Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/4siblAk8V2nmpnCRz-ityXKvRpU.roa
File: 4siblAk8V2nmpnCRz-ityXKvRpU.roa (raw, json)
Hash identifier: wBK2ElUkw+AP+bXjU5dsl+SzTteNxif/bM6uc7cftGY=
Subject key identifier: E2:C8:9B:94:09:3C:57:69:E6:A6:70:91:CF:E8:AD:C9:72:AF:46:95
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 01856DEF644287B3F0AFF1348DA92623F023
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/4siblAk8V2nmpnCRz-ityXKvRpU.roa
Signing time: Sun 01 Jan 2023 15:24:43 +0000
ROA not before: Sun 01 Jan 2023 15:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197588
IP address blocks: 185.101.188.0/22 maxlen: 22
185.101.188.0/24 maxlen: 24
185.101.190.0/24 maxlen: 24
185.101.190.0/23 maxlen: 23
195.110.51.0/24 maxlen: 24
178.219.129.0/24 maxlen: 24
178.219.130.0/24 maxlen: 24
2a00:c020::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 26 Jul 2023 10:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:64:42:87:b3:f0:af:f1:34:8d:a9:26:23:f0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Jan 1 15:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2c89b94093c5769e6a67091cfe8adc972af4695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:05:83:32:b9:b9:e9:47:ab:20:b0:54:ca:b7:
58:17:4e:4d:35:20:7f:6b:26:3e:ec:34:04:17:a6:
9e:da:8f:32:0c:07:0c:47:8a:28:53:3c:1c:07:16:
ec:e3:df:4d:b1:2e:ad:bd:e3:75:ee:fb:c4:ab:b4:
87:33:bc:b9:64:b0:0b:bb:86:4e:f3:74:15:e1:18:
ca:1b:f5:c4:13:26:42:c2:e8:c6:28:c6:71:12:1d:
6c:db:e8:d1:92:f4:12:c4:6f:f4:bd:96:00:50:15:
a0:6a:7f:30:81:5d:fc:fd:76:8b:8c:0b:81:32:d5:
3d:7a:8c:1f:2c:1d:3c:af:1e:8b:53:af:e8:9f:21:
cc:96:02:04:72:c2:5b:1c:4d:cc:a9:d9:ef:c7:16:
47:ad:6b:39:e7:40:cd:3a:0b:7d:db:8b:de:80:d8:
68:be:b9:84:24:4d:0b:e4:c2:5d:b5:cd:8f:dc:4b:
24:71:a6:f5:b1:95:9c:10:d1:21:64:ef:c2:09:96:
83:1b:9a:20:3b:33:b2:c8:07:f7:0e:56:ab:15:e7:
a7:c7:88:ec:9d:22:95:89:a2:41:75:78:95:82:20:
3b:09:65:6e:26:fb:a0:b6:bc:11:ce:15:60:b8:51:
eb:ae:75:36:1b:80:b3:1b:07:cc:be:fd:77:5d:e4:
36:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C8:9B:94:09:3C:57:69:E6:A6:70:91:CF:E8:AD:C9:72:AF:46:95
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/4siblAk8V2nmpnCRz-ityXKvRpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.129.0-178.219.130.255
185.101.188.0/22
195.110.51.0/24
IPv6:
2a00:c020::/36
Signature Algorithm: sha256WithRSAEncryption
8c:04:dd:6b:4c:af:38:1b:61:9d:aa:8d:a0:18:35:8d:b3:64:
68:b6:d9:d8:4a:d6:e9:d8:1d:bb:37:c4:a6:55:ff:89:54:ac:
52:c2:83:b7:4c:1c:7b:09:4f:0f:05:23:98:8c:0a:67:57:e8:
2e:05:76:2d:4e:df:5d:37:ca:2a:ae:a4:64:95:84:24:2b:0e:
bc:93:e1:69:39:a0:24:ba:0a:82:67:ea:b1:5d:95:be:6e:9f:
24:b9:8a:2b:0a:85:0a:46:ef:64:95:5d:c2:77:ae:a5:be:9e:
f9:0e:3c:83:d7:2d:bf:a4:8b:f4:b0:75:88:c6:9d:d9:fc:cf:
06:a9:1c:9d:70:29:65:2b:a8:62:7b:5f:60:03:4a:db:72:5f:
54:35:fa:b2:93:ff:57:d7:08:17:46:01:37:cb:c7:c4:16:88:
aa:c5:ac:a3:bd:c0:35:74:42:1b:40:dd:18:a7:84:30:20:0a:
14:7d:9d:17:02:be:8c:92:1f:b7:ed:1a:a0:81:59:f7:9f:7f:
87:a5:f1:63:7f:0d:87:8e:1d:91:f8:c0:c3:49:ff:51:34:ae:
4e:74:37:58:a0:7c:c7:b0:3c:1c:b4:4a:c6:d2:a9:7f:db:0d:
ad:74:d6:9b:f3:42:37:04:08:a7:cc:f1:de:b0:b8:1e:af:44:
ee:58:41:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:59 2024 by rpki-client on console-ams.rpki-client.org