Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/s9iwv1UH6ECwVh4GxZ25pWLzKYM.roa
File: s9iwv1UH6ECwVh4GxZ25pWLzKYM.roa (raw, json)
Hash identifier: x3ekytIXEmhIarcSvLHPbFCi7D2cN50inaD/oBBv6C8=
Subject key identifier: B3:D8:B0:BF:55:07:E8:40:B0:56:1E:06:C5:9D:B9:A5:62:F3:29:83
Certificate issuer: /CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Certificate serial: 018BB922A4E458C65947805BD3D6444ECFD1
Authority key identifier: B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/s9iwv1UH6ECwVh4GxZ25pWLzKYM.roa
Signing time: Fri 10 Nov 2023 12:08:57 +0000
ROA not before: Fri 10 Nov 2023 12:08:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202913
IP address blocks: 185.130.144.0/24 maxlen: 24
185.130.145.0/24 maxlen: 24
185.130.144.0/22 maxlen: 22
185.130.144.0/23 maxlen: 23
185.130.146.0/24 maxlen: 24
185.130.146.0/23 maxlen: 23
185.130.147.0/24 maxlen: 24
80.78.131.0/24 maxlen: 24
80.78.130.0/23 maxlen: 23
80.78.128.0/22 maxlen: 22
80.78.128.0/23 maxlen: 23
80.78.128.0/24 maxlen: 24
80.78.129.0/24 maxlen: 24
80.78.130.0/24 maxlen: 24
45.148.196.0/24 maxlen: 24
45.148.197.0/24 maxlen: 24
45.148.198.0/23 maxlen: 23
45.148.198.0/24 maxlen: 24
45.148.199.0/24 maxlen: 24
45.148.196.0/23 maxlen: 23
45.148.196.0/22 maxlen: 22
45.148.199.0/25 maxlen: 25
45.148.199.128/25 maxlen: 25
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:22:a4:e4:58:c6:59:47:80:5b:d3:d6:44:4e:cf:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Validity
Not Before: Nov 10 12:08:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3d8b0bf5507e840b0561e06c59db9a562f32983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:87:c4:37:5a:89:52:d5:8f:49:ff:85:96:
eb:9f:46:d3:44:5e:d9:03:32:84:e7:d4:e1:8f:b9:
e1:a9:2b:23:88:d0:b8:69:d7:48:b9:9e:15:82:e4:
23:2d:99:b3:f9:9d:d5:80:a4:73:5e:aa:f1:04:10:
49:41:0d:14:05:b2:80:2f:3e:f5:c5:bc:a9:69:18:
0c:22:a0:a0:fa:7b:b1:f9:8d:2f:3c:2a:7d:88:ae:
e1:55:b2:20:1d:a9:53:07:96:7c:80:b9:a0:83:7a:
a2:72:cf:06:f6:29:ec:84:4b:72:4c:9a:b6:70:fb:
07:e7:f2:43:dd:a7:1f:a7:99:cd:d1:9b:8d:ae:8c:
22:84:45:c8:72:3c:ee:43:8f:f5:11:1b:bd:e3:6b:
17:01:b3:d4:d8:17:b0:a4:a8:60:e0:05:be:a1:2d:
ac:5c:f9:7f:37:e9:6c:5e:7e:89:8f:46:a6:67:8e:
12:8e:71:43:53:22:53:3a:6a:c5:a5:e2:b3:ab:53:
5a:13:1c:f1:5f:79:8a:c7:7a:00:31:64:40:75:f8:
f9:a3:32:2a:54:94:8b:6c:f6:07:4a:74:a7:8f:f3:
0a:ee:1c:e5:eb:d0:c2:d7:0d:37:58:e0:a2:b8:63:
54:bd:38:ba:4f:7b:d5:9c:3d:95:7e:f6:2b:91:d1:
4c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D8:B0:BF:55:07:E8:40:B0:56:1E:06:C5:9D:B9:A5:62:F3:29:83
X509v3 Authority Key Identifier:
keyid:B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/s9iwv1UH6ECwVh4GxZ25pWLzKYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.196.0/22
80.78.128.0/22
185.130.144.0/22
Signature Algorithm: sha256WithRSAEncryption
86:af:8f:f1:55:16:56:0e:a0:8f:c1:dc:e8:15:23:4e:82:68:
45:47:ca:92:04:6d:8f:bc:ec:a8:86:8f:ce:9d:64:e1:14:8c:
57:e3:ab:24:48:a2:8b:eb:2b:20:cf:e1:99:ac:7e:fb:59:b1:
00:d2:60:c4:d2:7f:45:05:7b:4c:ae:9b:88:01:af:94:d6:76:
d7:74:a5:eb:ed:3e:56:6b:d5:3a:28:09:df:36:99:e1:5b:6c:
2d:a0:1d:60:52:c2:8a:09:65:ef:af:15:90:d6:21:fc:07:66:
95:a7:16:3f:5e:3a:dd:ae:1d:e5:2a:05:31:af:01:c6:e2:53:
f0:39:61:59:b9:fc:ca:4e:24:06:08:85:68:67:22:8c:98:45:
75:3b:5d:96:72:b3:47:99:23:a6:73:a0:03:96:67:96:e9:32:
81:f0:e4:6c:82:67:e5:8a:34:e9:86:2d:4d:2a:ab:22:aa:34:
a3:c4:a5:14:d0:39:b6:32:ec:d1:ed:ea:68:21:27:5b:a7:9e:
fa:a1:c5:a3:4a:75:f8:2e:a9:3d:a4:da:bb:dd:e2:e8:2f:d2:
df:23:a9:7b:55:e6:31:a9:16:25:10:d2:d5:df:06:4f:6c:b8:
17:b8:c8:4a:31:58:0b:08:98:ef:ef:3a:61:dd:06:6b:1e:2a:
ce:b7:d4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:03 2024 by rpki-client on console-ams.rpki-client.org