Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/1XjSeFKiNRj76pBcjUg9zpChGEs.roa
File: 1XjSeFKiNRj76pBcjUg9zpChGEs.roa (raw, json)
Hash identifier: 1ghvETFGEgl8OlJB5qGY0KgCjOHYlvcpLq6QE4HnlZc=
Subject key identifier: D5:78:D2:78:52:A2:35:18:FB:EA:90:5C:8D:48:3D:CE:90:A1:18:4B
Certificate issuer: /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial: 018CC2DAFD56FA5CC00BC7D2308516659DF8
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/1XjSeFKiNRj76pBcjUg9zpChGEs.roa
Signing time: Mon 01 Jan 2024 02:29:40 +0000
ROA not before: Mon 01 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203936
IP address blocks: 193.39.94.0/24 maxlen: 24
193.39.93.0/24 maxlen: 24
193.39.92.0/24 maxlen: 24
193.39.92.0/22 maxlen: 22
185.253.144.0/22 maxlen: 22
185.253.147.0/24 maxlen: 24
45.144.248.0/22 maxlen: 22
2a0c:3cc0::/32 maxlen: 32
2a03:6280::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 20 Feb 2024 07:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:fd:56:fa:5c:c0:0b:c7:d2:30:85:16:65:9d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Validity
Not Before: Jan 1 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d578d27852a23518fbea905c8d483dce90a1184b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:8c:fd:0e:db:2b:6d:7a:c6:06:9a:97:b8:
c2:df:20:21:81:4d:9d:e7:fb:ed:7d:84:39:8b:13:
de:4c:ad:cb:0a:8a:59:96:b5:af:23:0a:87:89:46:
4b:b3:49:7a:7e:96:a7:32:5a:be:07:a1:25:4c:5e:
0c:ed:bf:6a:af:46:d3:8b:65:47:46:06:45:4f:c3:
f9:ba:04:16:5c:e1:0c:e1:c0:eb:44:4a:b2:81:fe:
ea:c5:68:0d:ed:e4:5f:0b:0e:db:6e:e5:cf:e5:1c:
94:0a:a9:2d:7e:6b:a2:0c:c2:0d:8c:c3:d1:a8:40:
31:13:d9:ad:ab:e7:1d:b9:56:a7:4c:dd:41:6d:be:
47:e4:f0:76:1c:53:2e:46:df:a1:ad:0d:60:99:26:
90:f2:4d:62:80:99:ec:19:39:3c:a5:66:95:cf:7a:
f9:db:a8:4d:c5:91:2f:ce:29:53:f1:7b:e1:88:9b:
ba:42:11:b9:3c:48:d2:23:40:08:92:f0:f1:cc:f0:
98:80:0c:77:40:64:67:69:bd:91:d0:a4:d1:6a:83:
34:72:5e:53:c1:c6:a3:52:0e:4e:dc:c9:b1:fb:a1:
25:f8:e7:ae:dc:b4:eb:73:98:ee:72:73:c9:f5:67:
dc:1e:9c:85:9e:f6:24:f7:fa:43:c3:af:09:a3:81:
64:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:78:D2:78:52:A2:35:18:FB:EA:90:5C:8D:48:3D:CE:90:A1:18:4B
X509v3 Authority Key Identifier:
keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/1XjSeFKiNRj76pBcjUg9zpChGEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.248.0/22
185.253.144.0/22
193.39.92.0/22
IPv6:
2a03:6280::/29
2a0c:3cc0::/32
Signature Algorithm: sha256WithRSAEncryption
36:a9:69:61:fb:48:a9:ae:d4:4d:30:a1:75:ff:b6:23:3f:ab:
37:ad:17:23:4d:8b:da:f2:d9:2a:f8:25:bd:25:16:98:f0:5f:
20:b3:b4:4d:b4:5d:dc:0e:0a:9c:00:aa:f9:37:4d:f3:95:e1:
2e:ed:41:9a:9b:b3:6c:e9:80:57:8d:51:1c:f6:db:20:d8:25:
17:65:37:7b:0c:19:d1:56:f0:98:46:ab:ca:2f:ed:f8:c8:ce:
f9:2e:da:8c:9d:09:d5:42:99:d7:6f:04:56:0a:b5:87:cc:81:
ef:da:05:98:54:f1:e1:cf:33:6c:b3:a6:ac:85:e2:f2:ce:5a:
6c:19:8d:ec:b2:03:71:cc:00:11:e1:f3:8e:e8:e5:46:95:cc:
41:19:61:e3:a8:3c:74:59:21:69:92:d6:f9:75:7c:00:8c:1b:
df:bc:cb:1b:cd:71:8b:4f:10:ce:39:21:d3:25:35:ba:96:d9:
30:67:50:9c:f4:2d:af:c4:ae:2e:4e:0b:f0:cb:5d:ec:65:cd:
3a:46:33:3c:94:00:1a:3c:44:e3:c6:c1:6d:d8:2a:0c:f5:02:
a0:fd:87:1b:71:d4:d6:ec:48:97:54:d7:2e:d1:0c:a4:49:27:
6c:eb:ed:a8:4b:9e:5e:89:82:7b:ae:6c:ab:e4:cc:1c:2c:59:
e9:8d:47:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 12:20:06 2024 by rpki-client on console-ams.rpki-client.org