Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/Y4GrLM3KKpQ7xdH_bOC6xd0Odyg.roa
File: Y4GrLM3KKpQ7xdH_bOC6xd0Odyg.roa (raw, json)
Hash identifier: GP+iXeKogQXrrDdNbLnYeiuyf+q6x/SAEU8BO8R8RC4=
Subject key identifier: 63:81:AB:2C:CD:CA:2A:94:3B:C5:D1:FF:6C:E0:BA:C5:DD:0E:77:28
Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial: 018FE3981BB621533F21C5C77AA86FDCC402
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/Y4GrLM3KKpQ7xdH_bOC6xd0Odyg.roa
Signing time: Tue 04 Jun 2024 14:12:27 +0000
ROA not before: Tue 04 Jun 2024 14:12:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210312
IP address blocks: 147.189.216.0/21 maxlen: 21
193.5.16.0/22 maxlen: 22
2a0d:3dc0::/29 maxlen: 29
2a0d:3dc1::/32 maxlen: 48
Validation: Failed, certificate revoked on Sat 22 Jun 2024 17:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e3:98:1b:b6:21:53:3f:21:c5:c7:7a:a8:6f:dc:c4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Validity
Not Before: Jun 4 14:12:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6381ab2ccdca2a943bc5d1ff6ce0bac5dd0e7728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:ca:85:35:fe:4e:2c:fb:3e:42:22:5a:b9:
48:1b:20:f3:84:db:a6:8c:1a:0f:dc:9e:ad:16:a2:
8b:63:a3:63:e7:50:3c:16:51:72:a7:42:9f:80:46:
9f:33:56:0f:ed:09:a7:e8:bf:9a:67:ea:18:35:81:
b3:13:83:ac:ad:d5:27:30:52:db:1a:8b:61:68:7a:
ad:ca:d5:2f:de:b7:1b:8b:63:cd:ec:2e:82:af:ba:
5b:21:3b:ba:54:63:bf:1d:ee:06:8b:b1:45:40:64:
f8:ba:c0:6f:86:50:90:34:6d:d6:fc:13:c5:a6:54:
bf:cf:71:f1:40:05:e2:e2:62:c8:0c:98:d7:a2:3a:
c2:63:00:d5:f7:9f:25:d7:16:7c:16:3f:e0:27:0a:
a8:0e:c9:5c:a9:bf:5f:ed:df:29:f1:8c:32:2a:dc:
ac:8f:a2:9b:39:ac:d4:7e:b6:ce:4b:20:e8:c3:b3:
97:c4:c5:db:90:48:c2:d1:bd:b9:f4:eb:87:f5:c9:
2c:c5:e4:ed:ec:90:51:ec:a1:a2:5d:ce:c2:ae:f6:
ac:f3:62:aa:ea:2d:81:48:97:07:35:2a:61:47:08:
86:e7:ce:8b:a1:51:5f:7c:03:36:6f:e2:04:a6:d6:
2e:f2:75:3d:b6:69:ad:4f:32:55:cf:d4:c0:12:8b:
92:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:81:AB:2C:CD:CA:2A:94:3B:C5:D1:FF:6C:E0:BA:C5:DD:0E:77:28
X509v3 Authority Key Identifier:
keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/Y4GrLM3KKpQ7xdH_bOC6xd0Odyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.216.0/21
193.5.16.0/22
IPv6:
2a0d:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
43:68:35:c7:14:47:1f:35:17:fb:22:56:98:0f:da:69:6b:5f:
be:a7:e9:e4:61:06:cd:24:ee:f8:e6:55:48:ba:33:52:11:be:
4e:ce:3f:dd:59:9b:0c:07:36:c7:85:a0:e9:24:eb:30:1a:88:
84:cc:b0:ca:48:eb:cf:03:62:9d:50:f4:0d:e1:07:b3:29:b3:
d8:74:21:8c:2e:48:ad:fc:68:d1:17:b1:97:64:e9:1a:44:91:
47:a6:80:e0:c5:8d:93:60:c6:6d:47:d4:65:51:c4:ef:fe:0a:
9b:03:d8:77:aa:2f:f3:d5:7f:fe:c6:dc:dd:1c:46:9d:da:52:
7c:80:e2:55:82:58:0a:20:bb:82:92:10:e1:63:60:43:66:64:
f6:49:69:17:46:92:a2:51:dc:e6:6a:54:a1:e3:0f:36:6d:a6:
f0:48:fe:0b:c5:be:21:07:9d:20:da:2f:27:d6:d8:f9:dc:b6:
a1:e4:43:80:b7:66:93:75:c3:55:cd:68:d8:db:ad:e9:b1:41:
5e:fb:38:35:e3:1d:45:96:c9:17:45:a2:20:25:9e:e5:c8:c0:
e8:84:b8:4a:a8:47:7b:53:90:53:b4:2f:33:b0:df:4d:a0:dc:
5f:95:4a:8b:40:34:5f:47:10:82:b0:4c:84:a2:5a:f4:e3:ed:
bb:97:6e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 21:01:09 2024 by rpki-client on console-ams.rpki-client.org