Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/uRNBzORUijH_NO1yjUmUVzPAg2E.roa
File: uRNBzORUijH_NO1yjUmUVzPAg2E.roa (raw, json)
Hash identifier: 4kVTMWFDpA1TZA3I+DVy4LNa2bbG21dthQA91kIZxNM=
Subject key identifier: B9:13:41:CC:E4:54:8A:31:FF:34:ED:72:8D:49:94:57:33:C0:83:61
Certificate issuer: /CN=097b5d1490b385a2f80c2a0324fe98e351091490
Certificate serial: 018967E6E4A8AB76F804078ACAA20A99F6DD
Authority key identifier: 09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/uRNBzORUijH_NO1yjUmUVzPAg2E.roa
Signing time: Tue 18 Jul 2023 07:28:52 +0000
ROA not before: Tue 18 Jul 2023 07:28:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47474
IP address blocks: 46.18.216.0/21 maxlen: 21
193.115.192.0/18 maxlen: 18
185.20.60.0/22 maxlen: 22
79.98.160.0/21 maxlen: 21
62.64.160.0/19 maxlen: 19
95.138.200.0/21 maxlen: 21
62.64.192.0/18 maxlen: 18
128.127.24.0/21 maxlen: 21
89.197.0.0/16 maxlen: 16
37.130.248.0/21 maxlen: 21
193.117.128.0/17 maxlen: 17
62.64.140.0/22 maxlen: 22
2a01:a000::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:67:e6:e4:a8:ab:76:f8:04:07:8a:ca:a2:0a:99:f6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097b5d1490b385a2f80c2a0324fe98e351091490
Validity
Not Before: Jul 18 07:28:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b91341cce4548a31ff34ed728d49945733c08361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d3:4d:23:72:75:ef:06:e4:66:b8:2f:b8:6c:
fe:14:8f:2a:8c:77:41:f8:db:d3:c3:81:5e:80:0a:
5b:74:3a:ac:99:31:5e:d6:75:4d:68:82:7d:68:87:
01:46:08:24:16:e8:22:b7:e8:59:99:a8:72:95:0f:
d9:35:67:54:a8:58:a1:5c:30:5e:c1:b6:be:47:d6:
ce:05:32:51:82:2d:f3:00:e1:b4:67:04:f8:aa:34:
87:06:09:0f:f8:fc:5e:33:b8:80:54:e2:fc:e5:d9:
d9:0a:99:95:d6:a5:aa:50:c9:5a:74:07:26:2e:0a:
19:a7:1b:83:98:09:d8:55:77:c1:85:d3:8a:bf:34:
0b:53:5f:ee:d3:53:74:1b:64:f7:df:e6:bc:44:b4:
4a:f7:f7:51:bf:7e:7c:f3:ac:75:7b:e3:32:6b:09:
04:f2:9f:f3:d0:ae:47:75:1a:f4:88:2b:cd:5d:12:
48:15:63:b3:00:eb:bb:38:1e:82:c1:21:f6:f2:b0:
f8:a7:62:b7:58:34:9b:d1:f7:e7:75:4a:a7:a3:c2:
72:7c:f9:34:74:20:f8:26:28:da:fc:31:51:10:24:
60:f6:64:ab:44:16:27:3e:41:05:d5:de:22:43:06:
06:90:e3:49:2a:60:7b:ae:00:c2:3e:46:44:95:ee:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:13:41:CC:E4:54:8A:31:FF:34:ED:72:8D:49:94:57:33:C0:83:61
X509v3 Authority Key Identifier:
keyid:09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/uRNBzORUijH_NO1yjUmUVzPAg2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.248.0/21
46.18.216.0/21
62.64.140.0/22
62.64.160.0-62.64.255.255
79.98.160.0/21
89.197.0.0/16
95.138.200.0/21
128.127.24.0/21
185.20.60.0/22
193.115.192.0/18
193.117.128.0/17
IPv6:
2a01:a000::/32
Signature Algorithm: sha256WithRSAEncryption
74:cb:11:02:cb:04:19:92:42:3c:f1:86:fb:75:63:27:fa:3e:
7d:a8:6f:d7:ca:88:e5:d7:e1:12:0e:46:05:6a:16:2b:a5:f0:
16:fa:b0:32:b1:b2:4a:9c:cc:b0:28:22:1c:47:b3:78:6e:37:
d7:f8:63:f8:72:e5:0f:0f:19:7b:6e:16:08:c2:0b:b8:bf:2d:
24:77:6c:d9:3d:81:36:ae:32:a6:a2:a5:59:36:28:c8:ae:c7:
bd:3b:3b:43:ba:3a:98:1b:23:f6:25:48:e6:33:6e:ef:f8:7b:
9b:34:30:e6:2b:f9:12:8e:fb:63:f5:8f:83:96:78:c9:d2:30:
c4:fd:67:14:08:4b:fa:12:bb:d4:af:42:c6:a6:50:ec:5b:70:
ac:93:0e:72:29:4f:40:25:2f:ce:35:f4:d3:3b:d4:e0:8d:45:
52:50:ec:e7:b5:b9:b8:87:06:c4:37:de:b5:42:98:c9:5d:be:
f8:2f:e1:13:43:dd:57:c2:ee:ac:e7:18:2d:e7:cf:d7:7b:73:
7f:0d:13:ab:c2:aa:2e:8e:6c:1f:e0:e0:ac:3c:78:97:a6:63:
34:3d:a5:f0:25:71:de:0d:cd:91:aa:49:a3:78:8e:49:bd:a2:
64:6f:f1:e9:0f:8e:4d:21:e5:25:cb:2d:f6:74:e2:c4:89:41:
1b:9f:00:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:06 2024 by rpki-client on console-ams.rpki-client.org