5:08:f8:d1:d5:91:52:eb:04:a3:fa:86:88:d8:4c:
1c:ca:41:0f:1f:17:9f:38:5f:bb:aa:b0:51:93:bb:
55:b1:10:a5:9c:d0:cd:15:cc:86:cc:23:93:c3:70:
33:28:68:f8:e1:cf:6b:7e:93:12:61:71:67:51:ee:
ca:da:db:24:60:f0:c3:d6:7b:0d:c9:30:de:2f:5c:
14:7e:49:0e:bf:e4:11:8e:8d:af:89:b6:18:48:6a:
87:6e:3b:df:9a:a2:4f:d0:b8:01:ad:86:e5:dd:9d:
bc:ad:1e:a9:6a:d9:07:df:2d:05:20:19:19:d4:62:
5c:78:55:3e:e6:df:a4:da:3c:06:80:37:d1:18:f5:
96:23:62:8c:76:8e:69:b6:07:c5:96:f8:c4:78:35:
01:cd:bf:1b:bd:19:8a:72:cf:c9:6a:59:cd:56:fe:
bc:c9:ba:5f:df:de:5b:02:98:74:c6:7d:4a:b3:2a:
64:e3:e4:41:03:f0:f2:74:46:e4:0b:7d:a9:9f:03:
66:9d:63:e8:9a:61:1d:96:87:42:50:44:82:15:53:
9a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:63:A2:83:00:5A:86:B6:96:65:CE:8E:31:C4:E5:EF:02:B0:FE:3F
X509v3 Authority Key Identifier:
keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/4mOigwBahraWZc6OMcTl7wKw_j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.177.24.0/21
81.23.80.0/20
IPv6:
2a12:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
5e:1e:e8:f7:67:91:27:12:c8:d6:e3:5a:f6:4f:e0:5d:be:25:
42:fe:da:0e:29:cf:a9:3d:b4:bc:64:46:a1:3d:46:e2:c9:32:
f7:72:4a:f5:bc:a3:3b:02:50:af:3c:1d:ad:09:a1:4c:44:0a:
d8:d9:60:60:5f:ad:a8:df:4c:a8:7a:71:f4:2f:0f:a1:bc:21:
b4:ee:05:a5:b0:8b:68:4a:59:e0:5f:7c:e1:a1:bb:33:55:72:
a8:2f:d3:cb:0e:84:0d:ec:05:64:d5:8d:13:59:47:9e:4a:66:
5f:b2:30:c2:5c:23:47:ef:7a:28:2f:68:11:cd:13:19:45:ad:
3f:40:a1:89:eb:50:3a:ba:46:1c:9a:ca:30:89:c0:9d:d6:28:
3e:69:c7:d1:a4:9f:15:33:ba:ea:97:27:b6:33:fd:ea:48:3e:
ab:7d:c2:66:89:88:3b:26:9f:83:1d:cd:83:7f:91:8a:56:96:
aa:1c:67:d5:f1:2a:99:7b:5f:4e:a5:af:29:ef:4e:a1:d3:6a:
4b:2e:14:b0:82:c9:8b:dc:fe:ba:31:ce:5e:e8:bb:34:53:16:
b9:2b:24:71:3c:e2:65:06:63:7a:27:46:74:1c:1b:a9:c4:24:
67:de:3c:80:ac:0f:91:5e:4f:6a:02:17:69:8a:49:b5:b3:7d:
60:22:f3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 18:12:31 2024 by rpki-client on console-fra.rpki-client.org