Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/60q1RudeEK4pb0JZbXH9tj-VQtg.roa
File: 60q1RudeEK4pb0JZbXH9tj-VQtg.roa (raw, json)
Hash identifier: oi45oARPX++kwsupfTh2cgKS578rLtFIPu26Wm6db9c=
Subject key identifier: EB:4A:B5:46:E7:5E:10:AE:29:6F:42:59:6D:71:FD:B6:3F:95:42:D8
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01930CC3D87480732272F1065D01F7BE228D
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/60q1RudeEK4pb0JZbXH9tj-VQtg.roa
Signing time: Fri 08 Nov 2024 17:13:01 +0000
ROA not before: Fri 08 Nov 2024 17:13:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.244.0/22 maxlen: 24
83.147.248.0/22 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.204.0/22 maxlen: 24
91.186.216.0/23 maxlen: 24
94.241.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 08:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0c:c3:d8:74:80:73:22:72:f1:06:5d:01:f7:be:22:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Nov 8 17:13:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb4ab546e75e10ae296f42596d71fdb63f9542d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:e9:34:e0:32:62:1a:49:60:3b:d7:0f:56:
38:12:ad:c7:00:b9:dc:7f:2d:7d:99:1e:aa:eb:be:
d7:52:58:ba:b0:a9:ff:70:5b:44:e2:37:af:a3:47:
f6:43:87:c7:86:be:15:c2:a6:c4:b3:ff:93:29:98:
b5:a9:37:30:5b:f9:37:21:ec:43:49:71:43:ff:9b:
fe:87:55:1a:9c:33:d6:73:6b:3c:47:0a:0f:2d:cd:
62:21:5d:dd:98:71:de:c2:46:1a:d7:4b:66:b2:2e:
00:e8:94:27:4a:c8:f2:51:47:c8:42:42:d2:e5:1d:
ce:93:42:59:0f:6e:11:f2:c2:c5:c2:f5:2d:09:4c:
7c:74:50:45:9a:10:1d:5b:8d:a2:6b:3c:e7:67:37:
45:4e:fe:8f:f6:eb:62:36:34:84:83:ce:10:99:b8:
88:38:08:31:10:0f:e8:aa:2c:49:8b:c9:2c:26:b9:
3e:43:44:ef:fd:dd:df:c5:66:43:c6:ef:1b:1d:dc:
c8:aa:4d:f8:3d:97:d7:aa:16:c3:df:85:b3:2a:a2:
ad:33:56:f1:8f:7a:ca:c7:13:d2:60:41:3a:ec:5b:
a0:c4:5c:f3:ff:74:59:74:32:d3:36:bc:18:5f:cb:
99:d5:3c:b5:f8:ce:40:8f:9f:19:85:58:94:8d:11:
33:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4A:B5:46:E7:5E:10:AE:29:6F:42:59:6D:71:FD:B6:3F:95:42:D8
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/60q1RudeEK4pb0JZbXH9tj-VQtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.244.0-83.147.251.255
91.186.200.0/21
91.186.216.0/23
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
60:4d:b9:5d:8d:fc:77:d3:e2:6f:7c:f4:d9:71:6b:f1:d5:c7:
10:d2:89:6c:c6:d5:ce:24:de:60:17:e6:82:c9:48:00:3c:c3:
ba:bd:18:80:74:b7:ef:6d:36:84:1b:fb:43:1f:94:68:8b:17:
c5:24:67:f8:e0:e1:17:b4:f5:4b:32:86:81:55:04:c4:04:9e:
c5:b2:51:64:9d:cd:4e:d1:2c:b7:42:31:55:94:54:ba:cd:f5:
be:03:68:84:bc:5c:e8:b5:ac:16:b4:2a:73:d1:5d:b3:d8:a3:
21:48:4c:23:e8:31:54:70:74:75:bd:33:37:b7:b0:3d:ca:d0:
57:3d:f8:1f:56:53:c3:64:65:22:9c:6d:5d:ad:c6:00:72:13:
d0:e9:85:f0:c9:6d:ff:0c:62:79:64:de:fb:ea:a9:a7:04:27:
fe:df:76:ee:00:df:a6:80:3d:4d:26:f8:37:dd:a2:bd:57:b6:
c7:87:90:91:6d:a7:a3:6a:82:28:c9:b5:81:27:d1:28:ae:f2:
94:c4:77:02:98:bb:02:48:90:27:43:b2:c8:ff:08:aa:0c:64:
2d:a5:e3:6b:df:fc:a7:ec:c2:9a:ec:6f:dc:f5:41:0f:14:7f:
d6:f6:b5:3a:ec:41:49:9e:91:53:6b:ff:3a:53:d6:3b:92:c8:
5c:2d:4e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 10:16:27 2024 by rpki-client on console-ams.rpki-client.org