Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/S_uSXTXoItEJSCmD9c2I0vHt6FI.roa
File: S_uSXTXoItEJSCmD9c2I0vHt6FI.roa (raw, json)
Hash identifier: tI0SyPp2zg2WWR0pC/U5SJRUs2k8aIQWO5TGuPqOL0Q=
Subject key identifier: 4B:FB:92:5D:35:E8:22:D1:09:48:29:83:F5:CD:88:D2:F1:ED:E8:52
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEB541835304E66776B51EA23D5F2F
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/S_uSXTXoItEJSCmD9c2I0vHt6FI.roa
Signing time: Sun 01 Jan 2023 06:04:44 +0000
ROA not before: Sun 01 Jan 2023 06:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30793
IP address blocks: 87.239.216.0/22 maxlen: 22
87.239.216.0/21 maxlen: 21
85.31.252.0/24 maxlen: 24
93.180.160.0/19 maxlen: 19
185.58.160.0/23 maxlen: 23
185.58.160.0/22 maxlen: 22
185.58.162.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:b5:41:83:53:04:e6:67:76:b5:1e:a2:3d:5f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bfb925d35e822d109482983f5cd88d2f1ede852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7a:33:7f:16:8e:42:93:59:19:73:00:ec:62:
1b:aa:12:e6:8a:85:65:72:ec:a1:3f:d6:b9:e5:bf:
fb:44:b6:72:48:56:af:cc:ff:c6:3c:a7:9a:94:36:
4c:87:c7:62:7c:c0:4f:19:eb:c1:8c:37:0d:88:71:
8d:d8:f8:5b:6d:8d:11:39:85:3e:4c:fc:d5:d7:83:
92:26:e2:ab:45:2d:12:bb:85:52:08:65:77:f1:b4:
8a:0b:7e:d1:a1:23:12:3e:3e:a6:a9:41:ca:a1:65:
9b:1d:a1:67:ca:ca:82:cb:54:57:1f:c9:4e:01:be:
16:15:cc:16:52:a7:04:a2:d0:a6:3b:ec:e4:79:3b:
4a:ed:0d:6c:f8:ea:17:1a:c7:86:d6:e5:45:95:b0:
4c:52:46:84:84:63:d9:00:cb:b9:77:7e:5f:96:84:
04:bb:71:97:e9:76:d0:7b:25:33:39:8f:a5:ea:0e:
74:13:43:a5:8e:47:5b:5f:49:02:46:1d:3d:e2:8c:
22:17:03:4f:31:1a:42:3b:b2:a1:34:d6:32:fb:7d:
ea:d6:85:02:b0:cb:6f:b8:7f:6e:f9:e7:75:90:05:
96:c3:2f:5f:54:8a:8e:84:da:c0:52:fc:7b:14:b9:
7f:38:49:af:36:e0:93:8b:10:c3:35:05:bc:8e:cc:
4e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FB:92:5D:35:E8:22:D1:09:48:29:83:F5:CD:88:D2:F1:ED:E8:52
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/S_uSXTXoItEJSCmD9c2I0vHt6FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.252.0/24
87.239.216.0/21
93.180.160.0/19
185.58.160.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:1e:6a:a8:ed:7d:e8:ba:34:df:36:ff:56:5b:16:c9:bc:f1:
2c:d7:b1:48:b8:e8:c6:3f:e6:96:19:c5:2c:35:07:a1:4b:00:
c6:55:14:c9:2b:7f:0b:81:c1:ec:66:53:c9:ab:a3:8d:7b:4b:
af:f4:e0:ba:17:3e:7a:53:4d:18:cb:31:d2:f3:dc:bd:78:e8:
1a:52:1e:78:b7:b6:27:93:4b:c0:e8:09:a5:eb:35:71:e6:18:
e9:61:78:a5:9f:90:26:07:9d:e8:be:59:ce:27:e2:2d:7d:76:
3d:ea:8c:8c:b9:60:36:d4:5c:76:3c:1b:bd:e6:b8:20:d4:75:
98:8f:ef:3c:2d:c4:5f:b7:9f:16:94:39:22:94:3c:87:8c:6a:
4b:95:91:c1:8e:61:77:67:72:0e:32:aa:c6:4d:7a:6a:25:bd:
b2:5c:50:69:78:a8:60:da:2a:5d:a4:87:28:13:d6:c1:a7:f3:
8f:b0:a5:72:f6:3a:f4:03:74:1e:60:7b:4e:f7:aa:7d:8f:9e:
22:3c:b3:1b:b9:25:33:63:3a:39:6c:7b:c6:50:18:52:a4:40:
2e:32:53:d3:85:d6:4d:56:62:2e:60:18:b1:d6:04:ba:b0:cd:
ee:9d:ac:35:36:98:4d:b2:22:2c:f5:a6:37:99:79:f1:97:f3:
6f:c8:fc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org