Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/vbFxcQdn5KtMQdPUq7-TsI1xRbM.roa
File: vbFxcQdn5KtMQdPUq7-TsI1xRbM.roa (raw, json)
Hash identifier: sPutJ3xBIITNfyQpLVrYJ+8zl2fFJIrDmIgjd1/0384=
Subject key identifier: BD:B1:71:71:07:67:E4:AB:4C:41:D3:D4:AB:BF:93:B0:8D:71:45:B3
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 01892BF9E0F1E34256381D7C392883E977A0
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/vbFxcQdn5KtMQdPUq7-TsI1xRbM.roa
Signing time: Thu 06 Jul 2023 16:12:23 +0000
ROA not before: Thu 06 Jul 2023 16:12:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48011
IP address blocks: 185.217.143.0/24 maxlen: 24
213.232.203.0/24 maxlen: 24
185.227.139.0/24 maxlen: 24
185.227.137.0/24 maxlen: 24
185.227.138.0/24 maxlen: 24
185.227.136.0/24 maxlen: 24
45.93.168.0/22 maxlen: 24
45.89.236.0/22 maxlen: 24
193.163.72.0/24 maxlen: 24
185.211.79.0/24 maxlen: 24
185.182.105.0/24 maxlen: 24
2a0c:6600:1::/48 maxlen: 48
2a0c:6600::/48 maxlen: 48
2a0c:6600:3::/48 maxlen: 48
2a0c:6600:4::/48 maxlen: 48
2a0c:6600:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 31 Jul 2023 12:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2b:f9:e0:f1:e3:42:56:38:1d:7c:39:28:83:e9:77:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Jul 6 16:12:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdb171710767e4ab4c41d3d4abbf93b08d7145b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3c:8c:78:af:12:ce:a6:ad:ab:3e:1b:44:7c:
71:da:24:29:8e:7e:51:46:a6:6b:44:f1:2c:c6:0d:
93:79:b3:93:34:8b:fc:20:02:c4:4c:6a:6e:59:85:
9d:55:04:40:a2:f9:37:55:5d:d6:dc:4e:f1:08:4f:
48:59:61:7a:f6:f1:cc:05:36:8e:9a:8e:f7:d0:c2:
8f:8b:e9:3f:86:2f:fe:40:81:5a:c4:26:9c:e3:9b:
c6:c8:76:7e:6a:ed:ad:93:55:e9:44:44:cd:a4:a6:
4d:65:b9:43:bc:d3:dd:1d:5f:1e:65:75:e1:f0:8d:
b6:31:a2:dd:1a:59:41:75:02:92:a5:e9:cb:ef:07:
c0:e2:a5:04:00:23:97:13:64:83:ec:aa:90:c5:0c:
87:38:8e:3d:87:31:12:e0:cf:66:ec:66:9e:ea:90:
2e:11:18:b9:ac:1f:29:69:dc:85:29:5e:64:e4:74:
84:a5:37:5b:5e:b7:ca:62:3e:4d:ee:06:a6:0a:e2:
3d:95:c0:43:27:0d:cd:7d:e8:1f:4b:43:66:ed:33:
ee:35:c2:dc:b5:48:a4:06:5d:8e:78:25:9f:f1:4d:
8d:7c:e8:48:4b:d7:fb:56:49:ab:68:10:b4:7a:29:
11:87:01:08:a2:1b:26:55:58:da:52:e0:a5:48:7c:
36:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B1:71:71:07:67:E4:AB:4C:41:D3:D4:AB:BF:93:B0:8D:71:45:B3
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/vbFxcQdn5KtMQdPUq7-TsI1xRbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.236.0/22
45.93.168.0/22
185.182.105.0/24
185.211.79.0/24
185.217.143.0/24
185.227.136.0/22
193.163.72.0/24
213.232.203.0/24
IPv6:
2a0c:6600::-2a0c:6600:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5a:ed:55:3c:bc:de:c3:2f:0b:60:fd:8d:b1:78:42:56:2c:ed:
6c:cd:b9:c6:c4:80:db:7d:03:2e:69:03:56:d0:2e:d1:d0:eb:
b1:ff:a7:74:b4:9e:43:ea:30:06:56:ba:ac:9d:25:74:31:fd:
1b:e0:b9:ab:2e:39:1a:63:27:9a:e3:f3:73:23:5f:e2:91:54:
f6:0b:c3:32:19:05:c2:c0:e5:08:9a:80:12:bb:20:d7:92:2f:
27:6b:bf:de:55:3e:87:9e:5b:35:85:ec:14:c4:6a:7a:0d:95:
7e:a0:b3:23:b8:b4:af:bf:df:86:94:c8:f8:cc:b6:5f:1a:85:
8c:18:26:13:66:0d:9f:c2:2d:86:f9:c5:3e:84:35:d5:d1:3a:
56:60:6a:c0:a7:37:98:c8:09:47:df:f8:15:f0:d5:85:d8:ee:
4a:b1:a9:15:fb:50:b9:eb:a2:6a:a4:8c:fd:89:22:23:15:6e:
03:68:48:30:38:4a:4e:9e:f6:4a:c1:85:b9:da:10:95:5c:23:
7a:69:8c:63:28:fb:63:19:42:e2:b2:ee:b2:88:bd:65:9a:c1:
03:f4:0c:4c:ec:8c:68:af:4b:3a:f5:92:87:b9:e9:28:7e:92:
d0:84:6c:1f:e6:4a:3e:ab:8c:58:3e:4d:c6:02:b9:d7:e5:a1:
bd:d9:92:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:13 2024 by rpki-client on console-ams.rpki-client.org