Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/Pozb7fTIET2kjV-ckiGxS7eONpw.roa
File: Pozb7fTIET2kjV-ckiGxS7eONpw.roa (raw, json)
Hash identifier: pHaN80KSWJbD0/uZ6pgvk2aHh4P51VdFPCIN0o6NRZU=
Subject key identifier: 3E:8C:DB:ED:F4:C8:11:3D:A4:8D:5F:9C:92:21:B1:4B:B7:8E:36:9C
Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial: 018573280C1DFDB47CFC717803B0C6BF5ED0
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/Pozb7fTIET2kjV-ckiGxS7eONpw.roa
Signing time: Mon 02 Jan 2023 15:44:42 +0000
ROA not before: Mon 02 Jan 2023 15:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57395
IP address blocks: 176.98.165.0/24 maxlen: 24
176.98.166.0/24 maxlen: 24
176.98.160.0/24 maxlen: 24
176.98.161.0/24 maxlen: 24
176.98.162.0/24 maxlen: 24
176.98.163.0/24 maxlen: 24
176.98.164.0/24 maxlen: 24
176.98.167.0/24 maxlen: 24
185.254.0.0/24 maxlen: 24
185.181.170.0/24 maxlen: 24
185.181.171.0/24 maxlen: 24
185.181.168.0/24 maxlen: 24
2a0b:33c0:114::/48 maxlen: 48
2a0b:33c0:118::/48 maxlen: 48
2a0b:33c0:113::/48 maxlen: 48
2a0b:33c0:51::/48 maxlen: 48
2a0b:33c0:107::/48 maxlen: 48
2a0b:33c0:2::/48 maxlen: 48
2a0b:33c0:10::/48 maxlen: 48
2a0b:33c0:50::/48 maxlen: 48
2a0b:33c0:6::/48 maxlen: 48
2a0b:33c0:3::/48 maxlen: 48
2a0b:33c0:1::/48 maxlen: 48
2a0b:33c0:117::/48 maxlen: 48
2a0b:33c0:112::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 26 May 2023 18:58:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:0c:1d:fd:b4:7c:fc:71:78:03:b0:c6:bf:5e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Validity
Not Before: Jan 2 15:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e8cdbedf4c8113da48d5f9c9221b14bb78e369c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:44:40:cf:6e:01:92:70:f9:9d:ee:a3:45:7a:
3b:aa:c0:93:fa:72:af:e5:3b:6c:46:ec:ad:26:04:
77:2c:93:de:97:69:52:23:3d:19:11:85:5f:97:a7:
0f:d8:0e:b6:6f:83:55:59:f3:7b:e6:6e:a5:16:94:
8f:0e:25:64:37:96:64:66:05:0b:27:02:59:0f:4e:
85:96:3a:de:8a:a1:75:17:8b:1e:73:c8:b6:a6:fa:
65:a6:f8:a9:c3:58:95:20:56:ef:fa:59:24:ef:d3:
5f:ce:c8:a9:37:c9:06:80:fa:67:5d:68:29:d4:af:
1d:f0:8e:ab:ae:b4:a8:fc:9f:3d:c4:36:cc:bb:53:
bf:7a:21:8d:d3:3e:b3:01:87:2f:a1:d1:f6:a7:2a:
24:35:60:7f:23:3b:34:f4:41:96:7a:cb:12:88:48:
d3:8b:76:b6:49:cf:6c:3e:06:75:b7:55:5b:70:52:
22:56:ce:f1:48:b3:17:46:c6:c0:3a:00:a8:00:a7:
20:35:46:e1:5d:92:d8:3e:b8:e6:39:ca:e8:53:13:
28:27:9c:44:35:19:1e:a4:25:59:1d:73:6e:b4:1c:
70:9e:8b:55:63:40:3d:71:03:49:43:d2:5d:48:93:
9c:69:3b:36:82:be:d1:2a:96:d4:0d:bf:70:ea:1a:
2b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8C:DB:ED:F4:C8:11:3D:A4:8D:5F:9C:92:21:B1:4B:B7:8E:36:9C
X509v3 Authority Key Identifier:
keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/Pozb7fTIET2kjV-ckiGxS7eONpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.160.0/21
185.181.168.0/24
185.181.170.0/23
185.254.0.0/24
IPv6:
2a0b:33c0:1::-2a0b:33c0:3:ffff:ffff:ffff:ffff:ffff
2a0b:33c0:6::/48
2a0b:33c0:10::/48
2a0b:33c0:50::/47
2a0b:33c0:107::/48
2a0b:33c0:112::-2a0b:33c0:114:ffff:ffff:ffff:ffff:ffff
2a0b:33c0:117::-2a0b:33c0:118:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
26:7b:96:19:8a:9e:cd:da:b1:ad:ce:c2:9d:15:f2:c8:38:68:
b6:40:cf:b1:95:00:73:4a:9d:6f:9a:0d:9d:ce:e7:9c:98:77:
70:89:34:3b:5e:f1:45:99:3a:2f:34:67:cc:3e:44:7f:1c:d6:
db:4f:c9:b4:c5:ba:47:c9:45:a9:94:66:70:cf:97:9b:cf:6f:
8a:57:be:17:6a:cc:a4:1e:67:25:52:0c:e4:c6:f1:86:88:16:
45:27:0e:34:af:40:d6:67:6f:c8:cf:17:74:4e:06:dc:5f:3b:
96:38:07:c2:3f:29:6e:62:b4:dd:a8:f4:d5:e2:36:e3:3c:52:
a3:46:39:69:f9:44:76:19:d9:16:d8:6c:10:80:ad:4c:d9:49:
1b:2e:db:8a:c1:94:61:49:10:20:80:e0:a3:a3:4d:6f:8c:72:
4d:c3:09:36:e6:98:cf:70:a3:2a:81:6c:f6:74:4a:0d:f0:2d:
de:41:e1:69:6c:a6:82:4e:22:58:ae:43:88:6a:b3:9d:82:2d:
76:66:97:d8:07:3e:32:81:a3:11:cd:6e:28:ec:2a:bc:ec:6a:
1b:2c:4e:54:81:ca:ae:ee:a2:24:82:7a:a4:33:bc:62:e3:b9:
4a:3c:0b:fb:a1:60:2a:21:14:54:9d:f5:76:c5:cb:79:49:98:
e8:4e:6e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:08 2024 by rpki-client on console-ams.rpki-client.org