Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/4WW7FKRwAGEhWydWR7ZIXtUphD0.roa
File: 4WW7FKRwAGEhWydWR7ZIXtUphD0.roa (raw, json)
Hash identifier: 86jo9X0OrW5MewgXSJ4aNprPUXaX7v7zRCgp0sKbY6w=
Subject key identifier: E1:65:BB:14:A4:70:00:61:21:5B:27:56:47:B6:48:5E:D5:29:84:3D
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0185710C332FB0FCF6E401F0E6A3570A97EB
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/4WW7FKRwAGEhWydWR7ZIXtUphD0.roa
Signing time: Mon 02 Jan 2023 05:55:02 +0000
ROA not before: Mon 02 Jan 2023 05:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46450
IP address blocks: 162.218.95.0/24 maxlen: 24
63.246.150.0/24 maxlen: 24
94.154.183.0/24 maxlen: 24
2a07:c6c0:9::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:33:2f:b0:fc:f6:e4:01:f0:e6:a3:57:0a:97:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 05:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e165bb14a4700061215b275647b6485ed529843d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:5f:6a:4e:7e:78:7e:45:0f:75:e7:3d:e0:
81:34:d7:2d:32:93:fd:75:9d:d2:c2:4d:6c:48:ad:
b5:ab:09:64:3c:7c:f0:17:99:15:92:5c:15:bf:28:
c5:ca:35:68:06:84:b8:94:ee:74:50:34:a9:94:4f:
3f:79:ab:01:bf:ea:fd:80:c3:f7:33:0f:6a:ce:39:
3e:0e:48:0f:6a:bd:c3:eb:71:8a:4c:25:10:71:09:
8b:0c:55:54:2a:6e:0f:5a:90:02:ec:04:6f:ce:cd:
6c:b6:59:48:98:1c:af:4b:01:0d:eb:7d:39:d7:06:
51:59:9b:c2:1e:f9:b7:9d:87:cc:3d:9b:ee:d1:d5:
47:a5:fc:fd:ea:27:a3:0d:69:a9:77:47:21:10:9c:
00:7c:ba:39:11:a8:14:46:40:b9:63:35:31:10:41:
b3:0b:78:1d:6e:e9:5b:c0:57:fc:50:56:23:18:52:
a8:f6:76:62:9b:ca:00:ac:8e:a0:f7:2a:da:82:ef:
1c:f0:49:8d:25:73:e8:c2:df:69:23:a1:6c:b2:43:
ef:14:05:32:73:a3:f5:c4:c9:8f:55:64:05:7c:af:
9a:17:21:1c:bf:51:44:06:c0:ac:c5:2d:1c:10:3f:
52:f9:d9:da:20:3f:aa:68:5d:e9:69:0d:69:d2:43:
b5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:65:BB:14:A4:70:00:61:21:5B:27:56:47:B6:48:5E:D5:29:84:3D
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/4WW7FKRwAGEhWydWR7ZIXtUphD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.246.150.0/24
94.154.183.0/24
162.218.95.0/24
IPv6:
2a07:c6c0:9::/48
Signature Algorithm: sha256WithRSAEncryption
25:f1:05:be:61:ee:48:82:be:be:34:0d:1a:66:aa:43:97:e9:
86:57:4f:c2:89:28:fc:8d:7b:d6:21:ba:3b:ab:c0:3b:3b:e2:
40:21:92:e1:3d:6f:c0:81:76:de:d1:54:9d:93:c3:8b:fc:71:
e0:4f:17:e2:4a:62:63:6b:3c:91:bc:02:b4:6a:a1:99:02:69:
a3:84:d3:fe:fc:82:92:15:b3:d5:f1:c7:61:7a:19:b4:08:3a:
66:36:a2:4c:d7:3d:18:b6:94:66:63:13:f4:c6:65:b7:79:b5:
08:60:71:42:d6:1b:ba:2e:3c:af:ee:56:2e:0a:3c:4c:4f:60:
36:54:20:ac:49:52:7f:ae:17:c5:83:41:5d:b7:e0:b2:b2:68:
96:73:3f:78:17:b3:d9:a0:99:66:66:54:ac:70:b1:b5:9a:6f:
8d:87:ab:d1:d4:ff:f6:a7:49:1b:ce:d0:da:51:37:6c:3a:e1:
74:fe:fd:9e:77:1c:59:2d:d4:f3:c7:92:e6:62:12:93:cf:29:
59:cb:f2:a4:8d:c7:ca:0b:a4:ac:6e:57:1c:d4:d5:30:6f:33:
63:2b:0b:6b:4b:91:15:de:4c:2d:ff:b6:2c:18:5a:a3:47:05:
70:62:79:dc:34:8a:48:d6:4f:da:d3:dc:75:35:d8:9b:52:e1:
8e:11:9c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:39 2024 by rpki-client on console-ams.rpki-client.org