Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/7nMsVnqe9_zlrzXh8nBxEKCFjD4.roa
File: 7nMsVnqe9_zlrzXh8nBxEKCFjD4.roa (raw, json)
Hash identifier: YUuaxL43+u2oYGtXBo4FspmcZnIYA47u60UP5no+kzQ=
Subject key identifier: EE:73:2C:56:7A:9E:F7:FC:E5:AF:35:E1:F2:70:71:10:A0:85:8C:3E
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01874711171062AE0EFB886C7C629C0DEF72
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/7nMsVnqe9_zlrzXh8nBxEKCFjD4.roa
Signing time: Mon 03 Apr 2023 12:21:54 +0000
ROA not before: Mon 03 Apr 2023 12:21:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 2.56.164.0/24 maxlen: 24
185.227.71.0/24 maxlen: 24
193.105.177.0/24 maxlen: 24
178.218.145.0/24 maxlen: 24
194.56.224.0/24 maxlen: 24
194.56.225.0/24 maxlen: 24
45.90.145.0/24 maxlen: 24
45.90.146.0/24 maxlen: 24
85.202.162.0/24 maxlen: 24
185.186.67.0/24 maxlen: 24
185.234.74.0/24 maxlen: 24
185.234.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Apr 2023 12:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:47:11:17:10:62:ae:0e:fb:88:6c:7c:62:9c:0d:ef:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Apr 3 12:21:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee732c567a9ef7fce5af35e1f2707110a0858c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a2:0d:90:4e:2f:56:d8:85:96:e4:45:55:19:
ff:2d:13:4c:81:3b:48:94:33:cb:1a:c7:6b:45:d6:
28:35:b8:0a:84:dd:d6:21:39:5c:3e:75:73:be:f2:
64:b5:62:e5:09:15:40:b6:ce:2a:e6:87:53:3b:86:
72:cc:5b:17:13:38:34:b5:bb:a6:ff:13:04:0a:e1:
ec:21:f3:58:0b:6f:9e:c5:1e:d2:60:42:49:48:34:
62:26:8c:c3:ba:ae:7f:e5:14:41:20:03:ad:79:8d:
0a:09:1b:53:22:cf:08:54:67:12:6a:99:3c:13:dd:
18:96:ff:61:8a:8e:e9:a3:5b:d8:23:ce:ac:79:52:
3a:9d:fe:b4:16:d0:bd:83:35:1e:61:26:88:da:b4:
c8:a1:e5:8f:ee:ce:68:ee:4a:18:d5:4b:fc:d0:0a:
9c:eb:a1:fa:65:a3:e4:46:5f:8d:07:6d:de:f6:ba:
d2:6c:eb:aa:2c:6d:e7:4f:2c:b2:af:96:b4:c8:3e:
4c:28:9f:40:63:8d:55:a3:ea:44:64:fd:2d:a2:80:
7a:7c:ea:1c:d4:16:ee:2e:04:bc:2f:b8:2b:36:b1:
94:09:57:d1:a7:63:16:fb:73:91:2e:7c:3b:91:b7:
7c:a3:15:d0:df:1d:57:94:2e:b5:6c:8d:d6:c8:dd:
d1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:73:2C:56:7A:9E:F7:FC:E5:AF:35:E1:F2:70:71:10:A0:85:8C:3E
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/7nMsVnqe9_zlrzXh8nBxEKCFjD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/24
45.90.145.0-45.90.146.255
85.202.162.0/24
178.218.145.0/24
185.186.67.0/24
185.227.71.0/24
185.234.74.0/23
193.105.177.0/24
194.56.224.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:c5:a9:25:f9:2e:7e:bc:04:7b:35:18:76:aa:87:81:83:6d:
c1:96:fd:58:a2:66:33:93:3c:84:56:2c:ec:68:74:62:d4:ab:
d1:d0:2f:59:9d:3c:1a:9b:ba:a9:3d:50:09:4a:67:7f:80:5e:
98:b8:0a:8d:52:07:4d:0e:ba:4d:cc:14:f0:93:9c:f3:90:7a:
d5:6f:d5:ca:5f:b2:12:4d:f7:10:71:75:09:4c:35:da:47:17:
b6:63:2c:6f:9f:58:74:3c:0a:f1:8d:4c:cb:e0:76:ba:23:c9:
37:ee:3e:fd:aa:51:b8:01:30:ab:a5:c7:93:cc:8e:64:86:55:
14:8e:62:71:b3:3a:2d:dd:c3:13:0e:f5:03:a7:a6:7e:8c:9d:
35:54:57:97:5b:01:ad:06:ed:92:df:e0:e6:4f:e4:13:25:66:
c0:bb:19:06:98:37:b8:eb:5b:10:26:35:6e:3d:ab:fa:18:38:
55:c5:d7:82:d8:56:05:37:14:1e:40:0a:5b:98:4a:3b:dc:d2:
f9:eb:10:67:04:86:ab:07:61:63:d6:62:f7:05:c9:47:b7:31:
81:01:4d:66:e1:da:a8:56:2d:39:e8:3b:61:8c:3f:25:01:91:
56:dd:ed:f4:d5:33:67:17:d4:26:a6:64:f4:c3:ac:de:8d:c0:
07:b5:d8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:39 2024 by rpki-client on console-ams.rpki-client.org