Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/I1NhGBOxyMgrdthnlsd21z5ZWUM.roa
File: I1NhGBOxyMgrdthnlsd21z5ZWUM.roa (raw, json)
Hash identifier: G1rPEvyDIT5SXGrhX19AW3TVQZdGDoLRlwgYHQcPRAU=
Subject key identifier: 23:53:61:18:13:B1:C8:C8:2B:76:D8:67:96:C7:76:D7:3E:59:59:43
Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial: 018570F08850F55D64AD5DBDC976DCEA6143
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/I1NhGBOxyMgrdthnlsd21z5ZWUM.roa
Signing time: Mon 02 Jan 2023 05:24:49 +0000
ROA not before: Mon 02 Jan 2023 05:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15817
IP address blocks: 178.16.56.0/21 maxlen: 21
185.247.148.0/24 maxlen: 24
185.247.149.0/24 maxlen: 24
185.247.151.0/24 maxlen: 24
185.215.156.0/22 maxlen: 22
185.227.112.0/22 maxlen: 22
193.53.246.0/23 maxlen: 23
193.53.250.0/23 maxlen: 23
185.243.132.0/22 maxlen: 22
185.166.20.0/22 maxlen: 22
188.94.248.0/21 maxlen: 21
31.220.120.0/21 maxlen: 21
45.144.184.0/22 maxlen: 22
37.202.0.0/21 maxlen: 21
46.30.56.0/21 maxlen: 21
176.52.240.0/21 maxlen: 21
185.221.104.0/22 maxlen: 22
185.233.52.0/22 maxlen: 22
185.181.132.0/22 maxlen: 22
185.224.152.0/22 maxlen: 22
185.15.192.0/22 maxlen: 22
185.237.64.0/22 maxlen: 22
2a03:2a00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:88:50:f5:5d:64:ad:5d:bd:c9:76:dc:ea:61:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Validity
Not Before: Jan 2 05:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2353611813b1c8c82b76d86796c776d73e595943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:5a:d8:1c:1d:28:3c:9c:c9:1c:ee:ab:09:
19:b1:68:d8:c4:31:49:77:7f:61:66:ab:d8:80:27:
e6:17:4f:ab:a3:cb:4b:8f:2a:38:de:36:0f:07:64:
8e:17:42:8b:f3:5c:05:29:02:1e:9c:05:fd:3a:09:
4d:2e:e2:20:ed:0a:58:64:79:90:43:2d:9c:47:5d:
1e:ce:66:3f:53:bd:c2:cb:37:c5:c1:47:80:ba:1c:
3f:b9:32:82:c4:dc:5c:cf:12:85:87:6e:59:1a:9e:
88:21:8f:32:8e:8a:1b:4d:c8:da:71:db:48:01:76:
5d:e0:bb:d8:3d:bb:36:4e:c0:a3:da:66:81:09:4b:
1e:de:9b:3c:36:65:5f:01:e4:8a:45:c4:19:14:a8:
22:5d:e5:10:92:46:db:ce:0d:30:c2:d2:89:9d:3f:
58:a1:24:64:12:32:43:eb:12:01:b0:28:2a:be:29:
3b:d1:67:55:ee:e6:1f:79:1b:ec:49:b9:6d:1e:3e:
e6:3f:55:61:0f:e0:5d:35:96:7f:df:b3:fd:9e:8d:
b7:83:ea:26:44:83:f9:3b:b9:e4:37:6b:fd:5a:b7:
b6:03:f6:3b:bf:cc:74:0b:1d:f2:eb:de:82:2a:9e:
01:ab:42:36:8d:85:a6:68:27:8e:59:7d:e8:9e:df:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:53:61:18:13:B1:C8:C8:2B:76:D8:67:96:C7:76:D7:3E:59:59:43
X509v3 Authority Key Identifier:
keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/I1NhGBOxyMgrdthnlsd21z5ZWUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.120.0/21
37.202.0.0/21
45.144.184.0/22
46.30.56.0/21
176.52.240.0/21
178.16.56.0/21
185.15.192.0/22
185.166.20.0/22
185.181.132.0/22
185.215.156.0/22
185.221.104.0/22
185.224.152.0/22
185.227.112.0/22
185.233.52.0/22
185.237.64.0/22
185.243.132.0/22
185.247.148.0/23
185.247.151.0/24
188.94.248.0/21
193.53.246.0/23
193.53.250.0/23
IPv6:
2a03:2a00::/29
Signature Algorithm: sha256WithRSAEncryption
b6:21:6f:42:17:e8:9f:ae:5b:b9:8e:ed:b4:c3:37:28:db:d5:
78:7b:34:4d:5a:5e:1f:23:67:06:57:47:d3:50:54:eb:36:30:
e0:b0:22:0e:15:07:1b:a2:93:12:d6:37:be:73:2b:35:63:a0:
5d:5e:09:d3:7b:c8:df:e9:fb:e9:9d:67:a9:d6:0e:53:75:87:
d1:ab:0d:98:e4:7e:f3:45:61:0e:64:89:9a:2b:73:03:b6:85:
16:42:c4:bb:5e:84:ed:c6:de:06:78:b5:a6:8a:3e:4e:cc:a8:
c0:16:7b:ea:9f:1d:90:01:93:64:ea:c7:35:14:cf:39:a4:bd:
2b:0f:77:bc:51:fd:6e:48:04:2f:c7:4f:09:36:25:53:a6:58:
1d:3d:63:e4:2e:74:04:3a:70:f7:f5:03:41:a1:77:f4:2d:9a:
36:40:50:5e:23:0c:04:0b:13:b2:1a:f3:55:6a:30:50:ab:84:
3d:8b:9c:b1:9a:86:e7:f2:ab:5d:41:9f:28:d3:b0:e7:71:dd:
1c:00:04:bd:14:96:2b:3d:4c:8e:da:69:da:0f:bd:d0:8b:61:
bb:17:01:7a:69:94:98:fc:78:d5:ec:13:7f:17:fb:52:a9:54:
41:d2:86:c3:83:89:05:46:6a:39:e0:37:b7:7a:06:0e:d1:a1:
31:01:e9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:01 2024 by rpki-client on console-ams.rpki-client.org