Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/Am2mQpjSn39jIRBLJBHP-h4h000.roa
File: Am2mQpjSn39jIRBLJBHP-h4h000.roa (raw, json)
Hash identifier: RGhLlZeAng8GP0xMITO7U85t2LI0OOoqN+5Ts601xOY=
Subject key identifier: 02:6D:A6:42:98:D2:9F:7F:63:21:10:4B:24:11:CF:FA:1E:21:D3:4D
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 018B1F1E84B5F741B677AAD9993E6328DF64
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/Am2mQpjSn39jIRBLJBHP-h4h000.roa
Signing time: Wed 11 Oct 2023 14:22:55 +0000
ROA not before: Wed 11 Oct 2023 14:22:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 93.119.125.0/24 maxlen: 24
46.102.178.0/24 maxlen: 24
46.102.177.0/24 maxlen: 24
46.102.179.0/24 maxlen: 24
89.35.90.0/24 maxlen: 24
86.104.2.0/24 maxlen: 24
86.104.1.0/24 maxlen: 24
86.104.0.0/24 maxlen: 24
176.223.160.0/24 maxlen: 24
89.37.93.0/24 maxlen: 24
89.37.94.0/24 maxlen: 24
86.106.116.0/24 maxlen: 24
86.104.213.0/24 maxlen: 24
86.104.212.0/24 maxlen: 24
188.208.221.0/24 maxlen: 24
188.208.220.0/24 maxlen: 24
188.208.223.0/24 maxlen: 24
188.209.125.0/24 maxlen: 24
188.209.124.0/24 maxlen: 24
193.30.255.0/24 maxlen: 24
89.41.27.0/24 maxlen: 24
77.81.91.0/24 maxlen: 24
77.81.90.0/24 maxlen: 24
89.42.154.0/24 maxlen: 24
89.39.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 14:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1f:1e:84:b5:f7:41:b6:77:aa:d9:99:3e:63:28:df:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Oct 11 14:22:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=026da64298d29f7f6321104b2411cffa1e21d34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4e:5f:9e:ad:ee:97:63:ce:22:5a:db:cb:3c:
ff:ea:7b:de:d9:d2:37:48:f9:41:83:79:78:61:44:
9f:ca:1d:15:e4:29:ba:dc:03:c7:31:77:9d:3b:f6:
be:1e:7f:45:cf:4d:79:25:2a:73:b7:d9:aa:e9:97:
54:76:4c:73:f7:45:6f:2d:69:c6:c9:8f:b3:2a:92:
6c:c6:6a:3a:7d:ea:9c:6e:fb:b1:ef:6e:bd:76:9f:
4e:c7:6f:c8:95:40:ef:f0:4e:45:52:5a:0a:1a:61:
85:78:20:39:bd:02:a3:c5:87:1d:9a:91:b8:4d:d8:
f9:5c:db:3e:4b:4a:a6:c7:f7:be:75:3c:00:44:45:
9b:18:86:6b:15:3d:39:a3:9a:6b:fa:dd:fa:1f:7b:
cb:d4:73:30:92:4c:ae:31:c8:b8:20:bd:24:69:2b:
b9:db:18:28:1f:82:90:9d:ef:83:a2:69:0d:73:e4:
13:25:b2:43:fb:25:5c:4c:76:47:86:99:c0:8f:bd:
1b:aa:f3:43:74:40:d4:cf:38:28:13:16:35:9c:20:
b6:4e:8b:15:95:4a:44:95:74:38:61:cb:a8:87:69:
9c:8d:8e:a1:f0:b0:13:53:98:14:f3:fa:bd:fb:b4:
fc:2a:c6:3b:a0:ae:eb:cf:fd:68:5d:a4:0f:e2:af:
93:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6D:A6:42:98:D2:9F:7F:63:21:10:4B:24:11:CF:FA:1E:21:D3:4D
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/Am2mQpjSn39jIRBLJBHP-h4h000.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.177.0-46.102.179.255
77.81.90.0/23
86.104.0.0-86.104.2.255
86.104.212.0/23
86.106.116.0/24
89.35.90.0/24
89.37.93.0-89.37.94.255
89.39.69.0/24
89.41.27.0/24
89.42.154.0/24
93.119.125.0/24
176.223.160.0/24
188.208.220.0/23
188.208.223.0/24
188.209.124.0/23
193.30.255.0/24
Signature Algorithm: sha256WithRSAEncryption
47:1f:66:12:4e:77:3b:33:4d:dd:68:c8:6f:91:64:44:e7:66:
b7:6c:e1:82:ae:a9:96:10:ca:15:72:77:2f:43:60:3c:b8:53:
12:60:45:1d:39:85:a3:6c:2d:d7:5e:fc:95:cb:ea:88:fa:0f:
78:73:28:1a:a6:d6:bb:be:59:8a:ef:40:d5:df:be:16:00:6e:
b1:ef:d8:07:a9:ea:85:df:4c:1f:57:81:d4:8c:58:a8:62:56:
f1:18:90:89:15:f3:84:79:cd:9e:b9:50:f5:ac:c4:27:8d:f3:
62:a1:89:63:1d:bd:65:71:f5:79:d5:9e:bf:6b:54:54:19:d3:
d7:fd:45:46:8d:cd:7d:9e:58:8f:c4:c0:5a:94:72:07:3a:fd:
0c:06:68:e0:bf:9b:da:c8:3b:d3:5f:39:6d:7a:f2:85:6e:cc:
10:d6:25:bb:53:7a:f3:b5:ce:7a:b7:df:6d:b3:f9:36:33:23:
bd:d8:c6:1d:29:dd:5c:60:7e:47:d4:29:b9:e5:1c:f4:4a:a4:
ee:43:76:86:3b:e3:89:36:33:6e:2f:9e:91:e2:cb:86:65:ac:
f2:be:30:2c:23:91:c7:63:24:3f:63:72:20:51:d8:41:21:7c:
04:8e:97:2c:b8:5d:41:6d:83:c8:e4:c0:9b:9b:1e:b5:73:9c:
50:36:ea:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org