Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/4fRXY-ZkBpVCLsIDnz9LOsMG-ZE.roa
File: 4fRXY-ZkBpVCLsIDnz9LOsMG-ZE.roa (raw, json)
Hash identifier: 2hOUnTYlF0mqAojJfag6ww57yjMD2EBkD+8e6UMIW7s=
Subject key identifier: E1:F4:57:63:E6:64:06:95:42:2E:C2:03:9F:3F:4B:3A:C3:06:F9:91
Certificate issuer: /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial: 018B2334F7E82B8D6FF631DB79766E683DB5
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/4fRXY-ZkBpVCLsIDnz9LOsMG-ZE.roa
Signing time: Thu 12 Oct 2023 09:25:55 +0000
ROA not before: Thu 12 Oct 2023 09:25:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197648
IP address blocks: 185.205.184.0/24 maxlen: 24
185.205.184.0/22 maxlen: 22
185.205.186.0/24 maxlen: 24
185.205.185.0/24 maxlen: 24
185.205.187.0/24 maxlen: 24
185.106.103.0/24 maxlen: 24
185.106.102.0/24 maxlen: 24
185.106.101.0/24 maxlen: 24
185.106.100.0/24 maxlen: 24
185.106.100.0/22 maxlen: 22
91.223.208.0/24 maxlen: 24
91.217.246.0/24 maxlen: 24
2a0c:5cc0::/29 maxlen: 29
2a06:3c80::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:23:34:f7:e8:2b:8d:6f:f6:31:db:79:76:6e:68:3d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Validity
Not Before: Oct 12 09:25:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1f45763e6640695422ec2039f3f4b3ac306f991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d0:3d:cb:ba:07:e4:8a:7a:5e:90:37:47:dc:
b2:b5:52:38:71:68:d5:2f:51:d2:b8:01:ba:c2:de:
fd:e7:fc:be:71:3a:d8:24:d2:19:cd:f9:c3:d3:61:
ed:c6:a4:9d:7f:e2:bb:35:29:62:d4:e6:74:56:43:
ad:33:db:99:e5:a9:64:94:66:e1:0e:86:ad:98:02:
62:e4:e2:2f:3b:c4:0f:88:63:53:8b:0a:00:a8:62:
f1:ee:84:6a:13:51:29:f6:73:f9:ea:48:2c:e5:8e:
88:2c:f0:dc:fc:d0:08:9a:7e:01:d7:ba:96:8a:c5:
07:5b:45:e9:fe:d1:e9:cd:40:28:c2:3c:fc:43:02:
42:98:5e:0f:da:d4:d6:8f:12:09:fd:bb:82:9f:16:
5e:87:da:1c:82:7a:80:89:b3:c6:45:57:26:cf:09:
e4:5a:47:12:8b:cf:8e:82:2c:b1:55:88:0f:07:c3:
62:19:6d:a8:a9:10:d8:50:bd:cf:57:c5:07:51:6d:
5d:17:ce:b5:8e:a5:b2:55:3b:36:ae:aa:53:d6:26:
3d:9b:d5:db:d0:55:99:e6:f4:30:93:b3:a0:45:08:
a0:c0:70:d5:35:09:69:73:e8:95:d7:ed:80:42:9a:
92:69:1f:0d:fc:e4:25:c3:4d:f9:30:e2:34:5e:c6:
e4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F4:57:63:E6:64:06:95:42:2E:C2:03:9F:3F:4B:3A:C3:06:F9:91
X509v3 Authority Key Identifier:
keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/4fRXY-ZkBpVCLsIDnz9LOsMG-ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.246.0/24
91.223.208.0/24
185.106.100.0/22
185.205.184.0/22
IPv6:
2a06:3c80::/29
2a0c:5cc0::/29
Signature Algorithm: sha256WithRSAEncryption
1f:24:9f:ae:23:7f:1d:e1:8d:af:6f:00:55:02:61:34:88:cf:
b5:a6:18:8e:f8:b0:66:98:ef:34:8c:1c:91:69:2a:a6:d4:16:
fc:f4:b6:b9:28:7f:7a:95:a1:24:78:91:bc:fa:21:b4:95:98:
6c:64:65:0b:9e:22:a5:23:26:7c:03:6c:b3:05:a5:41:ac:01:
a6:86:0f:27:4a:ab:2a:e0:14:0b:a5:4a:e2:09:3f:13:2e:1d:
6c:20:92:0d:2a:55:1f:64:de:28:b6:46:3c:0e:1e:0a:2e:e6:
40:91:b3:22:ef:1f:95:f9:b5:33:d2:f3:2e:12:c3:cc:46:25:
eb:96:1a:6d:62:69:5f:a9:2b:6e:00:2a:d7:cd:04:5e:90:ed:
72:48:15:fd:3a:53:71:31:e9:c3:73:7d:ce:03:d1:66:2a:ca:
74:8b:fc:d5:f2:d9:7f:f9:09:11:f8:1c:db:5b:5f:74:63:ee:
93:00:5c:99:8a:42:00:83:61:d9:10:9e:e9:fa:0d:46:28:54:
bc:23:0b:8b:25:19:73:b2:13:da:11:b7:bb:fc:c1:d1:80:d1:
e0:ac:24:dd:8f:30:de:4b:c0:02:29:60:c0:6e:8a:59:21:3b:
30:5f:26:82:b0:a7:35:65:da:bf:fb:4e:38:18:10:05:d4:80:
d0:64:59:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:53 2024 by rpki-client on console-fra.rpki-client.org