Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/4leZ8eyVnPxhw6Ildc2U3aS3Tio.roa
File: 4leZ8eyVnPxhw6Ildc2U3aS3Tio.roa (raw, json)
Hash identifier: wXo/Nm3qKm6CtzamyhJQYhNKlx1jRMJBuVNsrqC4mtg=
Subject key identifier: E2:57:99:F1:EC:95:9C:FC:61:C3:A2:25:75:CD:94:DD:A4:B7:4E:2A
Certificate issuer: /CN=d44de659759b0274124a7b481d0976840b7ade06
Certificate serial: 0187AD6D1C2311100E334F6F385B7AAF5830
Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/4leZ8eyVnPxhw6Ildc2U3aS3Tio.roa
Signing time: Sun 23 Apr 2023 09:23:41 +0000
ROA not before: Sun 23 Apr 2023 09:23:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34714
IP address blocks: 185.238.56.0/22 maxlen: 22
193.238.56.0/22 maxlen: 22
91.201.76.0/22 maxlen: 22
91.213.34.0/24 maxlen: 24
37.143.168.0/24 maxlen: 24
37.143.175.0/24 maxlen: 24
193.32.140.0/24 maxlen: 24
2a03:8f80::/32 maxlen: 32
2a03:8f81::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ad:6d:1c:23:11:10:0e:33:4f:6f:38:5b:7a:af:58:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06
Validity
Not Before: Apr 23 09:23:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e25799f1ec959cfc61c3a22575cd94dda4b74e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ee:c2:59:9d:8c:b3:e1:74:90:b4:be:a1:3c:
6a:59:51:22:ac:07:da:1a:53:ff:82:ca:fa:5a:a5:
40:30:6c:6c:4f:45:fa:02:9d:6c:2f:01:3b:e2:9e:
97:15:cb:77:7a:b0:00:00:d1:bb:54:43:a0:c0:05:
53:cd:25:62:0d:73:93:5b:6f:5f:86:39:61:b7:89:
b2:97:a1:92:d9:c3:f3:6e:05:ff:c3:cf:f9:88:d9:
c1:89:ee:8f:e8:5b:59:ea:1a:be:df:04:e3:3e:d9:
ec:1e:78:3d:a3:17:4f:38:ce:c5:aa:ba:fd:5b:5c:
4d:7a:8f:b7:31:19:1e:b6:ad:f3:af:56:99:9a:ab:
17:b9:2b:02:77:bd:3d:a5:b1:47:12:8f:ba:f3:0b:
cb:c2:cf:db:1f:fd:d4:ff:8d:cd:36:80:89:35:1b:
68:ee:10:58:00:29:1b:8c:52:fc:eb:39:d5:22:23:
ce:87:5c:5c:84:8f:49:72:a8:d2:00:60:80:52:57:
75:3b:80:fa:ad:41:53:01:cf:a9:16:d5:9d:bd:92:
d6:6b:d4:4a:1d:4f:c5:66:a8:14:14:ca:75:11:64:
bc:ce:10:25:d5:55:49:97:35:0f:87:76:5a:39:29:
a5:82:84:90:98:ee:57:d9:78:88:6d:3e:8a:c3:c7:
76:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:57:99:F1:EC:95:9C:FC:61:C3:A2:25:75:CD:94:DD:A4:B7:4E:2A
X509v3 Authority Key Identifier:
keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/4leZ8eyVnPxhw6Ildc2U3aS3Tio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.168.0/24
37.143.175.0/24
91.201.76.0/22
91.213.34.0/24
185.238.56.0/22
193.32.140.0/24
193.238.56.0/22
IPv6:
2a03:8f80::/31
Signature Algorithm: sha256WithRSAEncryption
50:8f:17:d4:d2:1d:38:34:9e:ae:07:a3:46:69:f0:f1:bb:0d:
53:c3:57:ac:98:24:20:ba:34:4e:ad:9c:a6:4b:a4:8e:a4:a3:
d7:49:c5:02:8f:7e:ee:d9:bf:12:d9:b0:e1:97:28:ac:c3:f6:
22:a2:f3:3f:0f:19:10:14:a1:c1:36:3a:c3:c0:2b:15:c1:a8:
03:20:98:9b:02:60:cd:20:f1:9a:72:6f:b1:ad:48:28:37:68:
ef:d3:34:1e:3a:29:38:be:08:0e:10:3b:44:7e:66:5d:5d:6a:
bc:b6:ed:81:8f:b5:08:42:e7:4b:40:e4:27:97:70:09:a9:f7:
fa:05:4a:f3:a1:6d:69:15:18:18:a2:76:32:f2:4e:d6:39:5e:
06:f9:56:39:92:23:d8:cf:1b:8f:f8:02:99:ef:0a:c6:c9:95:
86:24:da:f5:92:3b:66:b1:3f:1e:5e:58:7f:d5:65:ba:80:56:
4e:0d:7e:69:6f:ba:f7:a2:16:b0:0a:70:b3:c9:a7:00:38:c7:
38:13:49:a5:df:e3:28:d0:ae:7b:ab:61:b3:cf:a5:48:3f:21:
a3:5b:07:df:28:68:a1:42:2d:83:e2:e8:ea:0c:95:71:17:44:
62:d3:85:03:af:63:a1:44:3c:c6:d2:7b:bc:d3:f8:e0:7c:85:
52:ca:8a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:35:56 2024 by rpki-client on console-fra.rpki-client.org