Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/AeNJ-R_gYpDJAfkKpxTTXV9cAUE.roa
File: AeNJ-R_gYpDJAfkKpxTTXV9cAUE.roa (raw, json)
Hash identifier: one6WMeM3/3atws1IGuWabW7DCOGkcQAibbHnIuGwBA=
Subject key identifier: 01:E3:49:F9:1F:E0:62:90:C9:01:F9:0A:A7:14:D3:5D:5F:5C:01:41
Certificate issuer: /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial: 018A45B06C6DF079587C155A7C8FEFB6A0DE
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/AeNJ-R_gYpDJAfkKpxTTXV9cAUE.roa
Signing time: Wed 30 Aug 2023 09:05:04 +0000
ROA not before: Wed 30 Aug 2023 09:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28978
IP address blocks: 185.115.44.0/22 maxlen: 22
176.32.160.0/20 maxlen: 20
185.115.44.0/24 maxlen: 24
176.32.170.0/24 maxlen: 24
176.32.168.0/24 maxlen: 24
195.39.216.0/23 maxlen: 23
2a00:8a40::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:45:b0:6c:6d:f0:79:58:7c:15:5a:7c:8f:ef:b6:a0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Validity
Not Before: Aug 30 09:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01e349f91fe06290c901f90aa714d35d5f5c0141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:76:fa:1c:43:3c:e9:4d:79:80:1d:ec:f0:
d6:74:86:11:be:8f:21:04:08:67:7d:50:a8:ce:d8:
bc:b1:d4:28:a9:c5:82:bf:66:40:4b:9c:18:be:4f:
d8:c1:bd:7f:8c:34:06:15:68:12:92:89:22:04:f4:
42:56:ae:87:e7:92:29:87:08:6d:dd:84:c1:9f:33:
b0:67:b2:52:bb:5e:7a:51:33:d1:d6:80:11:ab:d7:
a5:00:0f:fb:5c:4d:fd:5c:c8:15:a0:15:b8:e0:78:
03:c9:11:80:30:17:98:ff:36:ce:70:08:f3:ca:6d:
8f:50:14:13:1c:4f:c2:f8:8f:bc:6d:46:8f:d8:9b:
26:73:4c:7a:58:c2:a4:cb:8b:24:e3:f2:5b:1c:7a:
c5:e6:75:e2:09:04:36:97:27:31:5f:a8:f2:a2:a9:
cc:16:95:de:3b:93:47:4b:43:de:a6:6b:b8:7e:96:
f0:57:51:30:43:58:f9:44:e1:6b:1a:6c:ee:8e:75:
06:82:d4:02:92:97:5f:a7:e4:d5:53:5c:e9:9b:a6:
3b:cd:be:46:fa:a4:aa:be:15:fa:26:26:2c:e9:21:
5d:19:04:64:60:e6:28:64:2f:d8:a5:3e:59:3a:13:
7d:3f:b1:9a:ac:f3:9a:70:20:29:58:b6:a3:b9:54:
c1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E3:49:F9:1F:E0:62:90:C9:01:F9:0A:A7:14:D3:5D:5F:5C:01:41
X509v3 Authority Key Identifier:
keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/AeNJ-R_gYpDJAfkKpxTTXV9cAUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.160.0/20
185.115.44.0/22
195.39.216.0/23
IPv6:
2a00:8a40::/32
Signature Algorithm: sha256WithRSAEncryption
1a:92:10:2b:80:35:75:af:e6:91:f4:a2:c1:1d:f1:ff:fb:ec:
c7:d5:77:32:85:e2:a6:c0:8e:3e:5e:2b:e3:63:6f:25:78:9f:
1a:b7:79:6e:b4:2d:f5:73:cc:63:c6:79:aa:cf:37:6a:ce:9c:
18:f0:25:c1:56:43:1d:09:91:41:44:1c:02:89:65:e8:27:b3:
a9:e7:fa:ce:14:9b:0a:8d:11:5c:2f:78:7a:5e:f4:8f:64:57:
d1:43:27:eb:25:91:79:c9:f1:13:da:88:f2:e2:13:86:28:25:
7f:29:51:05:92:0a:38:20:3f:09:23:e3:f0:2a:c4:7a:5b:4a:
a0:9d:09:30:f6:1f:cd:78:d2:39:8d:58:ad:00:b6:88:eb:d4:
d4:82:ad:a2:dd:25:b6:42:14:69:f6:3f:98:9b:23:b1:c1:8f:
8d:d8:e1:74:6f:2e:cc:ab:0c:bf:0d:b6:f5:1f:00:ec:18:5a:
8d:8d:cd:c3:97:f2:b9:f5:72:e3:e2:ad:d3:d1:95:58:f6:7b:
c8:6d:98:a7:8d:7b:93:39:02:82:ef:e9:45:5d:26:46:d0:a0:
54:a6:a5:72:42:90:ec:79:2c:88:d6:26:9a:40:d0:7c:7b:98:
35:da:70:6d:3b:85:eb:af:2c:6f:48:7f:f6:34:9a:0f:fc:ce:
ad:30:51:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:03 2024 by rpki-client on console-fra.rpki-client.org