Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/j0DVtKBaf6eR-KrQ3MiGuVASro0.roa
File: j0DVtKBaf6eR-KrQ3MiGuVASro0.roa (raw, json)
Hash identifier: xVa3fCGuVKL1bfDwMnCNyV+uMikb3X8qXe1jgircTMA=
Subject key identifier: 8F:40:D5:B4:A0:5A:7F:A7:91:F8:AA:D0:DC:C8:86:B9:50:12:AE:8D
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 0187FFAF93AB61EED9FFECF36870A8082C25
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/j0DVtKBaf6eR-KrQ3MiGuVASro0.roa
Signing time: Tue 09 May 2023 08:45:09 +0000
ROA not before: Tue 09 May 2023 08:45:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202553
IP address blocks: 147.181.12.0/22 maxlen: 24
147.181.16.0/23 maxlen: 24
147.181.32.0/22 maxlen: 24
147.181.36.0/22 maxlen: 24
147.181.44.0/22 maxlen: 24
147.181.48.0/22 maxlen: 22
147.181.4.0/22 maxlen: 24
147.181.8.0/22 maxlen: 24
2a04:9a00:100e::/48 maxlen: 48
2a04:9a00:1002::/48 maxlen: 48
2a04:9a00:1003::/48 maxlen: 48
2a04:9a00:1006::/48 maxlen: 48
2a04:9a00:1001::/48 maxlen: 48
2a04:9a00:1007::/48 maxlen: 48
2a04:9a00:1005::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:af:93:ab:61:ee:d9:ff:ec:f3:68:70:a8:08:2c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: May 9 08:45:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f40d5b4a05a7fa791f8aad0dcc886b95012ae8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:5f:07:0b:fa:e3:51:6e:7b:da:c9:0a:84:
ac:68:7f:2d:eb:87:9e:d0:9d:62:10:62:d1:49:ba:
21:fc:76:b0:fa:3f:7d:f2:32:70:67:04:8a:b8:bc:
73:d8:b6:1a:d1:83:9a:02:71:23:01:90:58:fc:4c:
55:fe:21:1d:e9:9c:ad:ac:0a:12:87:67:7a:bf:75:
7e:c8:91:4d:1a:91:bd:31:06:94:23:8c:d8:7a:05:
59:e8:b5:25:7a:85:14:23:26:3a:4f:5f:f5:1d:91:
c7:07:e0:71:17:02:74:3e:71:ba:4d:a0:e3:97:ef:
a0:52:71:2c:dc:86:e9:82:3f:aa:68:57:07:b6:b3:
3f:bb:09:4c:60:35:83:eb:8e:a0:25:d8:3a:4c:23:
53:b8:97:f6:ab:3b:f5:55:6c:cf:2e:c7:2b:78:30:
b5:bd:3e:4b:d9:10:23:b0:33:81:54:d5:8f:a3:6e:
a3:de:3d:89:ce:b5:19:cb:a5:62:d6:6b:17:db:66:
11:6a:1c:4f:a4:a1:45:58:a8:3e:c9:68:ac:b6:9a:
ad:b2:0c:6f:cd:70:0a:fc:ed:df:22:60:fe:e1:13:
71:00:fa:48:31:e3:53:d3:0a:b1:bd:ea:d4:b4:e0:
34:14:0f:58:f0:e4:58:c3:14:9b:91:ff:3e:80:01:
da:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:40:D5:B4:A0:5A:7F:A7:91:F8:AA:D0:DC:C8:86:B9:50:12:AE:8D
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/j0DVtKBaf6eR-KrQ3MiGuVASro0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.181.4.0-147.181.17.255
147.181.32.0/21
147.181.44.0-147.181.51.255
IPv6:
2a04:9a00:1001::-2a04:9a00:1003:ffff:ffff:ffff:ffff:ffff
2a04:9a00:1005::-2a04:9a00:1007:ffff:ffff:ffff:ffff:ffff
2a04:9a00:100e::/48
Signature Algorithm: sha256WithRSAEncryption
66:a0:f0:56:f6:2f:d6:cc:00:2e:69:44:c4:dd:c6:50:1a:1c:
93:7d:91:81:88:2f:04:7a:28:1a:06:24:08:5d:0a:2c:df:45:
7c:a8:ba:34:23:ae:9f:e8:8d:38:44:30:0e:97:66:c6:71:98:
e7:21:47:06:16:37:61:d1:b4:fd:48:37:c1:f4:a4:dc:c8:b0:
38:53:2c:25:57:c3:64:f3:b0:ec:61:ad:39:d2:de:15:69:b3:
ba:0d:cc:33:6f:a7:e1:f5:30:6c:53:31:71:b8:1a:50:21:ca:
73:ce:58:cd:88:77:95:3b:da:b4:03:0c:ed:c3:7d:ab:27:86:
7e:fc:aa:ee:3a:bb:cd:61:40:3c:be:d7:54:01:62:fc:94:cd:
ec:2c:c4:69:0f:0f:15:eb:87:cc:97:76:ee:36:c2:85:cb:21:
2c:00:2c:20:67:81:43:c5:73:6d:f6:ee:35:ca:52:a0:4d:cc:
3c:4d:61:16:77:4a:a2:34:fe:4f:0d:77:f4:33:65:d4:2d:01:
a2:f0:ff:0c:bd:5b:a9:84:27:34:92:8c:88:8e:1d:9a:02:e4:
6c:c9:85:62:3b:5f:af:ee:0f:c4:1b:de:62:3c:95:e3:b3:9b:
36:3d:3d:c6:82:22:12:32:8a:20:44:54:2f:1d:44:25:bf:f1:
9a:17:38:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:49 2024 by rpki-client on console-ams.rpki-client.org