Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/SnXrrrPitFVY8xLgp6zyBqZPpTU.roa
File: SnXrrrPitFVY8xLgp6zyBqZPpTU.roa (raw, json)
Hash identifier: u1m5v5MVjEkZouGqxdz5/P1aq1uMmuzFTZIZw2Pdl88=
Subject key identifier: 4A:75:EB:AE:B3:E2:B4:55:58:F3:12:E0:A7:AC:F2:06:A6:4F:A5:35
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 0185718305FC357E6BC569CDBF6D0862E950
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/SnXrrrPitFVY8xLgp6zyBqZPpTU.roa
Signing time: Mon 02 Jan 2023 08:04:50 +0000
ROA not before: Mon 02 Jan 2023 08:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24852
IP address blocks: 213.164.112.0/22 maxlen: 22
88.223.96.0/22 maxlen: 22
213.164.116.0/23 maxlen: 23
213.164.118.0/24 maxlen: 24
88.223.104.0/21 maxlen: 21
84.55.0.0/18 maxlen: 18
88.223.112.0/20 maxlen: 20
88.223.128.0/22 maxlen: 22
84.55.34.0/23 maxlen: 23
88.223.144.0/21 maxlen: 21
213.164.96.0/20 maxlen: 20
79.132.160.0/19 maxlen: 19
88.223.152.0/24 maxlen: 24
88.223.153.0/24 maxlen: 24
88.223.160.0/20 maxlen: 20
84.55.56.0/23 maxlen: 23
84.55.58.0/23 maxlen: 23
84.55.60.0/23 maxlen: 23
84.55.62.0/23 maxlen: 23
95.173.32.0/19 maxlen: 19
88.222.0.0/15 maxlen: 15
185.104.176.0/22 maxlen: 22
217.147.41.0/24 maxlen: 24
217.147.44.0/23 maxlen: 23
217.147.40.0/24 maxlen: 24
217.147.46.0/24 maxlen: 24
217.147.47.0/24 maxlen: 24
88.223.0.0/18 maxlen: 18
217.147.34.0/24 maxlen: 24
217.147.35.0/24 maxlen: 24
217.147.36.0/23 maxlen: 23
217.147.38.0/24 maxlen: 24
217.147.32.0/20 maxlen: 20
2a01:7c80::/32 maxlen: 32
2a01:7c80::/33 maxlen: 33
Validation: Failed, certificate revoked on Wed 06 Dec 2023 15:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:05:fc:35:7e:6b:c5:69:cd:bf:6d:08:62:e9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jan 2 08:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a75ebaeb3e2b45558f312e0a7acf206a64fa535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7d:c4:65:41:e0:60:83:46:21:2d:49:94:df:
5f:b4:77:07:d0:80:91:a7:15:4d:74:1b:5c:a5:3f:
98:b9:19:d6:ab:ed:9f:14:75:d7:dc:a7:7c:e6:8e:
68:cf:ca:29:79:27:1b:aa:36:87:68:46:6e:06:8a:
5a:a6:85:8b:bd:51:a2:ed:dc:21:4f:4c:27:8f:8b:
a5:d3:e8:15:86:0e:77:38:cb:6b:d5:5a:2d:8e:78:
7b:dd:fb:c8:99:71:3d:98:cf:3c:ad:62:40:b6:14:
b2:db:df:9a:8f:1b:08:63:ea:2c:36:b2:b9:9d:9a:
cc:9e:64:51:08:1b:ef:4d:af:c2:8e:1e:c2:80:7c:
a1:23:5f:31:11:80:19:5c:9a:ef:39:44:36:ee:55:
59:8e:86:92:b6:ed:8c:5b:67:da:2c:77:68:bf:1c:
63:0a:dd:5d:37:92:b9:56:ff:c7:fa:c0:3c:3d:52:
a4:58:e3:7e:59:57:84:1b:49:dd:a4:0a:3c:3a:49:
30:67:e1:d4:d2:3d:89:24:68:7f:7f:d3:ba:9e:e8:
59:5f:b3:1c:5c:d3:f0:6f:53:c4:ef:73:06:5c:0c:
82:c7:be:e0:60:42:39:31:f8:30:a1:4c:cd:36:d4:
5b:64:d2:a0:27:80:6c:61:c8:fb:90:44:15:7d:5e:
94:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:75:EB:AE:B3:E2:B4:55:58:F3:12:E0:A7:AC:F2:06:A6:4F:A5:35
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/SnXrrrPitFVY8xLgp6zyBqZPpTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.160.0/19
84.55.0.0/18
88.222.0.0/15
95.173.32.0/19
185.104.176.0/22
213.164.96.0-213.164.118.255
217.147.32.0/20
IPv6:
2a01:7c80::/32
Signature Algorithm: sha256WithRSAEncryption
6d:ac:54:cd:e0:9b:61:e3:f7:f9:2e:63:f4:a3:59:89:d8:62:
ff:10:6c:f4:4e:85:f2:40:18:64:7f:42:f7:94:ff:46:7a:81:
aa:d8:d5:c1:3b:54:19:62:73:dd:dd:7f:58:28:27:47:6e:5b:
39:71:3b:66:7e:91:69:1b:31:f3:99:4c:03:59:dd:39:b1:7d:
92:6c:9d:8a:45:c5:ed:d9:92:f4:a8:a5:70:c5:c6:9e:4c:e1:
c1:5a:37:9a:dc:c3:5f:34:aa:93:4c:6e:8b:6f:b6:62:ca:32:
9d:cb:5b:e5:9f:93:70:ea:f6:91:c8:b9:f9:56:5e:33:65:9e:
3a:06:b0:6c:e5:40:09:90:bd:dd:1a:ed:4e:c9:30:3b:a8:7a:
0d:72:2c:7e:12:73:09:26:3a:c0:53:98:ae:9d:40:1d:0d:d5:
e0:b0:3e:01:8e:21:c1:38:f4:60:ca:80:9d:70:fe:5e:c4:eb:
79:b0:75:5f:48:ed:11:ab:3d:56:7c:3e:cf:e6:99:46:d6:2d:
54:42:90:41:ec:a0:70:45:08:38:c9:75:ec:29:62:1e:de:f3:
28:66:3c:5b:a3:0b:0b:4a:c6:04:b5:8c:51:95:7b:49:a7:94:
fa:a7:a4:8d:68:fb:67:79:8c:74:a4:4f:c8:03:25:19:2b:1e:
be:71:04:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:15 2024 by rpki-client on console-fra.rpki-client.org