Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/V0O_ikIeQBCMMDPs6bi_f0VHA-A.roa
File: V0O_ikIeQBCMMDPs6bi_f0VHA-A.roa (raw, json)
Hash identifier: EybybRC16rsBkorrUFgb8CnGuZdYlX675LBRZTR+8I4=
Subject key identifier: 57:43:BF:8A:42:1E:40:10:8C:30:33:EC:E9:B8:BF:7F:45:47:03:E0
Certificate issuer: /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial: 01880C34DA51FBB081D6221E1C37497A9170
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/V0O_ikIeQBCMMDPs6bi_f0VHA-A.roa
Signing time: Thu 11 May 2023 19:06:10 +0000
ROA not before: Thu 11 May 2023 19:06:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20661
IP address blocks: 103.220.0.0/22 maxlen: 22
185.69.184.0/24 maxlen: 24
95.85.98.0/24 maxlen: 24
95.85.99.0/24 maxlen: 24
216.250.8.0/21 maxlen: 21
95.85.104.0/24 maxlen: 24
177.93.143.0/24 maxlen: 24
119.235.112.0/20 maxlen: 20
2a05:2180::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 14 May 2023 20:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0c:34:da:51:fb:b0:81:d6:22:1e:1c:37:49:7a:91:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Validity
Not Before: May 11 19:06:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5743bf8a421e40108c3033ece9b8bf7f454703e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:86:90:62:7b:fa:0c:b6:0a:79:40:90:d6:c8:
57:5b:35:40:7d:68:79:f2:06:3e:3a:a3:78:1d:90:
f8:0f:e6:9a:80:52:6f:27:fa:49:22:27:88:94:86:
7a:03:49:b1:76:c6:57:be:f5:5f:8f:27:68:cf:4e:
93:5a:c1:16:91:90:87:c8:f6:72:9f:82:3f:7a:cf:
fa:de:b3:35:ae:75:a4:3c:46:76:ec:56:54:ff:31:
3b:06:40:18:b8:fa:8d:0f:9b:a2:e0:05:32:47:af:
af:fd:dd:41:2a:38:c5:c9:2b:7d:69:ef:f9:f5:42:
92:2a:e9:0b:5c:b7:33:61:23:29:c1:99:24:b7:2d:
88:58:1f:00:8f:18:20:f7:6a:c5:e9:34:15:bf:37:
36:8d:ec:ed:51:18:a0:68:38:d5:84:0d:11:1c:94:
6d:34:67:ca:0b:03:54:cf:e6:80:99:10:0d:8c:7b:
05:36:44:81:58:e7:16:eb:9a:38:ef:3a:dd:42:b0:
cc:a7:42:13:7d:34:7a:0c:3e:f7:59:c9:86:d0:ef:
82:23:55:0f:af:0f:40:5f:32:eb:4a:95:85:0d:1b:
e3:d4:13:6c:85:65:12:81:d9:aa:aa:db:d3:fe:cd:
c8:eb:3b:f5:20:89:24:1b:dc:8e:7a:8f:3d:df:de:
b1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:43:BF:8A:42:1E:40:10:8C:30:33:EC:E9:B8:BF:7F:45:47:03:E0
X509v3 Authority Key Identifier:
keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/V0O_ikIeQBCMMDPs6bi_f0VHA-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.98.0/23
95.85.104.0/24
103.220.0.0/22
119.235.112.0/20
177.93.143.0/24
185.69.184.0/24
216.250.8.0/21
IPv6:
2a05:2180::/29
Signature Algorithm: sha256WithRSAEncryption
cb:ed:af:96:a4:95:a2:72:da:6b:dc:db:83:15:b7:a8:da:6c:
1d:37:14:58:34:2d:4f:56:3d:31:ea:d8:80:cd:43:87:b8:57:
70:ee:ff:02:e0:92:61:0b:20:06:de:f9:97:cd:1e:76:c3:1a:
74:11:07:22:dd:87:c0:55:40:f6:fc:28:37:58:1a:c2:0b:e1:
42:f4:66:28:c5:86:91:a5:78:95:1d:f9:73:ba:57:32:2b:34:
55:a4:f4:6f:c6:54:e1:f6:d4:2b:aa:45:7d:22:04:2e:7b:ae:
fb:a5:4b:11:79:d2:42:43:19:7e:cc:bd:de:35:04:9d:91:8e:
dc:c1:6f:0d:bb:ba:a3:19:b5:10:15:c7:8d:27:ac:25:05:6d:
8f:a5:86:a0:8d:da:45:af:45:51:68:4b:68:9e:02:1b:cd:82:
48:62:e3:e2:dd:4a:a6:44:0c:91:8f:65:73:09:aa:28:23:12:
95:11:b3:e0:99:5c:f9:0e:da:81:d4:02:1c:f9:7b:62:25:44:
b5:69:71:ac:62:84:b5:6d:2b:5d:e0:00:4d:0c:0c:b5:3e:9f:
eb:f7:68:0d:d2:e1:75:c2:30:fc:c2:39:5a:e8:be:c4:f8:c3:
43:6c:0c:32:09:77:85:00:05:0b:41:4e:46:e7:de:28:fa:ee:
98:03:6c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:00 2024 by rpki-client on console-fra.rpki-client.org