Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/uHrmp4q6rY-ealtriLWXNEz_7Ew.roa
File: uHrmp4q6rY-ealtriLWXNEz_7Ew.roa (raw, json)
Hash identifier: t63bfOufn2FzjtEKYG8btf6bEHE0aab1AhXg3Ki5mJY=
Subject key identifier: B8:7A:E6:A7:8A:BA:AD:8F:9E:6A:5B:6B:88:B5:97:34:4C:FF:EC:4C
Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial: 018A15C0170DB75FEBD0DB2B978532FD2C27
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/uHrmp4q6rY-ealtriLWXNEz_7Ew.roa
Signing time: Mon 21 Aug 2023 01:40:24 +0000
ROA not before: Mon 21 Aug 2023 01:40:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 80.73.243.0/24 maxlen: 32
5.44.248.0/24 maxlen: 32
45.67.4.0/22 maxlen: 32
137.59.4.0/22 maxlen: 32
92.119.168.0/22 maxlen: 32
185.72.240.0/22 maxlen: 32
46.254.105.0/24 maxlen: 32
46.16.32.0/24 maxlen: 32
2.58.76.0/22 maxlen: 32
213.173.60.0/22 maxlen: 32
Validation: Failed, certificate revoked on Wed 13 Sep 2023 21:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:15:c0:17:0d:b7:5f:eb:d0:db:2b:97:85:32:fd:2c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Validity
Not Before: Aug 21 01:40:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b87ae6a78abaad8f9e6a5b6b88b597344cffec4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4b:c2:b5:88:7e:67:45:93:8d:49:72:ee:8f:
8d:3c:a7:3f:33:79:c8:0b:20:2b:d3:5e:56:d9:c7:
54:5e:9f:f0:07:fa:6c:19:b2:f1:db:87:7c:55:1a:
cb:91:0f:54:30:7e:33:7c:b4:a7:17:46:10:76:33:
bb:74:64:4e:bd:b1:8b:1e:66:fe:df:bb:1c:85:2c:
79:cb:95:e6:42:03:6a:12:fb:9f:60:ab:18:95:83:
95:3d:04:f1:02:37:62:18:81:c9:2f:d2:8f:d6:47:
63:dc:a0:7d:3b:b7:e6:cd:c5:28:30:96:34:7d:69:
1a:64:7f:3e:c4:c8:28:5a:a7:ac:59:6e:f6:d8:3f:
92:42:da:4f:80:75:1e:f5:0d:f0:d1:be:12:bd:9d:
a1:ee:4c:07:3a:15:95:d9:f0:02:e8:84:bc:ec:7f:
fe:ac:9a:34:10:33:c0:24:0b:1e:ec:89:ee:79:a0:
f0:d6:da:5b:1c:e1:64:8a:44:ef:89:e4:5b:ce:64:
c8:fd:65:9e:06:0e:47:83:8c:75:5e:6d:5e:01:e0:
19:b9:4d:e1:61:be:f4:2c:cc:68:7d:c0:9a:e5:b4:
f4:f7:5c:0a:ed:05:63:42:6a:36:c2:d8:bc:2d:c1:
ed:9f:2f:ee:a6:e6:80:ae:3e:b6:a1:5d:29:6a:17:
b0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7A:E6:A7:8A:BA:AD:8F:9E:6A:5B:6B:88:B5:97:34:4C:FF:EC:4C
X509v3 Authority Key Identifier:
keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/uHrmp4q6rY-ealtriLWXNEz_7Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.76.0/22
5.44.248.0/24
45.67.4.0/22
46.16.32.0/24
46.254.105.0/24
80.73.243.0/24
92.119.168.0/22
137.59.4.0/22
185.72.240.0/22
213.173.60.0/22
Signature Algorithm: sha256WithRSAEncryption
27:18:3e:d5:9a:f2:00:3e:6f:20:1a:47:98:86:c7:dc:56:7d:
0c:65:f7:c3:4c:76:5d:b6:0f:8b:08:4c:a8:55:f8:82:09:a7:
da:65:90:2d:95:9e:0d:81:17:32:14:7a:f3:6d:95:76:7c:fc:
1b:e1:ee:09:69:07:e9:aa:ed:7d:d8:a7:4f:37:5e:f2:d7:b3:
b9:35:76:c2:81:c1:ff:3c:42:00:53:0f:25:9e:d1:6e:b4:e8:
c8:3b:35:53:62:5a:69:21:c7:00:71:e4:fe:fc:6f:fb:b9:b0:
f0:d5:6e:56:a6:22:9d:cc:e9:86:60:df:93:2f:b3:b7:e7:d4:
a1:68:2f:2d:f5:de:96:fb:a5:0b:6c:17:d3:a8:85:38:6e:20:
2b:18:f0:d9:ba:68:3c:56:a4:fd:1a:9a:9a:72:c8:12:4a:87:
ca:a2:29:bc:dc:a5:93:89:6a:0c:b8:64:9e:75:53:e7:c5:48:
4d:ae:31:a6:7e:70:c3:4b:05:55:a3:5e:1f:09:42:b5:cb:c0:
91:67:c1:e2:3c:32:27:01:af:e9:63:5d:73:1e:29:84:fe:b4:
ef:02:93:c1:7b:59:59:7b:2b:e5:0c:fb:55:42:42:a3:df:10:
af:62:1a:c6:65:09:a2:ca:5e:10:1b:c5:02:ee:a5:1c:2b:47:
a2:e1:3f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:53 2024 by rpki-client on console-ams.rpki-client.org