Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/pAwYWjd-cEr_rzxhLnWq1ud8hXY.roa
File: pAwYWjd-cEr_rzxhLnWq1ud8hXY.roa (raw, json)
Hash identifier: 2nWgVUHD5aJwH4/70QHbXc9GdJr2IgmaYCWmxfQwGts=
Subject key identifier: A4:0C:18:5A:37:7E:70:4A:FF:AF:3C:61:2E:75:AA:D6:E7:7C:85:76
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 018F1B85D5FC762642F6CAF9779D168900A0
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/pAwYWjd-cEr_rzxhLnWq1ud8hXY.roa
Signing time: Fri 26 Apr 2024 17:48:26 +0000
ROA not before: Fri 26 Apr 2024 17:48:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62651
IP address blocks: 176.67.82.0/24 maxlen: 24
176.67.87.0/24 maxlen: 24
2a05:e9c0:1000::/40 maxlen: 40
2a05:e9c0:1400::/40 maxlen: 40
2a05:e9c0:1800::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 01 May 2024 16:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1b:85:d5:fc:76:26:42:f6:ca:f9:77:9d:16:89:00:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Apr 26 17:48:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a40c185a377e704affaf3c612e75aad6e77c8576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a9:97:93:dc:ae:f5:4a:51:4c:9b:03:90:29:
05:50:62:26:7a:cc:1e:66:57:c6:14:15:64:a0:8d:
07:3c:44:88:46:ee:64:1d:a3:20:ca:54:59:e5:ed:
99:d6:87:0f:f8:47:b8:66:2f:54:f1:a0:a7:9d:79:
ed:2e:72:46:02:16:8d:68:26:a1:81:59:6e:ef:3a:
22:ba:17:8d:ac:56:f7:39:97:86:e2:04:05:75:85:
d8:e5:dd:64:ec:3e:38:e2:58:18:08:6a:e6:1c:fa:
81:24:29:a6:35:9e:9f:57:7c:4d:9b:b5:67:32:99:
7d:05:35:d9:0e:c9:6d:74:e1:99:e0:a6:e5:c2:44:
7d:aa:0a:81:d7:42:a1:80:b2:37:48:c5:f5:62:60:
6d:eb:a0:74:4f:27:2a:b0:5a:36:00:41:46:0e:97:
52:98:87:98:63:42:aa:68:92:70:20:12:97:74:2c:
7a:22:20:b0:75:1b:d0:6f:a4:75:28:76:65:1e:98:
16:ce:ce:d3:3b:cd:38:15:86:8d:02:20:da:84:04:
db:75:a7:2e:01:96:00:ee:ef:8a:94:28:80:b7:45:
5d:7b:6a:0d:ea:1e:a0:70:df:a7:cf:6e:fd:d6:ed:
6d:84:3f:5f:69:4f:29:ff:f9:b9:eb:9d:b6:4c:c6:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0C:18:5A:37:7E:70:4A:FF:AF:3C:61:2E:75:AA:D6:E7:7C:85:76
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/pAwYWjd-cEr_rzxhLnWq1ud8hXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.67.82.0/24
176.67.87.0/24
IPv6:
2a05:e9c0:1000::/40
2a05:e9c0:1400::/40
2a05:e9c0:1800::/40
Signature Algorithm: sha256WithRSAEncryption
7c:03:2b:ba:4a:e1:6c:de:bd:68:1f:17:d2:fe:14:9c:02:bd:
c6:16:67:89:6b:15:15:73:07:51:67:9f:b9:da:24:48:5e:41:
47:c1:b0:87:2d:fe:6e:5b:78:58:0d:c0:9d:c5:3e:02:73:78:
55:28:97:8b:14:c1:19:cd:c2:17:ca:a8:fa:63:d2:a3:be:b7:
69:b2:76:42:9a:03:85:10:02:f0:4a:4f:66:22:63:cf:af:d8:
97:51:8f:7d:91:f1:de:5d:ad:e6:3a:3d:4c:8c:63:16:8a:02:
72:51:a6:12:a0:1c:8a:2d:cd:36:cd:bd:13:76:af:8b:e0:ca:
bd:65:db:ad:96:74:47:1b:3d:63:ec:30:b9:63:7a:86:a5:d1:
5a:74:e2:8b:09:c7:96:1f:39:1b:ba:f9:7b:67:37:4b:6c:e8:
67:75:a6:be:f3:24:91:3a:32:f3:81:a4:ed:cb:41:e8:b8:76:
7f:75:ff:5b:83:85:95:00:1c:6a:aa:0d:36:41:84:e6:89:08:
f2:35:8a:a5:2d:c7:db:fa:a7:bf:88:c5:79:28:e6:61:58:3a:
7d:a5:d3:a7:24:2a:8b:0e:54:83:05:04:a8:c1:18:3e:91:67:
f3:8b:b8:af:df:de:10:ce:a0:35:bb:8d:29:70:3e:d7:b1:23:
3d:8b:da:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:13 2024 by rpki-client on console-fra.rpki-client.org