Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/eXtD_7eMt_sw_HvHI0j0PODh7MQ.roa
File: eXtD_7eMt_sw_HvHI0j0PODh7MQ.roa (raw, json)
Hash identifier: 92Qj5qaoeMRE+DeFP98mPTczY1dqvdgzrtSzeZdeOg4=
Subject key identifier: 79:7B:43:FF:B7:8C:B7:FB:30:FC:7B:C7:23:48:F4:3C:E0:E1:EC:C4
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018B583F78E0B26AD1BF5203FEB3D76CDAAA
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/eXtD_7eMt_sw_HvHI0j0PODh7MQ.roa
Signing time: Sun 22 Oct 2023 16:37:16 +0000
ROA not before: Sun 22 Oct 2023 16:37:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 85.8.160.0/22 maxlen: 22
193.38.44.0/22 maxlen: 22
139.28.240.0/22 maxlen: 22
5.133.100.0/22 maxlen: 22
31.40.204.0/22 maxlen: 22
139.28.48.0/22 maxlen: 22
212.107.4.0/22 maxlen: 22
83.171.244.0/22 maxlen: 22
212.87.196.0/22 maxlen: 22
37.221.76.0/22 maxlen: 22
92.249.60.0/22 maxlen: 22
176.96.128.0/22 maxlen: 22
194.93.48.0/22 maxlen: 22
194.93.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Nov 2023 18:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:58:3f:78:e0:b2:6a:d1:bf:52:03:fe:b3:d7:6c:da:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Oct 22 16:37:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=797b43ffb78cb7fb30fc7bc72348f43ce0e1ecc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e9:3b:68:1f:78:b9:32:a9:ec:d7:cd:9b:65:
bb:eb:78:14:ee:e0:51:cd:d6:e3:5e:30:bf:ac:0b:
ee:ec:82:1c:c4:cc:0e:64:4d:b2:f3:d4:1b:c7:2a:
05:a1:f4:64:08:2e:f2:39:db:f3:84:b0:a0:0c:98:
94:5c:63:b1:0c:5b:06:f4:54:8f:45:32:e0:06:a9:
f0:8e:b9:76:29:c8:95:82:16:45:d1:f4:02:31:28:
f7:3d:62:96:5a:9a:51:72:b1:0e:e8:79:0c:86:ca:
d4:ad:84:3b:6b:0d:b5:0b:ec:b6:c3:05:a5:53:83:
2e:e3:af:43:1c:6b:2a:c4:35:ef:a3:29:5a:6a:92:
24:0b:89:92:a7:18:1e:0c:c6:7e:c7:58:01:8d:fc:
8d:dd:5e:32:4b:91:82:ad:55:a8:d7:2c:a7:e0:84:
9f:ad:a9:c3:1a:5a:60:be:a4:db:7b:45:d2:0d:8d:
37:5c:40:d3:f6:c6:a0:a7:72:39:fa:04:4a:7c:a2:
38:3f:42:05:50:db:a0:93:50:b3:db:82:29:24:b8:
c2:63:27:24:6a:07:1b:fa:a6:e5:86:d6:3a:82:8e:
f2:c9:cd:18:c2:11:bb:cc:84:23:63:f0:8d:f5:4c:
32:63:01:f5:67:5a:79:ac:a0:c6:87:39:3d:24:a2:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7B:43:FF:B7:8C:B7:FB:30:FC:7B:C7:23:48:F4:3C:E0:E1:EC:C4
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/eXtD_7eMt_sw_HvHI0j0PODh7MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.100.0/22
31.40.204.0/22
37.221.76.0/22
83.171.244.0/22
85.8.160.0/22
92.249.60.0/22
139.28.48.0/22
139.28.240.0/22
176.96.128.0/22
193.38.44.0/22
194.93.48.0/22
194.93.60.0/22
212.87.196.0/22
212.107.4.0/22
Signature Algorithm: sha256WithRSAEncryption
d8:b0:d7:8b:8c:74:e9:e0:71:1c:94:d9:53:09:69:cb:f1:07:
34:65:90:6d:57:b0:65:b3:1f:24:44:08:60:e5:87:23:19:5a:
15:e6:d4:46:29:ea:ba:a2:44:ee:9e:b7:09:2d:d0:3c:0f:bc:
74:bc:ff:f8:c3:76:1c:fd:10:0e:ac:34:75:d6:a6:ee:92:60:
eb:b6:b4:b5:cd:ba:a8:d5:e7:be:ad:ee:a1:46:b3:cc:02:42:
5c:7c:c8:30:7b:25:74:e3:90:2b:b6:d0:74:a5:4c:26:08:c2:
29:95:fb:27:0b:d9:56:c7:b2:78:df:95:00:73:7d:35:aa:1d:
d1:ea:a5:1b:2f:13:1f:82:f6:d8:8d:12:fd:30:d8:7f:7a:63:
b1:c3:da:c1:fa:34:2b:df:5a:22:9c:3e:fd:f5:fe:7c:d3:9d:
fe:56:1b:f2:86:65:72:a6:d3:4f:d1:2d:d8:b2:bb:bd:74:4c:
57:6b:8e:df:3c:b3:34:46:98:eb:e2:c2:9a:b2:8f:57:0b:52:
02:40:88:19:69:c3:3d:d0:f6:b9:5b:64:f4:69:de:e9:9a:7c:
f7:2c:c9:d1:d3:4d:bf:e3:cf:e6:d3:c3:65:ce:5a:3d:6b:6b:
cc:68:3e:86:cc:39:2d:5a:4c:3b:64:1e:b1:38:08:68:6c:bb:
f0:a1:1e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org