Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/Kd6xeIL3BqOIXyrssEQK4J9O6Bs.roa
File: Kd6xeIL3BqOIXyrssEQK4J9O6Bs.roa (raw, json)
Hash identifier: /hSjotINT5qyDF/9ASQ9oiKgHE1ydHURuBjkmWifofU=
Subject key identifier: 29:DE:B1:78:82:F7:06:A3:88:5F:2A:EC:B0:44:0A:E0:9F:4E:E8:1B
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 018CC8713FF9899DD6731A98EC6274AAE60C
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/Kd6xeIL3BqOIXyrssEQK4J9O6Bs.roa
Signing time: Tue 02 Jan 2024 04:31:54 +0000
ROA not before: Tue 02 Jan 2024 04:31:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15830
IP address blocks: 147.123.48.0/21 maxlen: 21
137.174.192.0/19 maxlen: 22
155.204.64.0/20 maxlen: 20
137.174.0.0/17 maxlen: 22
155.204.80.0/21 maxlen: 21
155.204.88.0/21 maxlen: 21
155.204.96.0/21 maxlen: 21
155.204.104.0/21 maxlen: 21
147.123.36.0/22 maxlen: 24
137.174.128.0/18 maxlen: 22
Validation: Failed, certificate revoked on Mon 25 Mar 2024 11:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:3f:f9:89:9d:d6:73:1a:98:ec:62:74:aa:e6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Jan 2 04:31:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29deb17882f706a3885f2aecb0440ae09f4ee81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c0:d8:b6:c7:d1:98:22:84:15:ac:73:cf:50:
72:55:8e:27:3a:41:50:dc:e9:c9:76:47:e0:7d:76:
84:94:38:ac:e2:cf:f9:13:71:84:46:b8:f6:d0:c9:
35:d4:8f:e4:f0:00:ff:f1:c4:75:5d:c5:fc:99:3f:
dc:5c:a0:91:63:42:64:33:10:7d:c8:b2:3d:72:05:
31:0f:80:1b:1b:9c:3a:88:ba:0c:ab:13:9f:fa:6b:
5d:fc:6d:a7:43:6a:d9:f8:08:e3:c8:78:2b:ee:00:
38:a6:e6:e1:4a:bb:fc:e2:5a:40:0e:7b:b3:47:b7:
cd:60:42:08:f2:a3:c3:7e:73:57:12:d1:3a:b1:7f:
76:fa:d1:94:39:f6:1f:cb:59:89:62:5f:e1:d6:dc:
c4:b9:cc:47:bf:3c:37:75:07:48:d5:e8:36:f5:ed:
38:b7:e2:f1:4d:e1:68:35:d7:86:68:af:8d:b1:de:
d5:dd:d4:6a:eb:d9:bc:5c:eb:5a:d5:6f:0c:66:3a:
92:fd:67:11:e0:52:a5:dd:aa:66:4a:be:e3:3e:f8:
9e:ba:68:6d:9d:4a:84:3a:9a:de:e7:b1:13:0e:3b:
95:e9:47:74:09:66:2d:7b:b2:0e:8d:aa:12:7c:a3:
75:35:c4:5a:41:3f:78:33:cb:de:43:a9:4e:68:c0:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DE:B1:78:82:F7:06:A3:88:5F:2A:EC:B0:44:0A:E0:9F:4E:E8:1B
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/Kd6xeIL3BqOIXyrssEQK4J9O6Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.174.0.0-137.174.223.255
147.123.36.0/22
147.123.48.0/21
155.204.64.0-155.204.111.255
Signature Algorithm: sha256WithRSAEncryption
a6:25:41:b2:03:71:0e:d1:4c:22:84:1c:84:81:f9:cd:b9:6c:
26:63:f0:c6:95:a9:f6:19:d0:9d:c9:3a:e5:47:af:74:53:63:
9f:9a:a1:2f:74:98:da:07:56:bb:dd:bd:84:95:7a:85:d0:42:
2d:68:19:73:23:f5:42:e0:28:df:ec:36:5b:c8:e9:31:60:ef:
1e:2d:06:a5:c1:57:5c:9c:b8:82:3e:d6:40:3b:c6:37:89:68:
7d:64:2e:86:51:dd:71:46:90:4e:96:05:0f:a7:0a:a8:f2:9c:
5e:6d:12:22:75:e5:ae:14:a0:06:cb:b3:a0:cd:f8:2b:e4:dd:
63:aa:23:ce:6a:9c:bd:9f:b5:7c:90:3b:df:a0:da:50:6e:6d:
c3:14:3c:4c:b9:df:a6:7e:8c:61:7d:f6:87:32:9f:20:90:db:
e4:4d:24:21:cd:eb:a5:be:6d:92:51:eb:d0:2f:36:22:1f:ab:
be:91:5b:7e:5c:11:de:69:b0:ba:1c:47:8a:d5:e2:11:2a:f3:
f0:fd:b3:49:b2:79:e7:f2:5a:58:a8:d6:33:02:26:22:80:bd:
b1:7a:20:90:43:93:e5:55:4e:ee:29:00:ff:8b:59:ab:39:e0:
ea:26:cb:11:d4:8d:0c:32:d8:a7:29:9d:04:53:1b:eb:dc:2d:
96:dc:94:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 14:46:40 2024 by rpki-client on console-fra.rpki-client.org