Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/9h4FKn5b-OiAw3A450wPXNQkZF8.roa
File: 9h4FKn5b-OiAw3A450wPXNQkZF8.roa (raw, json)
Hash identifier: cl98+NCyngXyTA1IM/E3guK5HydQ1G566K9+iIHPyt4=
Subject key identifier: F6:1E:05:2A:7E:5B:F8:E8:80:C3:70:38:E7:4C:0F:5C:D4:24:64:5F
Certificate issuer: /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial: 018EA93CBDE9AF012AE7C8FFA72A28AD87E6
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/9h4FKn5b-OiAw3A450wPXNQkZF8.roa
Signing time: Thu 04 Apr 2024 13:11:54 +0000
ROA not before: Thu 04 Apr 2024 13:11:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8374
IP address blocks: 5.172.224.0/19 maxlen: 19
31.0.0.0/15 maxlen: 16
31.0.0.0/16 maxlen: 16
31.2.0.0/17 maxlen: 18
37.98.208.0/20 maxlen: 20
37.109.0.0/16 maxlen: 16
37.152.16.0/20 maxlen: 20
37.209.128.0/19 maxlen: 19
37.247.128.0/17 maxlen: 17
37.247.241.0/28 maxlen: 28
37.248.0.0/15 maxlen: 15
46.76.0.0/15 maxlen: 15
78.30.64.0/18 maxlen: 18
84.39.160.0/20 maxlen: 20
87.251.224.0/19 maxlen: 19
92.60.128.0/20 maxlen: 20
93.154.128.0/17 maxlen: 17
151.248.32.0/20 maxlen: 20
185.4.212.0/22 maxlen: 22
188.125.32.0/19 maxlen: 19
193.41.112.0/23 maxlen: 23
212.2.96.0/19 maxlen: 19
2a01:2e0::/28 maxlen: 28
2a01:bb80::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 08 Apr 2024 20:26:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a9:3c:bd:e9:af:01:2a:e7:c8:ff:a7:2a:28:ad:87:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Validity
Not Before: Apr 4 13:11:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f61e052a7e5bf8e880c37038e74c0f5cd424645f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8d:58:e5:f6:e2:f2:e7:52:67:54:59:0c:2c:
2b:4f:de:41:fe:01:ff:94:7c:d3:d8:15:31:aa:d3:
ce:0b:5a:1c:10:c6:66:15:2f:44:70:63:bb:9d:10:
fc:ba:d6:80:0f:75:dd:30:b6:5d:78:9a:ca:5f:92:
74:1b:d9:7e:05:24:af:9c:2d:2e:52:62:54:ed:fe:
e3:b5:1a:bd:4a:2d:a6:ac:50:17:e1:3e:ea:df:35:
9d:ce:ef:f7:ce:8c:c5:82:d1:88:0e:0f:d0:ca:66:
64:18:b3:2c:77:0b:03:a4:a2:47:4e:23:45:78:e1:
da:a0:2c:52:3f:78:9d:eb:f8:d7:f9:23:d4:9c:6a:
5a:0c:c9:2a:11:04:8f:7f:4f:91:a7:3e:a8:2c:b5:
30:73:4d:a6:23:03:3b:86:8f:2e:51:02:1b:f3:a9:
a6:e3:f1:f4:b6:01:50:1e:6b:06:c6:89:49:14:39:
61:b8:3c:20:40:f3:14:e4:75:87:4f:2c:7f:e8:6f:
a6:7e:7a:b6:9e:64:a0:c7:52:49:5b:b7:d4:47:94:
a7:0d:7c:7c:ea:e5:28:a6:b6:56:01:e9:08:6d:35:
ef:f0:22:f1:6f:ee:71:1a:fe:e0:fa:bf:99:25:16:
f3:18:ca:a8:a6:33:c5:e9:6a:92:8e:51:41:5c:27:
01:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1E:05:2A:7E:5B:F8:E8:80:C3:70:38:E7:4C:0F:5C:D4:24:64:5F
X509v3 Authority Key Identifier:
keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/9h4FKn5b-OiAw3A450wPXNQkZF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.224.0/19
31.0.0.0-31.2.127.255
37.98.208.0/20
37.109.0.0/16
37.152.16.0/20
37.209.128.0/19
37.247.128.0-37.249.255.255
46.76.0.0/15
78.30.64.0/18
84.39.160.0/20
87.251.224.0/19
92.60.128.0/20
93.154.128.0/17
151.248.32.0/20
185.4.212.0/22
188.125.32.0/19
193.41.112.0/23
212.2.96.0/19
IPv6:
2a01:2e0::/28
2a01:bb80::/32
Signature Algorithm: sha256WithRSAEncryption
0d:ad:25:24:95:c9:0e:5b:e4:cc:70:6f:85:16:9c:71:ae:d6:
38:67:55:ee:b4:0a:8f:46:75:65:47:15:bc:e6:84:11:6c:d3:
b4:f6:92:ea:57:ed:d3:a8:4d:17:be:49:41:a5:f0:00:82:bc:
bd:36:2f:4a:e0:36:10:2d:3a:a2:e1:14:c3:39:fa:45:b5:f2:
b6:b8:c8:a4:4e:46:24:e9:cd:c8:49:f7:df:2e:0f:aa:80:0f:
4c:71:0a:12:d6:a0:7d:98:06:a3:dd:5c:69:fb:39:5f:15:3a:
d6:2b:3e:fa:df:7f:f0:19:0c:46:d5:89:03:69:a7:34:f2:dd:
d9:93:61:6f:a3:d5:3c:b1:b7:60:46:72:a9:c7:86:20:35:02:
bc:8a:08:c6:9d:b9:21:23:92:e9:aa:c1:0f:93:ff:80:20:23:
80:a8:54:15:1e:9c:5d:62:a7:91:07:35:12:3b:76:85:03:f4:
54:4d:7a:06:9a:23:7e:e7:10:7a:79:3a:b8:16:8e:fc:0a:01:
5f:b3:5e:16:41:70:b5:2c:d0:b7:79:29:63:3d:18:9a:35:3c:
ad:ef:61:5a:28:9b:4f:ac:f0:be:1e:a3:eb:9b:74:0a:43:18:
72:d8:8e:97:4c:19:14:fc:45:a2:0f:62:15:1e:ad:1b:39:f1:
84:84:53:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 23:23:58 2024 by rpki-client on console-ams.rpki-client.org