Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/sfZP4wMPnxnrQL6Sq5sQsUgcutM.roa
File: sfZP4wMPnxnrQL6Sq5sQsUgcutM.roa (raw, json)
Hash identifier: P7VFVJnUn2xtIamzuZ+jFy3UMKTy+qzBgnsQLZpxMBU=
Subject key identifier: B1:F6:4F:E3:03:0F:9F:19:EB:40:BE:92:AB:9B:10:B1:48:1C:BA:D3
Certificate issuer: /CN=3be9593d290e0250278a73b313550329327bd589
Certificate serial: 01856EB91A6692AEF060A7AD885607A6AB7B
Authority key identifier: 3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/sfZP4wMPnxnrQL6Sq5sQsUgcutM.roa
Signing time: Sun 01 Jan 2023 19:05:02 +0000
ROA not before: Sun 01 Jan 2023 19:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201466
IP address blocks: 185.160.168.0/22 maxlen: 22
45.134.152.0/22 maxlen: 22
185.222.164.0/22 maxlen: 22
193.36.144.0/22 maxlen: 22
185.73.168.0/22 maxlen: 22
195.191.48.0/24 maxlen: 24
2.57.108.0/22 maxlen: 22
195.242.72.0/22 maxlen: 22
2a07:bec0::/29 maxlen: 29
2a03:4460::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:1a:66:92:ae:f0:60:a7:ad:88:56:07:a6:ab:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be9593d290e0250278a73b313550329327bd589
Validity
Not Before: Jan 1 19:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1f64fe3030f9f19eb40be92ab9b10b1481cbad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:8a:07:5a:aa:cf:2c:cf:62:8a:4d:0e:aa:
e6:75:50:65:2b:b7:61:b1:f6:93:10:46:cc:79:7a:
10:95:b2:cf:94:2b:38:55:cc:d5:31:cd:43:96:1d:
6f:4d:d1:85:5f:93:20:84:61:31:0b:51:94:0c:5c:
af:8b:fd:46:38:72:1b:af:74:97:1f:66:95:61:d6:
89:eb:83:4e:a2:f0:e5:b3:a2:82:6e:a0:b0:ce:be:
3c:c5:f9:12:4a:37:99:a4:a8:d5:75:2b:9a:f9:40:
a0:ac:2f:c5:45:af:93:3a:01:95:ce:93:d4:01:c2:
5f:fb:17:1b:18:21:31:53:cc:b4:7c:44:09:2e:7c:
cf:38:c9:f3:6d:5b:93:7d:45:ff:cb:0f:8f:7d:f3:
86:18:5e:bd:68:2d:c4:98:7d:05:a4:d9:9f:fa:14:
93:86:9c:f9:2f:e5:79:5b:3d:9f:1f:91:de:0f:5e:
75:ca:e8:3b:78:9d:f8:31:c6:9f:7d:3c:8f:f5:89:
e2:1f:12:8e:1a:60:79:00:8c:d4:ec:8b:40:db:77:
74:30:0c:03:b2:e2:61:6a:8e:bb:30:88:96:51:5a:
7c:85:bf:79:67:f6:99:89:d4:17:bd:3f:d3:b8:00:
e0:60:4b:41:5e:07:c9:d1:40:fb:0a:8b:c0:eb:f0:
8e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F6:4F:E3:03:0F:9F:19:EB:40:BE:92:AB:9B:10:B1:48:1C:BA:D3
X509v3 Authority Key Identifier:
keyid:3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/sfZP4wMPnxnrQL6Sq5sQsUgcutM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.108.0/22
45.134.152.0/22
185.73.168.0/22
185.160.168.0/22
185.222.164.0/22
193.36.144.0/22
195.191.48.0/24
195.242.72.0/22
IPv6:
2a03:4460::/32
2a07:bec0::/29
Signature Algorithm: sha256WithRSAEncryption
15:da:c1:b1:37:00:42:10:51:c1:67:8b:28:33:7e:e8:63:88:
c2:23:42:b6:da:3f:70:36:08:a6:82:d6:03:b8:b7:36:23:46:
71:9b:eb:b3:62:88:66:23:b7:5a:b6:f4:1a:2a:18:ff:fd:29:
e1:82:c2:08:dd:83:a1:47:7b:10:46:5e:ba:64:91:bd:22:0c:
77:55:d7:1b:a3:a0:eb:cd:bc:b7:9e:6a:1b:2a:8b:61:8c:48:
d8:12:9f:8c:de:22:af:a9:36:92:54:22:87:2a:8c:47:07:d1:
1a:a9:5c:a3:8a:df:61:c4:49:1e:b9:bd:41:77:e5:d1:8f:12:
75:d7:7c:89:7c:5e:18:aa:b6:27:3f:df:31:d0:c3:84:46:9a:
58:70:91:27:08:7b:be:21:69:cb:a8:cb:00:22:e8:50:42:12:
da:2e:3a:8d:93:26:a9:fa:53:c0:fc:3a:bc:a7:5a:80:42:2e:
ab:1f:eb:b3:4e:49:ec:12:c1:dc:b5:34:23:5f:fa:3c:e9:8d:
95:0e:f3:f5:31:27:1e:92:f5:5e:83:fc:19:4d:39:f4:24:44:
97:7e:82:b3:63:91:6b:27:a7:a8:00:df:1a:0e:44:03:39:8a:
ad:c1:0b:8b:8e:3b:80:5c:a9:92:0c:ef:73:81:b4:31:b2:a5:
98:00:79:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:12 2024 by rpki-client on console-fra.rpki-client.org