Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/ERCwb0IL9ZyYNa0uZtdwip72G8Y.roa
File: ERCwb0IL9ZyYNa0uZtdwip72G8Y.roa (raw, json)
Hash identifier: eNbKET0jaL1zcsyZhfsIhkYe1oJzXI0XOJLV/yEPUJc=
Subject key identifier: 11:10:B0:6F:42:0B:F5:9C:98:35:AD:2E:66:D7:70:8A:9E:F6:1B:C6
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 01876A932B09E83A9FD3E8748A58743B56B1
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/ERCwb0IL9ZyYNa0uZtdwip72G8Y.roa
Signing time: Mon 10 Apr 2023 09:50:42 +0000
ROA not before: Mon 10 Apr 2023 09:50:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54994
IP address blocks: 163.171.64.0/24 maxlen: 24
163.171.67.0/24 maxlen: 24
163.171.70.0/24 maxlen: 24
163.171.71.0/24 maxlen: 24
163.171.84.0/24 maxlen: 24
163.171.85.0/24 maxlen: 24
163.171.87.0/24 maxlen: 24
163.171.166.0/24 maxlen: 24
93.188.135.0/24 maxlen: 24
163.171.177.0/24 maxlen: 24
163.171.182.0/24 maxlen: 24
163.171.188.0/24 maxlen: 24
163.171.94.0/24 maxlen: 24
148.253.231.0/24 maxlen: 24
148.253.232.0/24 maxlen: 24
148.253.233.0/24 maxlen: 24
148.253.237.0/24 maxlen: 24
148.253.234.0/24 maxlen: 24
148.253.235.0/24 maxlen: 24
148.253.246.0/24 maxlen: 24
163.171.207.0/24 maxlen: 24
163.171.222.0/24 maxlen: 24
163.171.231.0/24 maxlen: 24
163.171.252.0/24 maxlen: 24
148.253.34.0/24 maxlen: 24
2a01:53c0:ffc6::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Apr 2023 10:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:93:2b:09:e8:3a:9f:d3:e8:74:8a:58:74:3b:56:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Apr 10 09:50:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1110b06f420bf59c9835ad2e66d7708a9ef61bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a6:59:3f:a2:5f:00:e6:5f:46:57:fe:85:eb:
58:70:8b:db:a3:96:33:c2:95:b0:23:d5:37:b5:e3:
d2:75:0e:c9:cc:83:ba:c7:2e:2a:f8:d1:26:86:d6:
77:6a:6f:1e:e9:07:c1:0e:34:8b:90:a0:7f:be:d6:
e1:97:9a:73:54:97:42:93:a8:a3:3d:fb:e3:6c:35:
13:6d:ff:fd:e0:52:6e:30:94:12:6e:52:88:eb:8f:
2f:c7:2a:88:aa:14:51:a8:e3:e5:6c:43:11:63:d5:
69:12:0c:e1:70:0b:5d:c2:24:99:d4:db:f5:78:6c:
22:db:d5:6d:13:0b:a1:00:ee:f9:02:8f:5f:a2:2f:
2b:82:f3:45:7d:cb:5c:58:4f:e4:c7:e6:42:66:cf:
0a:ea:8d:1c:d6:36:ff:c7:8c:9a:62:97:ae:87:10:
0f:e1:8a:1e:2c:b0:ed:43:4a:4d:c2:96:b5:58:ef:
f1:d9:ad:af:41:53:6a:15:f1:38:dd:c8:10:ce:a8:
a4:b8:e2:5d:0d:22:ca:3d:cd:80:ac:e6:f4:db:dc:
4f:e3:0b:12:9d:ea:4b:c8:ca:e5:8f:97:52:3c:8a:
2d:0d:a5:95:9d:29:63:8f:5f:af:6a:c4:95:75:b4:
11:c8:70:34:70:1a:84:ad:e9:9c:9e:a1:ff:78:eb:
c1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:10:B0:6F:42:0B:F5:9C:98:35:AD:2E:66:D7:70:8A:9E:F6:1B:C6
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/ERCwb0IL9ZyYNa0uZtdwip72G8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.135.0/24
148.253.34.0/24
148.253.231.0-148.253.235.255
148.253.237.0/24
148.253.246.0/24
163.171.64.0/24
163.171.67.0/24
163.171.70.0/23
163.171.84.0/23
163.171.87.0/24
163.171.94.0/24
163.171.166.0/24
163.171.177.0/24
163.171.182.0/24
163.171.188.0/24
163.171.207.0/24
163.171.222.0/24
163.171.231.0/24
163.171.252.0/24
IPv6:
2a01:53c0:ffc6::/48
Signature Algorithm: sha256WithRSAEncryption
25:ef:f4:6a:e2:d5:3c:3d:79:67:63:e4:4d:ba:12:e4:2b:6c:
dc:3e:44:f2:53:f8:fb:a1:d2:f6:48:e9:cb:3b:21:63:2e:53:
91:0c:f8:77:38:99:74:81:21:03:58:eb:15:7a:2f:24:5f:d1:
04:9d:f2:7d:da:ab:c2:51:2a:73:32:69:3c:50:a7:ed:ad:0e:
91:db:0f:d5:9d:f7:31:02:c5:88:51:7d:e6:18:b3:09:cc:ec:
c0:c0:40:97:c5:82:d2:3f:d3:09:c1:c9:cb:ad:8a:07:1a:e6:
8b:6c:7a:d2:d4:3c:06:9f:df:1b:24:42:7f:f2:a7:f8:66:65:
c8:2c:0a:50:39:ec:31:c1:6d:ea:9e:db:2d:ae:5c:f7:4c:75:
52:bb:14:f1:fd:c6:6b:f1:2e:0d:ef:1f:90:31:03:eb:76:c3:
f2:86:77:67:21:35:39:e7:f5:d3:32:88:25:07:4f:07:8c:30:
3a:48:b2:e0:cf:1f:51:9c:16:97:41:0e:af:30:e9:8a:5f:9c:
a8:dd:5e:2a:f0:66:43:68:76:ff:aa:d3:ad:de:ac:75:a2:10:
2f:03:d6:7e:e1:91:70:81:49:f6:30:02:ce:f2:86:9f:16:97:
46:36:0d:93:72:f3:91:c0:e3:e9:b9:2e:f1:19:bb:8e:19:0e:
2f:85:ca:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:27 2024 by rpki-client on console-ams.rpki-client.org