Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/grWIBMlVfq83lYBjVy4HTQOqqUE.roa
File: grWIBMlVfq83lYBjVy4HTQOqqUE.roa (raw, json)
Hash identifier: 09dfRYg/pjy2WZer1XYu5i8RsOBQnckmtxSjaIC0oms=
Subject key identifier: 82:B5:88:04:C9:55:7E:AF:37:95:80:63:57:2E:07:4D:03:AA:A9:41
Certificate issuer: /CN=f9503c075a690556bd462122b24699e1b6b19278
Certificate serial: 01856CB82C980F09D89CB434C740128D4F0A
Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/grWIBMlVfq83lYBjVy4HTQOqqUE.roa
Signing time: Sun 01 Jan 2023 09:44:47 +0000
ROA not before: Sun 01 Jan 2023 09:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60350
IP address blocks: 195.189.178.0/23 maxlen: 24
185.45.180.0/22 maxlen: 24
193.161.254.0/23 maxlen: 23
91.221.146.0/23 maxlen: 24
193.164.2.0/24 maxlen: 24
193.164.2.0/23 maxlen: 23
193.148.6.0/23 maxlen: 24
185.183.112.0/22 maxlen: 22
185.183.112.0/24 maxlen: 24
185.183.113.0/24 maxlen: 24
45.137.178.0/23 maxlen: 23
45.137.176.0/23 maxlen: 23
45.137.176.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 17 Feb 2023 12:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:2c:98:0f:09:d8:9c:b4:34:c7:40:12:8d:4f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278
Validity
Not Before: Jan 1 09:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82b58804c9557eaf37958063572e074d03aaa941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9b:1c:b5:2e:b0:3d:e1:6d:7a:77:d1:67:14:
0e:52:47:cb:d0:c4:61:2c:f0:7e:5d:88:77:c4:78:
59:d2:2a:20:c1:73:d8:70:33:ca:a0:68:f8:ad:e2:
2d:75:13:8b:dc:d3:94:18:ab:e3:ec:7d:88:e0:58:
1b:87:74:d3:c3:58:68:0c:7e:62:b1:54:4d:6b:55:
cb:87:7e:05:47:94:13:d6:2c:e0:00:36:fe:f3:70:
47:71:3f:ed:23:74:41:b6:5e:a4:00:50:2d:6f:5e:
b4:81:6f:31:92:48:c7:5b:10:cf:fd:c3:c7:ed:47:
fa:7c:dd:a7:af:07:6f:cd:47:2a:db:e9:8b:0f:8a:
3f:f2:06:36:60:a9:1e:11:fb:d9:e2:5f:72:0a:15:
56:d5:e8:32:73:67:e5:a8:b7:bb:01:b4:50:de:9c:
90:b5:a0:49:e1:ed:75:c2:44:e1:ee:24:a8:fe:61:
6d:21:cf:66:3b:a0:85:11:00:d7:f9:34:06:a3:9f:
97:90:a3:7f:60:6d:bb:fb:7e:53:c7:6f:0d:96:7a:
40:22:be:ee:6c:22:18:2e:9a:33:e7:82:d0:7a:b3:
7e:ae:db:f5:e0:58:f2:08:7f:65:44:9a:6f:67:c8:
1f:63:7b:c8:d8:90:3a:eb:57:be:c8:23:e3:a8:80:
e9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B5:88:04:C9:55:7E:AF:37:95:80:63:57:2E:07:4D:03:AA:A9:41
X509v3 Authority Key Identifier:
keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/grWIBMlVfq83lYBjVy4HTQOqqUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.176.0/22
91.221.146.0/23
185.45.180.0/22
185.183.112.0/22
193.148.6.0/23
193.161.254.0/23
193.164.2.0/23
195.189.178.0/23
Signature Algorithm: sha256WithRSAEncryption
28:ef:70:e5:ae:12:9b:bd:86:4d:af:89:ad:d1:a8:e3:b7:4a:
94:9b:9f:5d:27:e1:b9:16:c7:c7:53:19:e3:15:ca:77:2b:b0:
a5:4d:fe:da:40:f5:54:33:12:f4:8e:69:e3:75:f1:df:54:f8:
78:cc:2b:a4:08:e5:25:4d:cb:4e:21:5b:17:30:0a:16:71:d2:
f6:73:7b:1c:b7:6d:2b:17:22:eb:85:b3:6c:bd:30:af:6c:ad:
b9:58:bb:58:e8:21:25:e5:e8:f0:e4:84:4f:d5:c0:b1:90:da:
76:46:0c:15:f8:a1:f2:91:d7:3b:f9:42:67:07:2a:fc:46:3f:
e1:57:60:4d:09:96:38:f6:29:da:39:e3:a6:7d:f9:33:7b:6b:
78:b5:ad:01:85:9b:1a:e0:f5:0d:2b:c9:72:40:81:43:77:97:
c5:5c:ed:24:9d:34:b0:02:4c:0d:8e:1d:87:9f:4c:a0:01:c9:
a4:aa:81:b2:da:be:b8:4b:21:c3:84:ce:66:d9:02:5c:4c:a0:
ea:d0:89:12:da:37:7a:bc:39:2d:12:12:24:3b:8a:5d:b5:d3:
07:3e:ad:68:fc:26:27:b2:e3:16:75:2a:be:61:6a:a2:cb:11:
9f:eb:43:b3:4f:38:db:8d:0d:01:d8:62:5b:68:ad:b9:4a:95:
c4:34:f5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:14 2024 by rpki-client on console-ams.rpki-client.org