Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/PBvgXsw92OEPihygsXvHAIvHG8w.roa
File: PBvgXsw92OEPihygsXvHAIvHG8w.roa (raw, json)
Hash identifier: bxaiKs3aHjXsw5WPFTkDInHZ/vfF+Xq4/jMh92uj3M0=
Subject key identifier: 3C:1B:E0:5E:CC:3D:D8:E1:0F:8A:1C:A0:B1:7B:C7:00:8B:C7:1B:CC
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 018DE05E3B1136D2DD39B27A7B7B7D9B93AA
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/PBvgXsw92OEPihygsXvHAIvHG8w.roa
Signing time: Sun 25 Feb 2024 13:04:48 +0000
ROA not before: Sun 25 Feb 2024 13:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 5.183.240.0/23 maxlen: 23
5.183.242.0/23 maxlen: 23
45.14.80.0/24 maxlen: 24
45.14.81.0/24 maxlen: 24
45.86.24.0/22 maxlen: 22
92.119.24.0/23 maxlen: 23
92.119.26.0/23 maxlen: 23
171.22.62.0/23 maxlen: 23
185.45.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 17:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e0:5e:3b:11:36:d2:dd:39:b2:7a:7b:7b:7d:9b:93:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Feb 25 13:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c1be05ecc3dd8e10f8a1ca0b17bc7008bc71bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:39:ba:f9:84:85:63:99:11:b4:50:35:fd:2f:
2d:6b:57:14:8c:a1:a6:9d:9a:af:16:d5:2b:c0:ff:
66:27:92:c4:a8:33:97:6e:92:33:7b:82:3a:00:38:
dd:2c:70:df:b9:27:1c:59:e5:e4:75:f5:97:b4:35:
db:9d:3e:b8:21:1c:47:12:7a:e6:ea:ff:f6:c2:7b:
c7:39:91:08:09:46:7e:62:2c:ae:b5:ce:18:c8:fd:
1e:37:7e:d1:13:71:14:9a:80:e0:70:28:e9:01:be:
c0:32:ff:db:6b:61:16:2e:1b:5d:f8:63:88:b4:66:
24:7d:51:52:9a:53:f4:34:84:40:3c:c8:3f:ee:b5:
29:6b:7f:f9:07:fe:61:ef:d8:03:7a:f0:c5:f2:1a:
a9:be:c6:5d:e9:e6:f4:41:e4:83:19:7f:46:78:61:
6d:1a:e0:24:53:4c:ae:bb:89:1f:cf:74:7c:a1:30:
7f:b8:58:fa:e3:57:25:18:67:75:1c:6c:92:99:fa:
93:09:f2:e3:d5:cf:03:e8:58:86:c5:79:ea:5b:c7:
dd:a7:fc:e2:8d:25:03:a7:b2:51:06:6d:22:74:3b:
4b:13:70:06:ce:d7:35:c7:11:db:24:0f:2d:7b:a1:
81:d5:0e:25:41:5c:c4:11:8e:11:2e:03:f8:e5:8c:
f9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1B:E0:5E:CC:3D:D8:E1:0F:8A:1C:A0:B1:7B:C7:00:8B:C7:1B:CC
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/PBvgXsw92OEPihygsXvHAIvHG8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.240.0/22
45.14.80.0/23
45.86.24.0/22
92.119.24.0/22
171.22.62.0/23
185.45.94.0/24
Signature Algorithm: sha256WithRSAEncryption
82:88:00:e1:0e:7a:f1:e0:29:81:bb:2b:77:ef:27:30:1f:6b:
4f:89:98:36:a1:44:be:00:05:7c:47:0c:a3:90:e5:02:7d:c8:
61:95:e8:ca:40:c5:6f:d5:e3:ae:51:5e:e0:37:98:0a:30:ca:
dc:fc:34:52:84:b1:87:11:b8:03:c7:55:50:e0:85:0b:c4:16:
b4:b9:e2:40:93:a8:36:34:9c:75:0c:72:16:9c:87:43:1a:15:
56:45:f9:24:be:4a:b6:76:01:e2:41:ba:f5:0b:0c:0e:8f:33:
cf:f7:d3:4a:cc:57:79:56:f7:54:87:87:1f:21:70:ee:3e:4a:
52:1c:19:01:3b:ee:b5:fb:c5:6a:ed:ed:2f:95:8b:3e:b4:d5:
09:6d:62:0f:5f:71:59:4f:fe:33:9d:73:d6:bc:90:bf:6f:23:
84:46:9a:ac:8e:14:a3:ba:bf:66:03:df:5c:c1:13:74:6a:db:
49:d3:da:a1:33:32:12:1b:a5:4e:b9:17:5d:fd:95:43:3d:27:
1d:97:eb:87:50:08:e6:47:1a:ac:b4:58:b5:16:2f:3c:67:ab:
19:da:12:96:b2:11:6c:0c:7f:aa:6d:05:d6:c9:09:2c:54:1c:
47:04:3a:c8:77:24:6d:43:af:45:12:95:ab:d1:6c:a7:ff:ff:
a0:be:36:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 19:38:39 2024 by rpki-client on console-ams.rpki-client.org