Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/7Kqg0-_x-7XTtC0-Lfu-Zzqm69o.roa
File: 7Kqg0-_x-7XTtC0-Lfu-Zzqm69o.roa (raw, json)
Hash identifier: 2E8AQqXRbnPEF3EFopbbs5B8iNOuiKR3Ofwobi2tPBU=
Subject key identifier: EC:AA:A0:D3:EF:F1:FB:B5:D3:B4:2D:3E:2D:FB:BE:67:3A:A6:EB:DA
Certificate issuer: /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial: 018B004500396198C0B827E24C524F7DD577
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/7Kqg0-_x-7XTtC0-Lfu-Zzqm69o.roa
Signing time: Thu 05 Oct 2023 14:36:43 +0000
ROA not before: Thu 05 Oct 2023 14:36:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25135
IP address blocks: 85.255.224.0/20 maxlen: 20
88.82.0.0/19 maxlen: 19
85.255.232.0/23 maxlen: 23
212.183.128.0/20 maxlen: 20
212.183.128.0/19 maxlen: 19
85.255.236.0/23 maxlen: 23
85.255.234.0/23 maxlen: 23
212.183.152.0/21 maxlen: 21
185.69.144.0/22 maxlen: 22
194.62.232.0/24 maxlen: 24
194.62.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Nov 2023 15:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:45:00:39:61:98:c0:b8:27:e2:4c:52:4f:7d:d5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Validity
Not Before: Oct 5 14:36:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecaaa0d3eff1fbb5d3b42d3e2dfbbe673aa6ebda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:97:c9:2d:3b:5c:1d:9d:87:9c:6e:a5:dc:
87:11:03:01:5c:28:60:62:63:8b:09:8f:e1:d0:23:
84:b4:67:b1:4d:cd:7a:65:8f:4e:23:f4:42:8b:00:
c5:d9:05:d2:87:7a:51:63:d4:a5:39:c4:e4:e2:6e:
ba:70:da:e6:c0:11:93:17:84:b9:d3:ce:9d:8f:06:
86:43:13:31:9d:89:b6:1b:2f:74:3d:61:76:15:f1:
20:fb:d2:a1:e1:27:8f:0c:b9:5e:f6:b8:f6:4c:4c:
94:57:8c:de:2d:bd:4f:6c:09:83:b8:f2:8d:bc:14:
05:5a:86:4f:c2:dd:0d:d0:67:be:e2:43:86:10:16:
97:13:78:be:6c:4b:b8:30:f3:0a:f3:1c:86:f4:f6:
44:81:ff:9a:01:a8:53:fc:bf:26:e1:f2:ed:7e:86:
2c:3a:81:02:d6:5a:63:2b:a6:d5:79:6e:67:99:b7:
b9:e6:6d:5e:0e:ff:fb:fc:92:d3:94:a8:83:c4:bc:
fd:21:c3:f8:98:a8:e7:da:b5:e5:7d:1c:95:a8:89:
42:ce:2c:5d:88:fc:8a:32:92:2f:36:38:42:e8:74:
df:15:4d:b5:bd:bd:a2:69:b7:8b:52:7b:ed:45:46:
fa:a7:0b:4b:7b:12:b2:ee:b5:d8:b8:2d:86:3d:0f:
ca:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AA:A0:D3:EF:F1:FB:B5:D3:B4:2D:3E:2D:FB:BE:67:3A:A6:EB:DA
X509v3 Authority Key Identifier:
keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/7Kqg0-_x-7XTtC0-Lfu-Zzqm69o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.224.0/20
88.82.0.0/19
185.69.144.0/22
194.62.232.0/24
194.62.238.0/24
212.183.128.0/19
Signature Algorithm: sha256WithRSAEncryption
70:43:52:f4:1e:e4:ab:6a:ca:c2:42:b5:59:04:28:cf:6f:b0:
2a:08:8d:50:a1:14:42:e9:fa:64:3f:94:c2:60:18:fb:01:3c:
14:85:32:18:6c:77:4d:3b:31:5c:84:51:69:1c:3d:cc:6c:6c:
71:f8:be:76:67:bf:ee:b9:90:a4:3d:1e:65:a0:08:9b:ee:5f:
d3:40:08:77:22:30:e2:0a:8f:60:7a:4c:ee:ff:2a:bb:75:e0:
4b:1c:c7:ff:7e:bd:dd:1a:be:e4:dd:fa:ce:f6:22:96:e2:63:
dd:80:77:a3:1a:4a:f2:88:5a:13:4c:d5:00:d1:d7:aa:3b:e6:
a4:07:e0:0f:a1:35:b7:33:c8:52:95:c0:b9:3c:c4:ec:d6:bf:
b0:7b:35:ed:17:99:18:fb:01:d7:ea:96:7f:4e:cb:b4:ad:3b:
99:17:9a:af:c2:57:f3:fb:f0:83:41:83:b1:0d:0e:02:e2:85:
4d:b9:8a:79:ed:eb:e4:81:eb:56:8c:67:88:51:73:49:cc:7e:
10:90:8b:fa:83:bc:f9:b0:54:4f:e7:56:03:c4:de:a7:69:c9:
48:ee:f1:aa:d2:14:81:bc:2b:13:80:53:7d:d3:4c:da:9e:7f:
da:c3:fa:30:84:bf:2b:03:2f:4d:a9:97:87:e9:eb:ad:2b:67:
3f:80:26:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:10 2024 by rpki-client on console-ams.rpki-client.org