Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/T07hMVKbZtSWG-kfVovE7ZVn1xM.roa
File: T07hMVKbZtSWG-kfVovE7ZVn1xM.roa (raw, json)
Hash identifier: 5eN4fjqyEiyGlQfPj7g/ONbnZbjtddzu6ORZiZkh85o=
Subject key identifier: 4F:4E:E1:31:52:9B:66:D4:96:1B:E9:1F:56:8B:C4:ED:95:67:D7:13
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 0185703968611DC8293D2DFFA2372855C7DD
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/T07hMVKbZtSWG-kfVovE7ZVn1xM.roa
Signing time: Mon 02 Jan 2023 02:04:48 +0000
ROA not before: Mon 02 Jan 2023 02:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61149
IP address blocks: 185.16.90.0/23 maxlen: 23
185.16.91.0/24 maxlen: 24
185.16.90.0/24 maxlen: 24
185.16.89.0/24 maxlen: 24
185.16.88.0/23 maxlen: 23
185.16.88.0/22 maxlen: 22
185.16.88.0/24 maxlen: 24
45.82.107.0/24 maxlen: 24
45.82.106.0/24 maxlen: 24
86.104.226.0/24 maxlen: 24
91.235.107.0/24 maxlen: 24
2a03:cac0:2::/48 maxlen: 48
2a03:cac0:a::/48 maxlen: 48
2a03:cac0:b::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:68:61:1d:c8:29:3d:2d:ff:a2:37:28:55:c7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: Jan 2 02:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f4ee131529b66d4961be91f568bc4ed9567d713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b4:4c:48:89:b8:8b:c1:a1:59:c9:4d:7e:69:
8c:74:61:e4:22:05:7a:81:16:bb:b1:b7:1a:00:80:
c3:96:de:92:34:09:26:53:48:29:e1:fd:3a:ce:1e:
ed:6d:81:f2:e1:03:f1:dd:dc:3a:34:05:d7:ac:08:
3b:36:71:90:74:21:d4:f8:42:4c:8e:20:c3:3f:5d:
8d:11:50:4e:92:e0:db:93:02:95:ec:8c:89:50:dc:
59:a9:18:60:8b:62:d0:c4:88:25:4f:aa:2c:e3:84:
de:2e:05:78:1b:31:3f:04:65:4f:52:e2:32:34:10:
93:76:f3:9e:9a:93:30:27:0b:a3:c0:4a:8e:e1:4b:
9e:5d:91:5b:8f:42:fc:56:b2:a2:09:39:20:86:62:
c4:fe:61:11:64:a0:33:56:70:c0:8c:c6:c3:b1:b4:
76:8c:f1:ff:28:95:07:5a:6f:07:07:ab:56:31:db:
c1:95:b8:2f:7a:6a:c4:96:47:e3:44:07:52:1f:a4:
fe:71:02:15:ca:bb:ca:ac:2d:48:f6:8d:cb:b7:eb:
20:2e:84:f3:de:1e:e3:5c:5f:7e:6f:9b:4b:e5:76:
20:79:b1:ac:d5:2b:46:09:9a:c2:23:79:77:b6:c8:
71:e7:a6:65:c8:70:32:67:70:8a:b5:ec:78:ad:36:
9d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4E:E1:31:52:9B:66:D4:96:1B:E9:1F:56:8B:C4:ED:95:67:D7:13
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/T07hMVKbZtSWG-kfVovE7ZVn1xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.106.0/23
86.104.226.0/24
91.235.107.0/24
185.16.88.0/22
IPv6:
2a03:cac0:2::/48
2a03:cac0:a::/47
Signature Algorithm: sha256WithRSAEncryption
27:99:b4:51:84:1a:72:21:ec:02:b6:f6:63:0a:bc:60:96:dd:
a1:09:ab:d1:44:ef:7f:7f:26:0c:79:86:0f:37:4d:ae:4e:ab:
d1:8a:0a:2d:03:63:45:8c:f9:dd:1e:85:39:1c:9e:56:1a:f7:
ee:8c:1d:97:01:e5:e3:2c:33:06:44:c4:36:55:23:3f:6f:5d:
6d:ff:76:8a:13:56:5e:c6:3f:18:15:97:63:46:84:e1:0e:4d:
6c:ba:ba:db:b9:2c:92:21:65:d9:b1:7e:ab:85:cc:ac:04:f2:
eb:d9:6f:ac:b8:53:0c:ed:e1:96:f0:31:48:24:c9:0c:cd:1d:
19:dd:59:e8:d9:90:b8:c9:41:5a:68:d5:54:91:1b:df:15:02:
d7:1e:f4:fe:e2:b2:14:d4:11:1d:73:28:7c:db:e1:4f:af:29:
6c:d7:98:36:8c:f5:dd:29:5f:49:e3:36:4a:dd:0a:1a:71:3e:
36:72:e4:61:21:1b:f5:75:13:8a:c9:71:56:3d:3b:07:52:b6:
56:ed:0f:99:65:cd:bb:48:ac:d1:ba:4d:0b:b4:23:03:34:59:
16:16:81:55:39:a9:19:33:8a:de:96:8d:87:66:6f:89:64:ab:
8c:e9:6e:ad:e0:b6:f9:e6:81:24:4b:7a:73:a8:38:b9:e2:f8:
67:36:30:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:12 2024 by rpki-client on console-fra.rpki-client.org