Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/ECRzwmbwIyVN9ADEfdD6G18ALUw.roa
File: ECRzwmbwIyVN9ADEfdD6G18ALUw.roa (raw, json)
Hash identifier: WH8wX2DS6wrKkXho6OG1Kohp/eoQB5QeAOscsnh1n/g=
Subject key identifier: 10:24:73:C2:66:F0:23:25:4D:F4:00:C4:7D:D0:FA:1B:5F:00:2D:4C
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01856E14215F49611A56B1326A0AC888E8D1
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/ECRzwmbwIyVN9ADEfdD6G18ALUw.roa
Signing time: Sun 01 Jan 2023 16:04:51 +0000
ROA not before: Sun 01 Jan 2023 16:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47952
IP address blocks: 194.56.186.0/24 maxlen: 24
194.56.185.0/24 maxlen: 24
194.56.184.0/24 maxlen: 24
194.56.187.0/24 maxlen: 24
212.103.38.0/24 maxlen: 24
212.103.37.0/24 maxlen: 24
212.103.36.0/24 maxlen: 24
212.103.39.0/24 maxlen: 24
193.138.172.0/24 maxlen: 24
193.138.175.0/24 maxlen: 24
193.138.174.0/24 maxlen: 24
193.138.173.0/24 maxlen: 24
81.90.177.0/24 maxlen: 24
81.90.176.0/24 maxlen: 24
81.90.179.0/24 maxlen: 24
81.90.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:21:5f:49:61:1a:56:b1:32:6a:0a:c8:88:e8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 16:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=102473c266f023254df400c47dd0fa1b5f002d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:f2:cb:8b:49:91:71:6d:99:4f:2b:15:27:
63:b6:cf:38:90:c9:f3:86:95:ac:7e:e6:2b:1b:7f:
df:2d:38:0a:c6:1e:32:90:e8:6c:0e:63:51:85:cb:
da:e7:60:20:38:ab:52:b0:e5:7f:be:89:74:fb:07:
45:17:b0:89:4a:74:bf:58:d0:9b:03:43:9f:ef:4d:
89:f8:87:06:2f:3f:c2:48:5b:a3:d4:a6:5f:13:74:
82:da:2f:31:bb:28:10:7b:62:f9:ea:87:ee:1c:c5:
9a:22:aa:b9:f3:18:13:66:7f:4e:21:ee:7c:01:77:
c9:29:25:2b:39:2d:06:e3:4c:83:c5:47:e3:61:36:
23:9b:97:d1:14:ea:3a:40:14:09:e4:a3:d3:61:b2:
50:ab:83:d4:8f:b2:55:6a:e6:f9:9e:1b:11:e4:16:
db:68:3a:a2:9d:4c:22:87:5f:2e:26:a8:d0:7c:12:
df:d5:d6:b5:2d:ee:62:ac:9a:aa:d6:06:ef:88:02:
6e:c1:6a:74:fe:17:b7:7c:40:41:ed:04:e2:2e:ec:
bd:ad:c3:99:9a:f8:5b:d4:e0:31:ad:96:98:28:af:
84:7b:30:1d:d1:31:45:2b:fc:be:28:17:48:20:00:
02:c1:dd:5d:68:01:db:52:12:60:14:d7:16:ff:ea:
f6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:24:73:C2:66:F0:23:25:4D:F4:00:C4:7D:D0:FA:1B:5F:00:2D:4C
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/ECRzwmbwIyVN9ADEfdD6G18ALUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.176.0/22
193.138.172.0/22
194.56.184.0/22
212.103.36.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:93:17:29:a4:5f:a8:e3:32:df:a1:78:8c:d9:38:fb:39:98:
97:8d:f5:7e:5a:e0:61:b9:23:6b:91:f6:66:d9:fc:71:5e:b5:
7d:fb:01:82:f7:5f:83:68:ca:2c:21:85:0d:79:1c:f1:ea:5b:
ed:fe:93:97:9f:8c:4b:8e:bd:e4:6e:90:ec:29:72:6d:fe:6c:
4a:19:7d:fa:84:9d:9d:72:c6:54:af:ee:a3:b7:b9:63:29:24:
e5:a8:08:98:40:eb:12:e0:64:d0:14:a9:99:4e:33:5c:4a:e9:
79:66:b5:46:fa:4e:50:42:5c:40:e0:c9:ef:d5:57:a7:2e:4f:
bb:c4:88:52:72:29:96:f7:e5:6d:f5:9d:fd:48:f8:36:32:df:
8c:53:14:32:61:55:24:f9:69:52:74:0d:00:52:60:45:ca:8a:
52:f9:50:94:02:5c:44:ee:92:12:cd:1a:6e:10:e2:51:ae:5a:
60:37:02:31:0b:a4:07:66:a7:f3:5d:a3:52:70:7d:b9:66:1a:
d2:fd:d3:b8:9d:24:81:2d:3b:72:55:56:e6:0a:8f:3b:dc:74:
6e:f0:58:b9:1e:b7:5e:c8:a4:53:91:49:58:87:53:d5:ca:7e:
6a:30:f5:ce:9f:bc:77:f4:da:d3:32:68:57:5a:3e:d0:16:93:
04:04:5b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org