Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/E62cwJs9L2fHsN9tU2FUZQXCL9k.roa
File: E62cwJs9L2fHsN9tU2FUZQXCL9k.roa (raw, json)
Hash identifier: 33RL88Ek9kk9sAF/O7lOdNCu2cSpDg25YD4AepHcVqQ=
Subject key identifier: 13:AD:9C:C0:9B:3D:2F:67:C7:B0:DF:6D:53:61:54:65:05:C2:2F:D9
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 01857142DAEDCDB4AA892B279065BDEDF1CF
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/E62cwJs9L2fHsN9tU2FUZQXCL9k.roa
Signing time: Mon 02 Jan 2023 06:54:44 +0000
ROA not before: Mon 02 Jan 2023 06:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57739
IP address blocks: 195.5.120.0/23 maxlen: 23
91.203.212.0/22 maxlen: 22
195.82.152.0/23 maxlen: 23
81.88.28.0/22 maxlen: 22
178.250.169.0/24 maxlen: 24
93.90.183.0/24 maxlen: 24
188.64.46.0/23 maxlen: 23
5.44.102.0/23 maxlen: 23
2a02:a60::/32 maxlen: 64
2a00:fa40:2000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 11 Jul 2023 13:20:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:da:ed:cd:b4:aa:89:2b:27:90:65:bd:ed:f1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Jan 2 06:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13ad9cc09b3d2f67c7b0df6d5361546505c22fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:57:57:c9:b2:7e:68:72:36:42:f6:bb:11:
87:3b:d2:a5:22:3f:28:b8:cc:91:f1:00:8e:ea:1d:
46:83:36:e9:d3:38:0f:13:75:d7:26:f0:ef:84:39:
ff:cf:32:6a:fc:75:10:0a:6a:e4:ab:06:ac:8c:d3:
83:3f:03:9b:52:13:c4:d6:c8:4e:a1:57:ab:0b:e7:
6b:bd:8c:77:ad:24:3c:a8:73:25:c0:37:a3:c7:5c:
4f:73:f4:d2:85:ce:b0:16:cd:24:7e:41:f5:70:43:
bf:39:af:5e:22:b6:ec:26:81:d2:48:db:21:38:66:
bb:94:2b:31:8f:d3:7a:e2:55:44:6c:ed:38:db:f7:
1d:dc:d4:5c:75:3d:61:f8:77:fe:aa:5a:a5:57:c2:
51:36:fc:e6:94:a8:ec:e1:95:2a:6e:6a:c5:40:b7:
4d:4a:1f:24:42:0d:3a:40:a8:6c:49:43:ab:f4:4e:
4f:55:42:1c:41:6b:68:34:87:d9:3a:e4:db:96:da:
1c:82:54:19:3d:7f:ba:81:0e:42:27:e2:3c:63:3e:
33:be:fb:ee:18:59:54:c0:2c:47:a2:f5:c0:9f:4e:
2c:6f:8c:0f:25:e7:81:b0:94:59:e0:a7:3e:fd:bf:
3a:a3:13:49:70:a5:48:b5:ed:2c:bc:c1:a8:bb:2e:
4d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AD:9C:C0:9B:3D:2F:67:C7:B0:DF:6D:53:61:54:65:05:C2:2F:D9
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/E62cwJs9L2fHsN9tU2FUZQXCL9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.102.0/23
81.88.28.0/22
91.203.212.0/22
93.90.183.0/24
178.250.169.0/24
188.64.46.0/23
195.5.120.0/23
195.82.152.0/23
IPv6:
2a00:fa40:2000::/36
2a02:a60::/32
Signature Algorithm: sha256WithRSAEncryption
7f:99:4d:61:ed:79:1c:7d:f0:3c:95:90:8b:4c:f1:eb:9e:99:
87:6c:18:7b:5e:dc:60:ab:b8:55:b0:06:bc:b1:88:c3:c5:ae:
c2:76:9b:c7:e9:f9:50:33:9a:8b:82:e4:8f:c4:e0:c4:1d:66:
83:52:5f:63:ba:0c:fd:fb:d0:23:bc:3f:c6:ae:d5:7d:89:3d:
6d:f5:0b:29:cb:80:31:3c:30:02:e8:bf:85:1d:66:64:17:5a:
ca:22:79:dc:eb:c9:f7:87:9a:c9:4a:56:57:37:4b:9b:cc:35:
25:27:73:9f:f0:89:ed:2b:c9:09:29:86:e6:ef:c2:13:8d:2a:
5b:e9:a5:86:3c:71:98:1d:a4:9c:e7:07:14:d4:6b:05:25:c9:
00:07:3f:32:1d:9f:47:3c:99:a3:06:0e:d4:0f:cc:d5:d6:f0:
17:db:b9:c4:12:68:d4:09:d4:c1:26:17:1e:74:d4:f0:46:ac:
74:2b:7d:de:97:f9:45:f0:09:68:68:10:8d:c4:f6:46:1a:a3:
4f:57:91:f5:d9:cf:ad:a6:4e:cb:64:c7:12:a0:86:cc:f2:71:
bb:55:a0:61:8f:a4:e1:9a:46:2c:6e:0f:17:d9:97:21:97:d7:
43:6d:7b:17:f2:f0:3f:0f:38:a9:4d:f0:63:cc:48:71:f4:1e:
e9:84:54:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:44 2024 by rpki-client on console-fra.rpki-client.org