Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/uZn6W04Imhr5j-g2-j9kq4xb2Fw.roa
File: uZn6W04Imhr5j-g2-j9kq4xb2Fw.roa (raw, json)
Hash identifier: TerPSbLXueLhiihN9SZnlxDqXufrttJ7lOMRdp3M9oA=
Subject key identifier: B9:99:FA:5B:4E:08:9A:1A:F9:8F:E8:36:FA:3F:64:AB:8C:5B:D8:5C
Certificate issuer: /CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Certificate serial: 018BF26F97B8F516A4D474DD1B8C216E97CB
Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/uZn6W04Imhr5j-g2-j9kq4xb2Fw.roa
Signing time: Tue 21 Nov 2023 15:11:21 +0000
ROA not before: Tue 21 Nov 2023 15:11:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32708
IP address blocks: 103.91.58.0/24 maxlen: 24
103.91.56.0/24 maxlen: 24
103.91.57.0/24 maxlen: 24
103.91.59.0/24 maxlen: 24
103.108.188.0/24 maxlen: 24
103.108.189.0/24 maxlen: 24
185.211.78.0/24 maxlen: 24
123.253.106.0/24 maxlen: 24
123.253.107.0/24 maxlen: 24
103.115.204.0/24 maxlen: 24
103.115.205.0/24 maxlen: 24
85.92.101.0/24 maxlen: 24
85.92.102.0/24 maxlen: 24
85.92.103.0/24 maxlen: 24
85.92.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:6f:97:b8:f5:16:a4:d4:74:dd:1b:8c:21:6e:97:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Validity
Not Before: Nov 21 15:11:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b999fa5b4e089a1af98fe836fa3f64ab8c5bd85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d4:8c:03:11:8c:90:1f:2c:42:bd:61:ff:cd:
8a:31:bb:0a:fb:21:62:62:f6:b0:99:ce:b7:cd:ce:
8a:39:ff:a2:82:b8:26:d2:8f:39:f0:91:d5:cf:d0:
eb:8f:de:02:69:4e:30:89:06:78:0c:54:41:9c:f6:
35:c7:ff:04:3d:8c:90:ca:aa:cc:50:b3:ab:15:f5:
a7:8e:89:33:0e:ba:90:88:dd:60:43:0b:57:03:05:
ca:1f:56:cb:17:e9:a7:21:f3:54:85:d4:0c:1a:7b:
b9:09:9c:0d:d8:55:8f:64:37:c5:e3:78:0c:9b:b2:
5d:26:2d:55:82:8c:27:db:57:fb:6b:b2:80:8d:e5:
c4:9a:3f:86:a3:37:0e:b6:de:91:3b:95:86:f8:9a:
ca:28:f8:03:7f:b7:75:fa:44:de:04:3b:85:26:86:
98:ac:5c:85:9d:e9:00:e9:7b:11:4d:20:01:3e:52:
f1:e4:b5:5c:b4:f0:86:1d:7c:bb:8a:2a:0d:35:74:
f7:1c:11:64:c3:a5:a8:28:e5:4a:c1:b9:ee:f6:51:
e8:fc:50:7a:d3:ac:10:38:99:ce:cc:9a:29:89:37:
fd:ab:25:2e:38:37:35:6d:ce:ba:ba:f1:db:26:e0:
2d:49:ff:b4:34:25:94:e9:c3:06:b2:92:13:74:1b:
8d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:99:FA:5B:4E:08:9A:1A:F9:8F:E8:36:FA:3F:64:AB:8C:5B:D8:5C
X509v3 Authority Key Identifier:
keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/uZn6W04Imhr5j-g2-j9kq4xb2Fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.100.0/22
103.91.56.0/22
103.108.188.0/23
103.115.204.0/23
123.253.106.0/23
185.211.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:7e:e2:e6:68:25:dd:a6:bb:c9:cd:80:aa:88:82:63:90:e8:
a0:4c:b3:97:2b:84:2c:c9:5f:96:35:6b:5e:50:d0:e7:c8:aa:
09:a0:28:d9:b9:78:be:40:1e:b4:93:9d:cd:99:73:a5:06:d8:
2a:f5:58:d7:3f:2d:f5:9d:1b:fd:db:fd:74:72:96:75:2c:b5:
e5:97:8a:40:62:92:73:3f:e6:6b:47:a5:80:3a:84:21:09:a8:
4f:5e:f0:e0:2d:11:4e:5a:6c:7d:e2:60:fe:93:dc:82:94:26:
3b:e7:05:75:ad:ec:3c:04:4f:7d:5d:49:d9:e8:b1:83:8f:a0:
8d:45:ee:b6:f1:e7:e2:48:a2:7f:3e:2d:32:ab:15:7a:f6:47:
3f:0f:f4:b1:a0:b2:bf:54:e1:84:29:61:9c:ec:2e:8f:e1:cd:
de:ce:af:ec:69:97:ed:05:f5:bb:fb:30:62:91:76:be:33:20:
bc:bc:25:46:ab:64:d9:45:6e:ed:f2:4c:bb:2b:55:66:a7:f0:
f6:ef:15:f8:f8:96:53:f7:77:e6:8c:ac:0c:f7:02:d9:68:a7:
25:d3:f3:74:75:01:46:a3:ea:83:96:52:9e:d5:14:68:3b:f5:
27:1f:7f:cd:be:37:74:71:4c:c4:bd:59:97:6c:ce:61:12:07:
b5:6d:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:55 2024 by rpki-client on console-fra.rpki-client.org