Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/a2mehxkhu7D2p3RwrKN2LX1IoOY.roa
File: a2mehxkhu7D2p3RwrKN2LX1IoOY.roa (raw, json)
Hash identifier: xt6xtdJaPcLEG1qLRuri+ytmkYcT8KSaCyaYgDZjVQw=
Subject key identifier: 6B:69:9E:87:19:21:BB:B0:F6:A7:74:70:AC:A3:76:2D:7D:48:A0:E6
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0185F5095675A132F6FA2ED4612CA3A81CED
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/a2mehxkhu7D2p3RwrKN2LX1IoOY.roa
Signing time: Fri 27 Jan 2023 21:01:47 +0000
ROA not before: Fri 27 Jan 2023 21:01:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 94.241.168.0/21 maxlen: 24
83.147.232.0/22 maxlen: 24
83.147.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Jun 2023 14:34:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f5:09:56:75:a1:32:f6:fa:2e:d4:61:2c:a3:a8:1c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 27 21:01:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b699e871921bbb0f6a77470aca3762d7d48a0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d0:54:a3:de:ac:d7:36:7f:9b:f2:11:3a:71:
0d:8f:9c:50:5e:76:03:4c:d2:00:51:aa:73:1b:50:
b3:e7:7c:f2:6a:dd:7d:6f:f3:98:94:ee:22:d0:c1:
ae:c7:1b:88:50:70:02:8d:3c:fd:c5:59:36:87:34:
5b:31:9e:a8:aa:86:4c:bf:5a:de:92:1d:34:07:25:
80:12:75:d2:da:5f:6d:2b:c1:43:4e:7a:ec:58:11:
13:d9:7f:ad:c2:45:16:55:91:7d:ad:98:66:db:45:
67:1c:54:12:0c:08:9c:74:6f:26:17:5a:5f:33:d7:
19:24:ae:ee:50:78:7f:d4:79:06:e0:83:f4:48:cb:
09:a1:72:63:06:c8:a9:85:a6:58:f5:36:a9:27:85:
a2:cd:62:8e:04:a7:72:1e:cb:66:0b:0b:af:14:e6:
36:9b:14:12:23:2b:7d:30:fc:d5:ac:54:78:4a:69:
9b:27:a5:6d:f3:54:c0:3b:f4:64:e4:97:c2:8d:ac:
f5:81:b3:e5:bf:d9:30:4b:75:05:98:27:7f:cb:54:
d0:d1:0e:81:58:29:21:c4:69:f6:10:34:59:b8:52:
46:26:fd:b6:84:e3:d2:e9:98:09:a0:d2:b4:07:18:
92:b3:2a:5c:39:0f:a6:a3:8c:60:e5:78:42:b0:c2:
38:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:69:9E:87:19:21:BB:B0:F6:A7:74:70:AC:A3:76:2D:7D:48:A0:E6
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/a2mehxkhu7D2p3RwrKN2LX1IoOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
83.147.248.0/22
94.241.168.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:e1:e5:4c:94:f4:d8:59:37:10:41:a0:37:1f:5f:e1:ee:15:
03:67:17:f5:7f:56:da:5b:9b:50:b7:08:a6:d4:3a:16:16:44:
5c:64:79:45:51:ad:a5:36:f1:0a:57:11:b4:5b:a1:d9:0d:ae:
b3:a8:be:0c:cd:2c:7b:cf:07:94:11:3c:5e:37:0f:e9:bb:41:
96:cd:03:5f:eb:fe:5f:65:1e:b8:9f:64:ab:bd:bd:7a:c0:5b:
44:76:ec:1b:47:7c:72:a3:83:af:54:f7:3c:5c:c8:e1:80:86:
08:a9:4d:d6:91:57:85:df:d6:62:00:29:2a:3a:dc:c2:88:08:
90:b4:9b:5f:7b:f3:99:85:6a:39:77:15:9e:d9:ff:a3:d8:b2:
01:16:9f:e9:3e:62:a0:1d:37:d7:a0:10:80:c0:db:99:c0:85:
8b:c2:be:8d:c0:65:6c:4b:07:76:f8:74:25:be:6f:e0:65:93:
0b:93:83:8e:ac:6c:e1:06:9e:23:8b:13:f4:b7:a1:db:49:15:
86:cf:cd:98:43:6c:a6:b1:cc:8a:69:c4:58:39:47:1f:3e:40:
e2:93:c5:31:8f:3d:29:65:dd:eb:63:60:fb:dc:a6:8d:4e:9a:
6a:a0:6e:3a:9e:27:7b:ed:04:dc:d2:54:55:eb:89:b1:12:53:
68:e0:aa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org