Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/mX4Pfnd2mJ7f9w9XCbRVd_BWb5k.roa
File: mX4Pfnd2mJ7f9w9XCbRVd_BWb5k.roa (raw, json)
Hash identifier: DrRnNz7zajp6t9WP9sS3RCpP1sx53rHHycsfsA3Q7BA=
Subject key identifier: 99:7E:0F:7E:77:76:98:9E:DF:F7:0F:57:09:B4:55:77:F0:56:6F:99
Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial: 01856C9CED9662B9E1A2DD66D6AF27CFAB13
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/mX4Pfnd2mJ7f9w9XCbRVd_BWb5k.roa
Signing time: Sun 01 Jan 2023 09:15:01 +0000
ROA not before: Sun 01 Jan 2023 09:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205575
IP address blocks: 185.234.159.0/24 maxlen: 24
185.234.156.0/22 maxlen: 22
185.234.156.0/24 maxlen: 24
185.234.158.0/24 maxlen: 24
185.234.157.0/24 maxlen: 24
185.137.105.0/24 maxlen: 24
185.137.104.0/24 maxlen: 24
185.137.104.0/22 maxlen: 22
185.137.106.0/24 maxlen: 24
185.137.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:ed:96:62:b9:e1:a2:dd:66:d6:af:27:cf:ab:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Validity
Not Before: Jan 1 09:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=997e0f7e7776989edff70f5709b45577f0566f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:d1:b9:5e:43:69:e0:55:3c:e7:e4:f5:0c:
cb:ac:fe:5c:b3:9c:fc:04:a2:e0:60:c3:a2:09:81:
eb:b4:c3:62:47:9a:80:eb:54:40:84:06:87:2c:7b:
01:c0:18:a3:43:27:0b:fd:91:60:f6:71:bf:c2:11:
cd:b1:1c:74:f2:99:0f:a3:0f:8d:1b:7d:79:ed:04:
48:70:20:1e:f4:bc:b4:c8:43:42:9d:7f:a0:a3:78:
7b:41:e2:a9:2e:31:c7:17:b4:b7:a4:7f:34:f8:c7:
55:bc:31:7f:00:8f:76:ba:c5:2b:d6:e0:a3:5a:ca:
fb:63:7f:94:5d:b5:a2:ba:e0:9a:85:10:2e:ec:20:
22:74:31:8a:92:29:81:fb:1e:8f:fd:33:ef:8d:fe:
8e:92:cf:fb:70:72:04:a2:96:69:20:e3:97:b6:8a:
f8:e7:02:b8:0f:43:b5:17:91:c0:44:bd:66:9c:1e:
15:02:7f:2b:9a:b3:b1:f7:cb:bc:c4:50:af:d8:5f:
14:56:b7:43:f0:9c:6f:09:3b:ff:c5:8e:ca:79:50:
d2:fb:d9:68:0f:e1:4c:70:1e:fb:3e:df:9b:7b:95:
06:2d:f4:44:04:dc:3e:fc:f8:3f:f3:35:8b:2b:db:
c8:bd:da:c7:a6:6a:a8:2c:6c:67:cb:fa:1f:fc:dd:
fd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7E:0F:7E:77:76:98:9E:DF:F7:0F:57:09:B4:55:77:F0:56:6F:99
X509v3 Authority Key Identifier:
keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/mX4Pfnd2mJ7f9w9XCbRVd_BWb5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.104.0/22
185.234.156.0/22
Signature Algorithm: sha256WithRSAEncryption
44:2d:85:1b:d0:3d:0d:4f:d6:b0:27:34:77:37:b9:1d:86:0f:
1b:a3:95:67:8b:96:53:8a:1b:b5:3a:fa:91:e0:14:7c:9e:88:
0a:dd:9b:da:da:8f:de:64:a7:3d:bb:3e:43:f5:f0:c5:c6:f4:
aa:04:40:68:29:cc:2f:93:69:49:3e:f5:73:6d:92:74:81:6e:
cd:a3:9d:58:ee:0f:3a:e6:ff:f3:44:f5:56:49:64:ab:3f:00:
74:2f:df:5a:c2:22:b9:c2:fb:77:07:e2:07:bc:2d:41:f6:ea:
21:3b:ce:da:60:e1:91:70:b6:fb:28:6c:5c:d1:f6:20:56:ae:
dc:39:f0:fd:39:f1:a0:7a:d5:8c:26:53:75:54:66:2c:72:ed:
8e:fc:e2:c2:a3:53:9d:a7:cf:90:47:58:4f:90:f3:38:4b:40:
64:a0:43:6c:49:e3:ca:5c:f9:ed:f9:93:b6:e3:38:38:70:36:
22:ce:47:8f:54:61:07:83:1d:c2:16:6d:d3:9b:f4:bf:a8:61:
93:31:d4:ea:c3:3b:f5:8e:ee:15:4c:f5:2a:9c:87:32:d5:87:
74:59:85:11:ed:5c:b3:76:b0:eb:25:ae:a3:d7:32:ff:43:da:
89:ef:95:03:14:72:ad:d6:92:8d:29:32:ad:aa:ee:60:cf:68:
f7:db:72:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:27 2024 by rpki-client on console-fra.rpki-client.org