Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RDREjN0gRnaO_Xt2gyu95onBYS0.roa
File: RDREjN0gRnaO_Xt2gyu95onBYS0.roa (raw, json)
Hash identifier: NhaTU6BSRP5iK1/+FFhtiSpJiJPurwrQQWAQtaLVCLw=
Subject key identifier: 44:34:44:8C:DD:20:46:76:8E:FD:7B:76:83:2B:BD:E6:89:C1:61:2D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018D5525898D9273EBAAF7EF1F19F43A3ED0
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RDREjN0gRnaO_Xt2gyu95onBYS0.roa
Signing time: Mon 29 Jan 2024 12:15:39 +0000
ROA not before: Mon 29 Jan 2024 12:15:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6663
IP address blocks: 81.180.201.0/24 maxlen: 24
81.180.206.0/24 maxlen: 24
81.181.88.0/21 maxlen: 21
193.226.61.0/24 maxlen: 24
193.226.113.0/24 maxlen: 24
193.226.114.0/24 maxlen: 24
193.226.117.0/24 maxlen: 24
193.226.119.0/24 maxlen: 24
193.226.122.0/24 maxlen: 24
193.226.124.0/24 maxlen: 24
193.226.126.0/24 maxlen: 24
193.230.176.0/24 maxlen: 24
193.230.178.0/24 maxlen: 24
193.230.181.0/24 maxlen: 24
193.230.183.0/24 maxlen: 24
193.230.200.0/24 maxlen: 24
193.230.201.0/24 maxlen: 24
193.231.65.0/24 maxlen: 24
193.231.68.0/24 maxlen: 24
193.231.73.0/24 maxlen: 24
193.231.76.0/24 maxlen: 24
193.231.78.0/24 maxlen: 24
193.231.80.0/24 maxlen: 24
193.231.137.0/24 maxlen: 24
194.153.246.0/24 maxlen: 24
217.156.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 08:42:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:55:25:89:8d:92:73:eb:aa:f7:ef:1f:19:f4:3a:3e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 29 12:15:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4434448cdd2046768efd7b76832bbde689c1612d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a5:ce:de:b9:b2:e8:91:98:7e:c1:27:5a:a2:
37:ae:06:78:c5:98:36:d9:c5:6c:15:38:c0:7c:79:
68:88:fb:35:59:d2:0a:4c:cb:5a:13:9b:4d:28:78:
9b:e5:07:8c:49:e7:d5:ee:cb:06:52:eb:aa:1b:51:
20:4d:f8:fb:27:ff:46:2f:9d:07:78:7f:6a:03:01:
4f:fb:0c:3a:0e:23:f5:26:ae:0a:19:8f:35:19:ef:
5e:37:e6:de:b0:24:ef:cc:43:c1:a3:3d:a2:bc:d0:
94:f5:81:8d:40:ef:c0:f4:e4:08:20:bc:89:ce:72:
d2:f1:43:09:94:86:43:f8:15:c6:a0:d8:fd:a7:a1:
9a:7d:37:9e:a3:d0:e6:ec:35:26:0c:d0:7d:66:dd:
b0:9b:a5:8c:b8:bf:25:7c:d1:65:6d:79:93:62:c7:
0c:94:c0:2e:3b:77:2f:69:fa:2e:39:47:44:0f:70:
38:c0:4e:5d:fb:04:21:08:50:0b:f3:1b:de:6e:ad:
8c:d2:ed:95:bf:88:e6:5d:0e:9c:4c:09:ed:7e:ee:
1e:ee:ea:27:98:b6:30:d0:c7:16:56:ee:bd:de:13:
94:b2:e7:52:c5:b2:24:d3:9b:2c:48:08:dd:b8:9e:
64:65:b5:a9:a5:bd:74:b8:e9:91:45:ab:27:23:fe:
cf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:34:44:8C:DD:20:46:76:8E:FD:7B:76:83:2B:BD:E6:89:C1:61:2D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RDREjN0gRnaO_Xt2gyu95onBYS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.201.0/24
81.180.206.0/24
81.181.88.0/21
193.226.61.0/24
193.226.113.0-193.226.114.255
193.226.117.0/24
193.226.119.0/24
193.226.122.0/24
193.226.124.0/24
193.226.126.0/24
193.230.176.0/24
193.230.178.0/24
193.230.181.0/24
193.230.183.0/24
193.230.200.0/23
193.231.65.0/24
193.231.68.0/24
193.231.73.0/24
193.231.76.0/24
193.231.78.0/24
193.231.80.0/24
193.231.137.0/24
194.153.246.0/24
217.156.53.0/24
Signature Algorithm: sha256WithRSAEncryption
68:00:14:48:5a:2d:92:8d:77:8e:19:c7:54:18:5d:9f:69:84:
db:ec:38:47:5b:4e:1d:00:7c:fe:20:df:fc:e8:9a:b4:81:9c:
ec:89:f3:b6:30:b7:3b:45:6e:12:ca:83:f5:b1:28:ac:24:65:
b5:e7:6a:7f:d6:da:6a:88:0e:00:30:04:1a:da:28:a7:fa:ca:
bf:9a:25:17:07:24:0e:1e:1a:a8:ad:f1:f6:07:7f:1e:25:bd:
aa:b7:8f:cc:a5:29:8d:12:ec:8e:1c:98:17:e4:a6:2f:35:0e:
3b:47:b7:32:71:9e:48:f4:39:db:2d:1d:58:27:5f:43:0b:9b:
a4:1c:44:e6:d7:96:b9:92:c0:57:3f:36:42:e1:5e:56:d0:43:
4f:ef:d7:3a:20:73:14:96:75:f3:95:ca:00:8c:23:30:02:3e:
c6:84:c6:c1:42:1c:0f:02:67:68:c8:f4:74:c9:88:d3:f5:ba:
a0:f4:20:ea:ed:2b:8b:f3:bd:99:2a:98:1f:85:64:6e:50:8e:
58:9a:ee:d9:f5:7f:d3:64:25:c1:7f:da:54:30:d0:d9:bb:14:
e2:c8:12:91:18:db:70:77:78:d9:6d:8a:ab:f3:ee:35:a8:2b:
8f:ab:a7:d7:5a:de:c4:8d:35:cf:c6:1c:f8:2b:b8:7b:0d:28:
84:14:a8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 11:35:08 2024 by rpki-client on console-ams.rpki-client.org