Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/DOo4pr_kmYKbHwqt7pvVKYRRzHQ.roa
File: DOo4pr_kmYKbHwqt7pvVKYRRzHQ.roa (raw, json)
Hash identifier: s87F0qdfjTCr3VWaLFSPSusqZcY0dhOGm+9kHlxXQoo=
Subject key identifier: 0C:EA:38:A6:BF:E4:99:82:9B:1F:0A:AD:EE:9B:D5:29:84:51:CC:74
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018E381F64378D13D6178D6CEC20D8063A96
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/DOo4pr_kmYKbHwqt7pvVKYRRzHQ.roa
Signing time: Wed 13 Mar 2024 14:02:45 +0000
ROA not before: Wed 13 Mar 2024 14:02:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15723
IP address blocks: 62.217.129.0/24 maxlen: 24
62.217.131.0/24 maxlen: 24
62.217.134.0/24 maxlen: 24
62.217.138.0/24 maxlen: 24
62.217.141.0/24 maxlen: 24
62.217.142.0/24 maxlen: 24
62.217.146.0/24 maxlen: 24
62.217.147.0/24 maxlen: 24
62.217.148.0/24 maxlen: 24
62.217.149.0/24 maxlen: 24
62.217.151.0/24 maxlen: 24
62.217.156.0/24 maxlen: 24
62.217.157.0/24 maxlen: 24
62.217.158.0/24 maxlen: 24
62.217.159.0/24 maxlen: 24
164.215.97.0/24 maxlen: 24
185.81.217.0/24 maxlen: 24
188.64.8.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 15 Mar 2024 07:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:1f:64:37:8d:13:d6:17:8d:6c:ec:20:d8:06:3a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Mar 13 14:02:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cea38a6bfe499829b1f0aadee9bd5298451cc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:6d:bf:e9:b9:65:7c:9e:7d:85:1d:a0:99:
29:09:23:fc:da:dd:3e:36:37:08:8a:49:bb:fa:f2:
36:eb:54:13:54:a1:fa:83:ac:4d:49:3d:d9:fc:65:
26:04:f8:7b:5e:23:d6:dc:ed:de:e0:4d:ad:4d:41:
cd:ab:0d:b1:39:09:c3:e9:85:dd:9d:c2:5e:18:76:
a1:4b:c8:1b:b0:70:70:81:b7:6e:cb:54:e6:3d:29:
b0:59:80:b6:85:b0:dc:73:dc:15:54:c2:a8:20:20:
00:59:a0:4f:9b:94:16:5e:33:5a:d6:11:94:e6:cd:
73:7e:d4:72:19:4c:ca:17:6b:29:13:dc:7a:10:1b:
20:1e:87:5c:91:a6:dd:c1:47:10:e5:11:a1:30:5b:
0b:8b:6a:9f:9d:dc:e2:ce:38:65:56:2b:2f:fd:23:
cf:ef:e9:08:ab:63:7e:3a:e5:4f:6b:7a:6d:6e:aa:
5a:5b:c5:c6:b1:c9:b2:ac:f8:93:d1:1c:c7:37:72:
fb:5e:e4:11:03:ca:e0:47:78:39:b0:12:1c:ab:ca:
f0:fd:dd:1b:f3:72:2c:01:9b:cc:69:cf:37:b2:ba:
3d:d8:c7:c3:11:26:f4:a5:94:39:94:41:0a:82:ba:
a5:72:fc:3c:50:7c:84:a7:25:51:ad:1b:0f:36:a3:
37:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EA:38:A6:BF:E4:99:82:9B:1F:0A:AD:EE:9B:D5:29:84:51:CC:74
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/DOo4pr_kmYKbHwqt7pvVKYRRzHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.217.129.0/24
62.217.131.0/24
62.217.134.0/24
62.217.138.0/24
62.217.141.0-62.217.142.255
62.217.146.0-62.217.149.255
62.217.151.0/24
62.217.156.0/22
164.215.97.0/24
185.81.217.0/24
188.64.8.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:f7:54:4a:28:b2:3d:f1:8c:5d:6c:e7:9a:d7:a3:93:8e:84:
e4:7f:33:6e:9c:de:00:e0:d4:6a:2d:44:ea:d4:bf:61:cf:00:
42:ec:40:25:50:a2:de:30:dd:89:42:14:ec:eb:d3:b1:a5:df:
ee:66:0a:56:b3:d9:01:cf:f6:e0:79:3a:7a:72:96:43:45:c4:
07:78:60:43:d2:ec:40:b4:55:59:8a:c4:0e:72:1e:0e:48:bc:
e7:19:4d:a8:eb:0d:91:e5:8f:b3:a0:ab:98:7f:06:73:d6:e5:
14:ac:ba:e9:99:69:a7:e8:f8:8b:18:c2:56:30:8e:99:f8:eb:
54:03:ed:66:ca:a4:50:b1:a4:38:3b:b4:5b:4e:52:98:7f:6c:
08:bb:4f:b0:d5:b6:6f:32:33:f0:2a:c6:01:53:15:6b:e7:3c:
59:2c:5d:8e:24:55:22:7a:d9:89:b1:20:fc:a8:0e:da:2e:19:
9f:40:da:e7:b8:7f:97:8f:a2:5f:1d:36:58:43:c8:d9:d5:2c:
46:24:e8:6e:15:e0:29:3b:71:99:94:89:bf:c1:24:7f:ca:53:
f0:80:cb:03:64:19:e5:d4:11:09:fb:ec:aa:6b:8b:d2:08:a2:
99:67:d4:85:57:fb:da:01:31:63:e9:c3:cc:2b:56:a1:a4:35:
c7:ff:b4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 10:42:52 2024 by rpki-client on console-fra.rpki-client.org