Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/aRGuFLvuR_TpjmMti06epHAHv-I.roa
File: aRGuFLvuR_TpjmMti06epHAHv-I.roa (raw, json)
Hash identifier: ni5s3chKODsWFLR/7KUbdittQqXeQ/ZOpU/nOTOXvFE=
Subject key identifier: 69:11:AE:14:BB:EE:47:F4:E9:8E:63:2D:8B:4E:9E:A4:70:07:BF:E2
Certificate issuer: /CN=3eb1788fe220e46434692d1cc437072d792d7888
Certificate serial: 01856CCACA85C71358B2BA1E99011BF2EC59
Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/aRGuFLvuR_TpjmMti06epHAHv-I.roa
Signing time: Sun 01 Jan 2023 10:05:07 +0000
ROA not before: Sun 01 Jan 2023 10:05:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58069
IP address blocks: 157.180.228.0/22 maxlen: 22
157.180.232.0/22 maxlen: 22
192.108.45.0/24 maxlen: 24
192.108.46.0/23 maxlen: 23
192.108.68.0/24 maxlen: 24
2a00:139c::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:ca:85:c7:13:58:b2:ba:1e:99:01:1b:f2:ec:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888
Validity
Not Before: Jan 1 10:05:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6911ae14bbee47f4e98e632d8b4e9ea47007bfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:94:a6:44:ef:c8:b1:d3:60:4d:f3:19:e5:
05:a6:32:75:ac:24:3d:a2:85:3c:62:b7:d6:8a:d2:
00:1f:c4:01:8e:21:5b:87:95:be:68:28:b4:f2:63:
f3:99:a9:6b:7e:92:55:52:0f:25:5a:cf:8e:53:7b:
38:9c:0e:1b:16:64:ef:a8:89:a1:e7:91:61:d9:58:
ff:b9:cf:f7:7c:38:7d:6d:30:9e:e9:a9:3e:f7:43:
c6:37:62:f2:8b:96:ff:fc:70:83:34:0d:cd:d6:7e:
f4:c4:0f:eb:e7:df:54:07:38:40:bb:33:a1:1c:51:
25:63:45:ed:ae:42:82:ac:29:cb:7e:14:73:5c:d8:
e3:30:55:58:7c:48:9a:72:37:51:e7:68:cc:ba:b8:
ed:32:01:c7:18:35:01:dc:b2:e7:c5:97:94:ca:d6:
12:39:98:41:99:7e:07:5c:0a:be:8c:22:ac:9b:74:
20:43:bf:8e:b9:85:17:63:f0:56:d9:64:c6:4f:89:
0f:24:ed:5a:76:13:c6:79:dd:87:38:b1:88:3f:a0:
d8:e0:02:2e:f2:3a:03:24:f1:1b:c6:12:65:ef:87:
fa:aa:fa:bd:cd:50:f3:f8:0a:c4:9d:f9:d8:2e:f9:
bc:df:9e:bb:20:63:7f:f0:88:3b:6a:bb:b8:82:53:
ec:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:11:AE:14:BB:EE:47:F4:E9:8E:63:2D:8B:4E:9E:A4:70:07:BF:E2
X509v3 Authority Key Identifier:
keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/aRGuFLvuR_TpjmMti06epHAHv-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.180.228.0-157.180.235.255
192.108.45.0-192.108.47.255
192.108.68.0/24
IPv6:
2a00:139c::/32
Signature Algorithm: sha256WithRSAEncryption
41:0d:cd:49:f4:31:39:d2:74:dd:9f:1f:c5:c5:cb:9a:b8:d9:
97:89:08:87:c0:d0:63:c2:80:7f:15:48:f7:da:57:2d:23:8e:
d6:7b:05:09:79:70:8c:d6:94:e4:a9:7a:7d:bf:01:62:16:13:
d5:f4:28:d5:46:9b:e3:93:5d:3b:f3:37:44:bf:6a:70:56:3a:
28:05:55:4c:b7:f3:40:8c:e0:0b:11:4c:76:02:6b:52:aa:90:
f9:81:d9:f2:41:b3:40:d2:0c:b6:e3:7d:1a:e0:b7:7b:a0:da:
b2:3f:cf:e5:87:91:e4:dc:34:bf:26:18:8c:ab:99:65:38:4b:
fb:24:12:0f:c6:67:a2:a9:44:6c:da:08:59:71:8e:86:7b:2d:
9e:29:89:ca:65:43:cb:5c:c3:0b:1b:38:e4:fa:d7:71:27:f6:
26:cd:f2:31:15:2d:ee:0e:16:bc:5a:d9:9a:f7:0f:96:19:42:
e8:fa:78:5e:4d:6d:7b:ca:3b:22:fa:a6:46:d8:26:03:94:18:
fe:21:c5:76:2d:af:b8:af:4e:11:f5:c6:65:62:f3:77:fd:d2:
9f:55:07:22:02:34:29:08:ff:0b:08:94:15:ee:4c:bd:65:63:
5c:94:c0:aa:ac:d2:d7:98:04:f0:e0:f5:09:41:e3:33:ce:e7:
d3:38:da:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:17 2024 by rpki-client on console-ams.rpki-client.org