Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/g9WDzJBTP0vfOTntN7K9dJOHlz0.roa
File: g9WDzJBTP0vfOTntN7K9dJOHlz0.roa (raw, json)
Hash identifier: KhSvV8ksdh9VJVMWLa5BO7pDsM5ZHrRLSEe//fvzCoY=
Subject key identifier: 83:D5:83:CC:90:53:3F:4B:DF:39:39:ED:37:B2:BD:74:93:87:97:3D
Certificate issuer: /CN=a7a77078af387b48d70810eb1604df0ade118fda
Certificate serial: 01857102C95377AD90AD5D1A06A5A4DFD7EE
Authority key identifier: A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/g9WDzJBTP0vfOTntN7K9dJOHlz0.roa
Signing time: Mon 02 Jan 2023 05:44:45 +0000
ROA not before: Mon 02 Jan 2023 05:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51809
IP address blocks: 67.208.52.0/22 maxlen: 22
45.82.140.0/22 maxlen: 22
185.232.119.0/24 maxlen: 24
63.135.72.0/21 maxlen: 21
2a10:d580::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:c9:53:77:ad:90:ad:5d:1a:06:a5:a4:df:d7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a77078af387b48d70810eb1604df0ade118fda
Validity
Not Before: Jan 2 05:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83d583cc90533f4bdf3939ed37b2bd749387973d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f3:b9:ed:0e:e8:73:86:75:ab:15:a5:a7:bb:
89:7c:a4:4c:b5:18:74:48:aa:8c:58:c0:48:1b:b8:
0e:22:d6:f4:ef:44:75:c4:7c:cf:60:fa:fb:e9:7e:
fa:08:47:41:41:a5:5e:22:36:95:b3:3a:73:c8:70:
69:77:49:ce:f9:6c:3b:3d:d4:4e:42:75:3c:c9:67:
92:f6:79:de:c7:ef:6e:1a:ea:86:54:eb:ee:5d:9f:
9c:1c:34:af:f0:8b:2b:1b:e0:28:39:ad:db:b5:3d:
12:4a:ef:3e:36:ca:72:74:40:f9:cf:cf:9e:f7:be:
09:1f:48:f4:a6:59:13:e1:25:8b:ec:fb:17:54:f6:
3d:38:cd:72:62:f4:41:b1:5b:16:21:4f:da:d2:f6:
e1:58:32:de:ea:c7:99:c6:ec:79:d9:cf:01:22:ba:
18:9a:04:89:30:3c:b5:be:65:1c:99:43:74:4c:aa:
61:f4:c4:7a:62:e0:26:90:b4:c0:8c:de:a7:46:94:
0d:81:2a:ba:75:9c:dc:aa:0f:c7:6a:c2:5b:2e:aa:
74:88:e4:89:e6:a7:da:23:89:00:3b:ab:cb:cc:7b:
84:6f:66:17:00:51:36:5a:6e:5d:5f:cd:a1:fa:7c:
f3:e9:53:61:d5:00:f9:e6:9f:27:5d:73:11:d7:e3:
eb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D5:83:CC:90:53:3F:4B:DF:39:39:ED:37:B2:BD:74:93:87:97:3D
X509v3 Authority Key Identifier:
keyid:A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/g9WDzJBTP0vfOTntN7K9dJOHlz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.140.0/22
63.135.72.0/21
67.208.52.0/22
185.232.119.0/24
IPv6:
2a10:d580::/29
Signature Algorithm: sha256WithRSAEncryption
12:50:75:87:ef:08:3a:40:67:0e:d7:f7:fb:f9:b4:5d:1d:74:
e8:ad:b2:28:fb:3a:30:d4:09:68:f8:6d:9f:d6:97:f9:4e:ee:
eb:e4:14:35:df:12:59:02:8a:90:99:f0:c9:38:11:75:04:56:
dd:55:61:8c:59:fc:8b:17:15:fa:d2:11:26:a9:a3:ec:cf:d6:
b4:80:b4:29:c5:84:32:16:a5:d9:ba:cd:fa:9b:a2:25:c3:09:
01:9f:cf:73:19:b1:b0:ab:81:bb:12:db:62:be:4a:79:84:10:
63:37:e8:ae:3a:a8:c7:f4:c6:63:4a:7f:89:b8:e5:92:01:fc:
1d:32:0b:04:25:0f:5e:f4:1b:98:db:d9:f6:4d:cb:04:36:67:
97:79:36:6c:a2:fd:c8:5a:eb:57:cf:02:05:a8:51:2a:3c:54:
3c:38:ea:2c:cc:08:8f:51:a5:30:70:4d:6f:1d:01:d0:71:b2:
26:b8:c5:6a:1c:e4:07:cc:47:07:ce:8f:ff:aa:d0:ba:06:3e:
0f:a5:ce:c8:0b:33:44:76:9c:81:0b:62:10:37:b3:89:25:71:
72:90:ff:66:ab:86:db:5f:d8:65:23:da:89:40:b0:03:c5:34:
d0:82:fd:9a:34:86:b0:a3:02:b7:1c:e2:d0:72:d5:a6:92:9d:
00:b0:2e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:33 2024 by rpki-client on console-ams.rpki-client.org