Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/_ui5KAsdui0gV9RnrPKqR8QfuZA.roa
File: _ui5KAsdui0gV9RnrPKqR8QfuZA.roa (raw, json)
Hash identifier: nGvZ8Rm/+3vz0NRNJX8svFJtLmhVLHfF3DHmguFqPP4=
Subject key identifier: FE:E8:B9:28:0B:1D:BA:2D:20:57:D4:67:AC:F2:AA:47:C4:1F:B9:90
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 01856FB119BB2C76D43384EB3CDEB1B3E3AB
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/_ui5KAsdui0gV9RnrPKqR8QfuZA.roa
Signing time: Sun 01 Jan 2023 23:35:55 +0000
ROA not before: Sun 01 Jan 2023 23:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42560
IP address blocks: 185.58.92.0/22 maxlen: 22
77.77.195.0/24 maxlen: 24
77.77.192.0/18 maxlen: 24
5.43.64.0/18 maxlen: 18
146.255.128.0/19 maxlen: 19
77.77.216.0/22 maxlen: 22
77.221.0.0/19 maxlen: 19
185.24.208.0/22 maxlen: 22
185.18.152.0/22 maxlen: 22
185.15.64.0/22 maxlen: 22
37.208.32.0/21 maxlen: 21
93.180.96.0/19 maxlen: 19
178.209.0.0/19 maxlen: 19
31.185.112.0/20 maxlen: 20
141.170.192.0/20 maxlen: 20
185.48.172.0/22 maxlen: 22
77.239.0.0/19 maxlen: 19
77.78.192.0/19 maxlen: 24
77.78.192.0/18 maxlen: 18
109.237.32.0/20 maxlen: 20
185.6.104.0/22 maxlen: 22
178.236.80.0/20 maxlen: 20
77.78.224.0/19 maxlen: 19
128.65.104.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:19:bb:2c:76:d4:33:84:eb:3c:de:b1:b3:e3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Jan 1 23:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fee8b9280b1dba2d2057d467acf2aa47c41fb990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:11:e6:b0:4b:8a:8d:4f:4d:fc:06:92:f2:a2:
bd:c5:f1:71:84:2d:cc:42:8a:f8:f9:5b:b5:c2:1c:
c2:c8:11:d9:99:b7:bd:50:8f:98:25:ab:eb:d7:05:
3c:8a:f4:38:32:55:e6:76:e1:5c:05:ed:ca:91:9b:
24:83:15:e2:e3:b1:be:c7:82:28:b7:9a:99:06:9b:
05:e8:9c:9f:1d:6d:b9:a6:9a:8b:33:06:9a:f6:6e:
e3:22:91:9c:de:6b:05:f7:fe:2a:bf:55:cd:16:66:
1c:21:20:06:4b:bc:27:b9:9c:3d:8c:6e:66:f8:6c:
94:49:40:48:bf:79:14:3c:27:a5:e0:47:ad:70:e8:
88:32:67:d6:2b:8d:dd:58:a6:e9:13:d8:77:e0:58:
fa:38:05:ba:de:40:52:08:ba:5d:93:f5:92:38:7c:
14:9d:01:25:33:d8:69:8e:cb:da:09:4b:fd:f1:82:
23:de:ad:7b:fb:43:fe:3d:4a:b4:05:a2:35:08:65:
97:bf:27:b7:70:4d:77:f4:d5:bc:fc:42:76:f9:f2:
1f:c5:30:de:76:cd:9d:56:e0:27:a4:ff:e6:47:79:
27:d4:fb:8e:1a:87:06:2b:ef:03:b4:db:a1:d1:6e:
9c:98:a7:43:05:4d:ef:e7:9e:d9:e8:58:eb:cc:38:
37:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E8:B9:28:0B:1D:BA:2D:20:57:D4:67:AC:F2:AA:47:C4:1F:B9:90
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/_ui5KAsdui0gV9RnrPKqR8QfuZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.43.64.0/18
31.185.112.0/20
37.208.32.0/21
77.77.192.0/18
77.78.192.0/18
77.221.0.0/19
77.239.0.0/19
93.180.96.0/19
109.237.32.0/20
128.65.104.0/21
141.170.192.0/20
146.255.128.0/19
178.209.0.0/19
178.236.80.0/20
185.6.104.0/22
185.15.64.0/22
185.18.152.0/22
185.24.208.0/22
185.48.172.0/22
185.58.92.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:e4:44:78:9e:e6:fb:2c:a9:d3:55:3c:7e:b8:89:cd:b6:1a:
6c:03:4e:4d:ac:44:7c:17:f3:bc:c5:76:55:64:6a:6f:5a:2b:
f8:25:f4:77:95:5c:c8:74:ce:ac:89:e9:04:d1:15:60:95:31:
b1:40:9d:75:59:e5:c6:3e:3e:f3:a1:e7:26:7e:ac:f4:8d:25:
94:b2:b4:f3:e8:6c:5a:c2:aa:d6:5c:f4:ce:60:5a:12:0e:36:
2e:49:04:c6:af:01:49:3c:a3:99:e4:fe:7f:2e:16:16:bf:bf:
ab:c9:de:a5:0f:cc:d7:70:df:3b:2a:6b:6d:4c:36:de:12:6e:
64:d8:e1:73:a5:d2:2b:72:69:5d:a6:27:bf:01:69:ff:de:8c:
74:3d:5c:66:02:e8:87:d1:7a:df:33:38:1e:66:10:66:54:cd:
fe:9a:84:9c:34:c8:f5:1b:2e:41:47:9c:28:22:c4:67:02:e5:
36:65:d2:2d:6a:99:fb:c8:8a:8e:13:66:f1:32:d2:30:ee:68:
45:bd:90:a0:f9:6c:e0:46:8c:1e:a4:7f:63:af:74:2f:ae:4d:
9e:df:b6:4c:50:7c:49:2d:b8:6e:98:a8:ec:79:c4:54:c9:49:
37:2f:43:6f:0f:7c:8b:0e:97:dc:d0:4d:e8:d6:ed:ed:68:e6:
cc:a1:38:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:29 2024 by rpki-client on console-fra.rpki-client.org