Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/CT5qIEeODKwdax2vXKg_7sdfTww.roa
File: CT5qIEeODKwdax2vXKg_7sdfTww.roa (raw, json)
Hash identifier: RhfMC+64tIImpie5U3SbeJ5RZahfuwDM7Hyjes+PuUg=
Subject key identifier: 09:3E:6A:20:47:8E:0C:AC:1D:6B:1D:AF:5C:A8:3F:EE:C7:5F:4F:0C
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018ACD40E7380ACB0226638EA2791419320D
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/CT5qIEeODKwdax2vXKg_7sdfTww.roa
Signing time: Mon 25 Sep 2023 16:51:37 +0000
ROA not before: Mon 25 Sep 2023 16:51:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.55.4.0/22 maxlen: 23
176.96.88.0/22 maxlen: 22
176.103.240.0/21 maxlen: 22
176.116.232.0/22 maxlen: 22
185.55.140.0/22 maxlen: 22
185.55.140.0/23 maxlen: 23
185.55.142.0/23 maxlen: 23
46.173.240.0/21 maxlen: 21
64.43.112.0/22 maxlen: 22
178.212.184.0/22 maxlen: 22
178.212.184.0/21 maxlen: 21
64.43.124.0/22 maxlen: 22
178.212.188.0/22 maxlen: 22
91.233.0.0/23 maxlen: 23
176.102.120.0/21 maxlen: 21
176.102.120.0/22 maxlen: 22
176.102.124.0/22 maxlen: 22
193.36.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 18 Dec 2023 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cd:40:e7:38:0a:cb:02:26:63:8e:a2:79:14:19:32:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Sep 25 16:51:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=093e6a20478e0cac1d6b1daf5ca83feec75f4f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:35:1a:97:7a:33:82:47:0a:ea:b7:ca:b2:77:
41:cc:ba:81:3a:fb:58:ae:25:16:a7:77:f2:68:04:
05:23:c6:27:48:a2:d6:c5:bc:d2:46:bc:39:5d:1b:
5e:2a:43:bc:5e:a7:3f:45:08:55:de:30:43:d9:b0:
6d:e1:82:8a:c6:40:4e:53:0b:ea:ab:2a:32:9a:82:
79:ae:0c:69:bc:ce:25:66:d6:02:49:a9:79:a1:92:
43:43:61:e7:6a:6e:5e:f0:bf:94:3e:8d:a3:5f:89:
70:df:e2:41:ed:73:f4:0d:a1:ca:23:35:db:be:26:
4d:d8:83:52:11:fd:8c:50:9a:0e:76:70:15:78:ae:
bb:80:7a:2d:d8:bb:36:8b:d8:23:98:fe:03:fd:ca:
cd:a1:50:be:4d:e9:a5:d4:5e:76:78:88:63:73:8c:
64:04:62:06:1c:f5:b0:2d:6d:d1:2b:c2:61:70:6f:
cf:8e:2e:be:cc:c6:a2:76:de:1b:25:9e:86:c5:69:
d3:c3:5c:fe:81:28:ab:25:e2:90:fe:2f:0b:72:28:
07:eb:83:3e:8f:d1:50:92:61:2c:b8:ef:4f:4e:56:
14:33:b7:9b:d3:02:2a:1d:cc:01:80:4c:47:02:21:
b9:21:31:5a:86:5d:41:96:fd:17:92:12:69:d4:a5:
ba:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3E:6A:20:47:8E:0C:AC:1D:6B:1D:AF:5C:A8:3F:EE:C7:5F:4F:0C
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/CT5qIEeODKwdax2vXKg_7sdfTww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.240.0/21
64.43.112.0/22
64.43.124.0/22
91.233.0.0/23
176.96.88.0/22
176.102.120.0/21
176.103.240.0/21
176.116.232.0/22
178.212.184.0/21
185.55.4.0/22
185.55.140.0/22
193.36.204.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:d3:85:2a:5a:32:14:96:0b:e1:f5:fd:b6:92:0b:30:42:f2:
e3:78:4a:52:30:6a:50:3e:0f:43:02:00:dc:cb:20:b7:c0:4a:
51:44:8d:d9:99:c6:12:51:71:2a:fb:7c:ab:ff:8b:78:53:93:
69:ca:7e:1d:65:f3:79:a2:7a:f2:e5:86:a8:24:01:a4:b2:2a:
3d:93:fa:95:d3:df:5a:60:fa:4b:9b:5e:43:53:06:cf:87:2e:
0d:24:b2:dc:4e:d0:a1:15:38:0a:98:ad:25:ab:d3:7f:fd:09:
0b:b9:62:ac:65:02:2c:ad:38:e2:57:99:87:c9:ff:b7:15:01:
5d:b3:d3:66:be:84:f4:df:88:0c:2b:da:10:ab:33:4f:ef:c8:
00:7f:75:91:5a:6c:96:b8:85:20:5d:bb:82:a7:de:27:b8:d1:
ba:53:89:6c:e4:96:b7:e2:a0:a7:61:cc:44:aa:b8:da:cf:ac:
ab:2a:5a:00:f6:b8:09:3b:b4:9f:6e:8d:9d:cc:ab:e8:6a:de:
b9:96:2a:48:ca:80:a2:38:2d:47:59:05:60:2c:b8:22:78:44:
a4:16:87:7c:ab:de:c7:e4:0c:60:17:9d:2c:7f:e9:92:2a:c2:
c9:ca:46:30:d3:05:24:e9:df:23:bc:2d:a4:68:0a:6e:62:bb:
10:3a:7d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org