Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/F32WaTTYShl5qo3fSweLTKgfDTQ.roa
File: F32WaTTYShl5qo3fSweLTKgfDTQ.roa (raw, json)
Hash identifier: zZN5hHx4wbvYIJl4k1MOSYdO5R2B6gKjD7D6B5poV+Q=
Subject key identifier: 17:7D:96:69:34:D8:4A:19:79:AA:8D:DF:4B:07:8B:4C:A8:1F:0D:34
Certificate issuer: /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Certificate serial: 01856F54982246096D9B559470DFCCB319CB
Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/F32WaTTYShl5qo3fSweLTKgfDTQ.roa
Signing time: Sun 01 Jan 2023 21:54:53 +0000
ROA not before: Sun 01 Jan 2023 21:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56595
IP address blocks: 188.241.20.0/22 maxlen: 24
185.7.230.0/23 maxlen: 23
46.226.0.0/21 maxlen: 21
185.73.152.0/22 maxlen: 22
185.7.228.0/22 maxlen: 22
185.7.228.0/23 maxlen: 23
89.32.88.0/21 maxlen: 21
185.34.8.0/22 maxlen: 22
185.100.68.0/22 maxlen: 22
192.124.197.0/24 maxlen: 24
192.124.198.0/24 maxlen: 24
185.122.64.0/22 maxlen: 22
192.124.193.0/24 maxlen: 24
192.124.203.0/24 maxlen: 24
192.124.206.0/23 maxlen: 23
192.124.200.0/24 maxlen: 24
91.240.174.0/24 maxlen: 24
185.240.200.0/22 maxlen: 22
2a00:a600::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 12 May 2023 11:21:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:98:22:46:09:6d:9b:55:94:70:df:cc:b3:19:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Validity
Not Before: Jan 1 21:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=177d966934d84a1979aa8ddf4b078b4ca81f0d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:88:47:ad:27:8b:a6:c9:08:49:9f:f3:3f:93:
6f:6d:9b:36:7b:d1:0d:f3:53:20:50:9e:31:d9:35:
f5:49:d0:a3:c3:29:df:62:e2:b5:9e:11:58:57:c6:
76:bc:9a:41:2b:d8:3f:6b:e5:ce:fa:f5:21:d2:ce:
80:27:87:ad:ae:09:b5:fe:f6:a9:f7:40:aa:17:eb:
21:31:df:5c:7d:13:d1:84:91:3f:a1:e3:d6:4e:62:
b8:9a:d1:ab:f5:9e:92:f7:60:45:92:ec:47:63:81:
3e:9c:10:aa:0b:93:94:3c:bc:24:5f:ce:f4:5e:8a:
2c:7a:6f:c5:16:40:ed:8c:ae:6f:48:9b:76:ed:3c:
57:6f:f2:33:b0:28:47:0a:35:c0:f3:72:a0:ca:08:
6a:f0:7c:46:64:bb:9a:6d:b9:02:15:fe:25:30:eb:
92:ce:fa:34:61:1b:37:c9:92:71:8c:a4:0d:0c:8b:
7a:1d:06:5f:66:2f:55:a7:ce:91:ed:bf:aa:2a:5e:
fb:47:82:31:5a:d1:0d:5a:73:65:99:0e:96:56:95:
65:dc:62:4e:e5:2b:14:9c:97:a6:23:12:db:5c:b3:
f1:58:d4:4e:fc:27:5e:97:0e:03:1f:c2:7c:1b:1a:
29:8b:4f:c4:d6:95:03:47:33:3f:74:1a:4d:86:5a:
93:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7D:96:69:34:D8:4A:19:79:AA:8D:DF:4B:07:8B:4C:A8:1F:0D:34
X509v3 Authority Key Identifier:
keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/F32WaTTYShl5qo3fSweLTKgfDTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.0.0/21
89.32.88.0/21
91.240.174.0/24
185.7.228.0/22
185.34.8.0/22
185.73.152.0/22
185.100.68.0/22
185.122.64.0/22
185.240.200.0/22
188.241.20.0/22
192.124.193.0/24
192.124.197.0-192.124.198.255
192.124.200.0/24
192.124.203.0/24
192.124.206.0/23
IPv6:
2a00:a600::/32
Signature Algorithm: sha256WithRSAEncryption
05:31:59:1b:c3:12:c9:b9:90:65:fe:f3:8b:7a:d0:4b:46:e3:
2a:dc:3d:b0:08:7c:8b:ed:01:5c:25:8a:7d:5b:c8:e4:1b:06:
eb:43:92:20:ee:44:6d:41:b8:0c:64:f7:35:ba:e1:92:ef:5f:
f4:c2:6a:1b:0f:de:f3:50:5e:c1:2c:a8:03:0a:ae:39:27:59:
6f:9a:fd:07:4e:c0:08:70:bf:c0:9a:ac:ab:34:7e:b2:23:2b:
88:31:61:a2:ec:3d:df:a4:78:e3:4d:65:87:78:ab:1b:da:6e:
1b:6b:36:b1:76:c8:ac:48:49:a0:d7:6c:55:42:02:cf:ec:0b:
ee:49:81:59:a7:73:6d:d5:ff:14:22:82:04:de:11:5f:38:c8:
a2:7d:1f:e1:42:5c:b2:f7:a7:36:88:ac:db:b1:02:8b:23:b5:
be:1b:d4:c3:39:9b:68:96:60:ef:76:40:80:eb:2f:d4:c0:a2:
ba:2c:30:9e:d7:40:60:11:48:96:ff:3d:0c:bc:91:21:df:a7:
e1:7f:7c:16:57:80:6b:73:ed:03:92:0a:1d:ab:cb:44:a6:60:
e9:7a:80:9c:14:cb:27:85:15:7b:a0:16:ce:7c:69:1b:c1:b7:
34:7b:ee:d5:47:e2:ff:96:7a:3d:98:48:09:e0:72:16:af:78:
ed:f0:64:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:06 2024 by rpki-client on console-fra.rpki-client.org