Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ixrPw-GB8xTNy_B6VFVwMTqTfy4.roa
File: ixrPw-GB8xTNy_B6VFVwMTqTfy4.roa (raw, json)
Hash identifier: moIXB7VitL5tNgmPIvVtM8JxtuZLH4j45PCWo4yoUas=
Subject key identifier: 8B:1A:CF:C3:E1:81:F3:14:CD:CB:F0:7A:54:55:70:31:3A:93:7F:2E
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018C7C27834CE5AF517412BB45F11931CF56
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ixrPw-GB8xTNy_B6VFVwMTqTfy4.roa
Signing time: Mon 18 Dec 2023 09:00:13 +0000
ROA not before: Mon 18 Dec 2023 09:00:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 185.55.4.0/22 maxlen: 23
176.96.88.0/22 maxlen: 22
176.103.240.0/21 maxlen: 22
176.116.232.0/22 maxlen: 22
185.55.142.0/23 maxlen: 23
185.55.140.0/23 maxlen: 23
185.55.140.0/22 maxlen: 22
178.212.184.0/22 maxlen: 22
178.212.184.0/21 maxlen: 21
178.212.188.0/22 maxlen: 22
176.102.124.0/22 maxlen: 22
176.102.120.0/22 maxlen: 22
176.102.120.0/21 maxlen: 21
91.233.0.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 18 Dec 2023 09:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:27:83:4c:e5:af:51:74:12:bb:45:f1:19:31:cf:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Dec 18 09:00:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b1acfc3e181f314cdcbf07a545570313a937f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:83:25:68:cb:73:c8:f3:ec:98:93:d8:71:
54:08:24:1b:b1:9d:d7:44:97:24:a3:c8:79:f6:49:
f3:68:ba:28:11:b6:b4:eb:3e:3f:da:a0:39:35:c8:
7b:82:5d:25:32:18:e6:b8:ca:c6:21:41:39:75:70:
82:dd:1d:72:5f:9e:05:fa:42:6f:f0:cc:46:1e:8f:
a9:ab:31:d3:7c:fa:e1:a7:09:90:31:53:8b:0a:0d:
43:b5:86:1c:28:7e:a9:48:f3:1a:8a:ec:f6:3d:cc:
02:a3:fd:4d:76:0a:f0:e2:28:2b:32:d9:76:1e:cb:
41:ec:9a:14:b1:88:28:7a:a4:c7:12:36:a4:7a:6e:
c6:ab:9d:8a:2b:d6:39:e3:dd:b2:b2:f1:e0:f9:fe:
47:99:20:58:1d:db:cc:cd:60:dc:e1:a6:96:d8:68:
95:f9:d2:f9:f9:ac:c2:e1:eb:1b:cd:34:07:89:9d:
76:8e:52:62:13:e9:87:22:7b:9f:d3:b3:17:94:d3:
14:ae:28:5e:e5:91:35:f4:7e:e8:18:d2:0b:54:41:
40:cd:74:08:00:68:d8:eb:76:c6:59:eb:ec:c8:5e:
1d:f4:39:3c:64:03:59:e9:ad:c4:b4:4f:7e:64:f6:
e8:c8:ed:d2:b4:2c:00:b5:8d:f8:62:0d:51:32:22:
98:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1A:CF:C3:E1:81:F3:14:CD:CB:F0:7A:54:55:70:31:3A:93:7F:2E
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ixrPw-GB8xTNy_B6VFVwMTqTfy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.0.0/23
176.96.88.0/22
176.102.120.0/21
176.103.240.0/21
176.116.232.0/22
178.212.184.0/21
185.55.4.0/22
185.55.140.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:5f:2f:b8:b1:4e:ea:76:63:9e:20:6a:82:21:eb:08:38:60:
01:53:72:a5:0a:90:24:eb:ba:1c:07:dd:ee:eb:d8:53:40:06:
dd:b5:e1:2f:f0:97:00:47:b0:6a:69:84:4d:e6:a2:b8:57:d4:
7c:2d:eb:84:c1:12:5f:96:c3:4d:23:ff:fb:4a:00:ba:a2:82:
e6:f6:96:fb:a5:45:59:b9:e2:c7:ba:67:c5:e9:5c:86:b0:2b:
0c:cf:ee:b5:eb:49:0d:fb:b5:12:33:ac:e1:ff:d2:87:38:2a:
8c:34:e1:c6:75:e4:3a:a6:b8:0a:52:06:2e:5a:3a:6b:0c:0a:
fc:55:6e:69:3f:bc:25:e1:21:2c:97:ae:86:05:e7:05:1e:b6:
f2:cc:86:f4:e7:73:cd:52:e8:a4:a3:8e:1e:97:65:e4:81:8c:
5c:33:07:f3:2e:81:2b:a1:09:7f:28:94:87:3d:fc:5f:af:73:
e5:07:69:56:d0:c8:b9:e0:40:17:ae:c7:d3:2d:22:e9:82:c8:
d7:a0:47:ae:ec:6a:a9:f6:ff:f2:48:97:7d:1f:d5:7d:9f:5d:
47:ad:ad:f2:a8:06:fc:3e:4d:c9:87:1d:40:69:4d:7a:b7:6d:
ab:7e:2a:c5:96:fc:b9:1e:8c:65:1e:2b:7b:ab:6a:dd:f5:f2:
55:89:01:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org