Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/PLB5YVeG3F3SDihfPlJIKIijz1Q.roa
File: PLB5YVeG3F3SDihfPlJIKIijz1Q.roa (raw, json)
Hash identifier: 4o+jM/Rov8p0HjxXXmLE/Zf3oXaflpJCa6a/npkZvos=
Subject key identifier: 3C:B0:79:61:57:86:DC:5D:D2:0E:28:5F:3E:52:48:28:88:A3:CF:54
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42EF2D0F21841F5B1D9ED4AD1A7578
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/PLB5YVeG3F3SDihfPlJIKIijz1Q.roa
Signing time: Sun 01 Jan 2023 21:35:35 +0000
ROA not before: Sun 01 Jan 2023 21:35:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205207
IP address blocks: 185.14.160.0/22 maxlen: 22
46.209.58.0/24 maxlen: 24
77.104.106.0/24 maxlen: 24
5.160.49.0/24 maxlen: 24
77.237.68.0/24 maxlen: 24
77.104.64.0/19 maxlen: 19
77.104.66.0/24 maxlen: 24
77.237.80.0/20 maxlen: 20
77.104.64.0/18 maxlen: 18
77.104.73.0/24 maxlen: 24
77.104.75.0/24 maxlen: 24
77.104.72.0/21 maxlen: 21
77.104.80.0/20 maxlen: 24
46.209.95.0/24 maxlen: 24
77.237.64.0/20 maxlen: 20
77.237.64.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 21 Feb 2023 19:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:ef:2d:0f:21:84:1f:5b:1d:9e:d4:ad:1a:75:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cb079615786dc5dd20e285f3e52482888a3cf54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:ee:9c:8f:d2:a6:05:8b:74:f6:a2:b3:fc:
68:1d:f6:05:d6:38:e2:08:b9:1e:0f:40:5f:fe:20:
12:eb:1c:5c:ea:57:5f:03:14:d9:a8:cd:a0:b1:62:
9d:5c:5a:bc:e9:e4:10:50:0f:14:20:1c:2a:cd:d5:
d7:29:47:40:89:cb:9c:3a:bc:b8:c7:db:f2:dd:6e:
cf:c5:2c:94:c8:fa:b7:e6:1f:72:e3:29:54:a9:24:
68:1e:c2:85:ff:5c:99:6b:f7:1f:09:53:a3:5c:64:
39:97:48:d1:77:d4:d2:98:ef:86:93:82:71:c9:1e:
ce:e3:ba:bd:38:77:93:3e:22:9c:22:af:e0:01:a0:
85:6b:04:bd:68:f6:6d:c0:87:df:7d:fb:8a:b4:94:
5f:63:cb:e3:35:03:1a:cd:99:64:dd:6f:22:ce:fe:
f7:cb:88:49:6f:84:03:3c:57:5b:ac:d3:13:52:1a:
93:3c:71:e4:0f:f6:24:a5:ec:8e:a9:ee:79:ac:48:
bc:87:62:93:d0:34:50:d3:03:36:6b:1f:1b:30:58:
6e:02:65:1e:83:fa:f5:b3:ee:4a:68:07:9f:02:56:
4e:a7:1e:d8:d1:63:40:d0:aa:e3:ab:64:26:e8:cc:
61:23:66:ae:c3:44:ee:a3:0f:c4:56:b3:52:7b:b0:
bf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B0:79:61:57:86:DC:5D:D2:0E:28:5F:3E:52:48:28:88:A3:CF:54
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/PLB5YVeG3F3SDihfPlJIKIijz1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.49.0/24
46.209.58.0/24
46.209.95.0/24
77.104.64.0/18
77.237.64.0/19
185.14.160.0/22
Signature Algorithm: sha256WithRSAEncryption
21:8b:e6:7e:93:11:af:a6:df:b6:49:89:fb:0e:00:d3:17:03:
93:c7:85:71:5d:be:d5:a1:b2:a1:fd:86:58:bf:a2:85:ae:5a:
73:71:63:ce:1e:ae:1c:2c:de:f4:83:8e:67:99:9d:e6:b6:7a:
5a:2f:5e:75:cd:12:ec:63:59:b6:82:79:ab:4e:2a:88:1a:1b:
61:4c:9a:83:69:82:71:b0:f3:af:d2:89:c6:5c:bf:fd:85:72:
40:9c:cd:d4:02:d1:f1:f0:84:ab:9c:f9:d6:14:be:3b:31:e6:
a8:2e:6c:6a:0b:e1:63:03:b8:d4:d0:59:71:cb:30:51:ef:c8:
ba:58:57:1d:3d:db:84:4f:a9:99:f9:4e:85:9b:71:4e:6c:9e:
ae:ed:c6:2a:93:c8:2d:5a:29:e5:3c:27:1a:be:bc:00:70:12:
cc:53:30:b9:fb:92:05:b3:7b:33:8d:e9:d8:ba:fd:60:5d:7d:
4d:b4:ca:74:4c:03:25:8d:e0:58:47:de:92:54:6f:f2:14:81:
45:8a:35:05:da:e0:92:15:c4:c8:0b:b7:77:a0:32:33:81:9c:
b4:47:5f:8b:53:5a:a2:31:22:9a:0f:f2:f9:0c:9e:ba:b7:19:
f6:52:43:20:24:aa:9c:d8:94:f1:89:40:2d:8c:bf:c4:d2:29:
52:65:3c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:31 2024 by rpki-client on console-fra.rpki-client.org