Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/imF9TDHXXSrY1vumTDy20N60-Cc.roa
File: imF9TDHXXSrY1vumTDy20N60-Cc.roa (raw, json)
Hash identifier: 06gtKf5EGWkRLBBui9NNB05A+jB0IVYjworVD19qIw0=
Subject key identifier: 8A:61:7D:4C:31:D7:5D:2A:D8:D6:FB:A6:4C:3C:B6:D0:DE:B4:F8:27
Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial: 018CA6122D43410BD1F271B0A4EF6990252C
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/imF9TDHXXSrY1vumTDy20N60-Cc.roa
Signing time: Tue 26 Dec 2023 12:20:58 +0000
ROA not before: Tue 26 Dec 2023 12:20:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51020
IP address blocks: 5.62.136.0/24 maxlen: 24
5.62.142.0/24 maxlen: 24
5.62.128.0/24 maxlen: 24
5.62.129.0/24 maxlen: 24
185.69.4.0/23 maxlen: 23
185.69.4.0/24 maxlen: 24
185.69.5.0/24 maxlen: 24
185.69.6.0/24 maxlen: 24
37.77.51.0/24 maxlen: 24
37.77.49.0/24 maxlen: 24
37.77.50.0/24 maxlen: 24
37.77.48.0/24 maxlen: 24
37.77.54.0/24 maxlen: 24
37.77.55.0/24 maxlen: 24
31.7.80.0/24 maxlen: 24
37.77.52.0/24 maxlen: 24
37.77.53.0/24 maxlen: 24
31.7.84.0/24 maxlen: 24
31.7.81.0/24 maxlen: 24
31.7.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a6:12:2d:43:41:0b:d1:f2:71:b0:a4:ef:69:90:25:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Validity
Not Before: Dec 26 12:20:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a617d4c31d75d2ad8d6fba64c3cb6d0deb4f827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:51:48:b3:25:0e:41:09:54:c2:e1:ce:b5:3d:
ab:7d:ea:9d:fe:8c:57:39:e5:72:54:9b:e2:f6:7f:
ec:bf:88:7e:d3:b9:9d:d7:ae:dd:7e:c5:14:e8:a8:
01:f0:4b:a4:b6:41:e6:7b:75:0d:44:9b:cd:6d:b1:
c4:c7:72:04:8c:13:c7:ab:27:bd:b9:24:5e:99:8f:
f8:bf:35:d8:51:69:65:35:58:58:61:31:62:4c:cf:
46:61:fd:b3:98:8d:b1:c0:27:df:98:17:2a:17:97:
07:da:cd:b2:2d:59:8e:c5:c4:99:ab:4a:04:a9:e3:
5c:5d:8b:87:15:0b:00:cb:1c:a1:d1:3c:ec:0f:80:
70:9d:f6:76:21:e7:64:1f:a4:dc:bd:46:b7:8d:3b:
9f:1f:20:54:7e:d4:b5:8b:ff:17:b0:e7:bb:af:8e:
04:b1:a8:ea:4a:5e:52:af:e8:78:d5:56:cf:1e:11:
4b:bf:95:c3:00:c8:4b:eb:0d:89:96:02:f3:65:d7:
57:aa:77:c3:7d:1d:94:a4:eb:cf:d6:8e:34:0a:2b:
60:1a:ae:a0:7e:40:d1:dc:06:71:c4:ee:0f:a2:b5:
fd:ab:6c:fc:66:9d:db:1f:ee:39:b1:60:37:06:5f:
eb:f9:2f:2f:e0:44:a6:29:f5:09:87:5a:f7:43:42:
f8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:61:7D:4C:31:D7:5D:2A:D8:D6:FB:A6:4C:3C:B6:D0:DE:B4:F8:27
X509v3 Authority Key Identifier:
keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/imF9TDHXXSrY1vumTDy20N60-Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.128.0/23
5.62.136.0/24
5.62.142.0/24
31.7.80.0/23
31.7.84.0/24
31.7.86.0/24
37.77.48.0/21
185.69.4.0-185.69.6.255
Signature Algorithm: sha256WithRSAEncryption
70:05:42:ab:82:75:59:00:74:5f:cb:c8:68:c2:53:07:04:34:
10:e7:2f:3a:61:fa:3f:5e:b4:9a:4c:3c:25:49:e2:a9:5f:26:
bf:af:c9:7b:8f:de:c2:9e:8d:c1:3b:bb:57:40:f8:af:3b:79:
e7:05:ef:56:c1:08:3c:e0:02:7a:ba:5a:32:79:8d:48:4c:13:
60:88:6a:ec:80:f0:88:4d:d1:37:6b:11:65:b6:2b:8f:65:5d:
48:b0:4d:06:45:d0:12:54:03:ba:8f:e5:94:9a:1c:8b:2b:12:
28:7f:48:33:3b:2a:6f:31:82:cb:3c:10:8a:90:2f:10:b2:b7:
3c:1c:35:be:4e:bf:57:b2:31:a2:cd:a5:0f:48:c2:e7:52:f4:
44:8e:dc:a6:c3:c2:7d:5b:06:d9:fc:cd:16:fd:4b:ff:5b:9a:
ee:a1:a0:c8:19:f1:88:ac:74:08:44:49:c4:b6:56:e8:66:c8:
c1:4f:06:fb:99:fd:62:40:ab:0f:2f:d3:c4:de:ec:61:66:32:
a7:b4:44:bf:b6:f5:4a:0e:fc:d5:c7:ea:83:dd:8a:b7:12:4b:
c3:3d:4f:c2:e1:6f:17:9f:9d:b2:56:46:45:c1:b8:31:11:7f:
c7:ad:a2:2f:d2:d2:3c:22:8c:28:79:92:81:88:0b:7e:4f:6f:
b6:3a:51:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:24 2024 by rpki-client on console-ams.rpki-client.org