Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/7St5wDLd70rnulwH397hvvQrvKk.roa
File: 7St5wDLd70rnulwH397hvvQrvKk.roa (raw, json)
Hash identifier: XDEHC1f2isiUOqajmTvSruqJDOFAsaJWuTBV59mlrYA=
Subject key identifier: ED:2B:79:C0:32:DD:EF:4A:E7:BA:5C:07:DF:DE:E1:BE:F4:2B:BC:A9
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 018991CCD2E4F5769DEF91A7072C488650E2
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/7St5wDLd70rnulwH397hvvQrvKk.roa
Signing time: Wed 26 Jul 2023 10:44:26 +0000
ROA not before: Wed 26 Jul 2023 10:44:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200414
IP address blocks: 194.29.180.0/23 maxlen: 23
195.110.50.0/24 maxlen: 24
185.11.108.0/23 maxlen: 23
178.219.131.0/24 maxlen: 24
178.219.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Aug 2023 06:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:91:cc:d2:e4:f5:76:9d:ef:91:a7:07:2c:48:86:50:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Jul 26 10:44:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed2b79c032ddef4ae7ba5c07dfdee1bef42bbca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5b:90:1d:e4:01:bb:65:17:e0:7d:f9:ad:4b:
f3:15:b1:bc:53:08:0c:9c:ba:17:ae:b9:1e:93:31:
9c:70:4c:a0:50:c9:6e:23:bf:00:00:27:a1:ee:54:
d1:10:ce:ce:ba:cd:e3:0d:29:c2:24:1c:65:39:d1:
0a:de:01:c4:ad:1f:5b:5a:a1:7c:e2:fc:77:d9:d1:
c4:c1:65:4e:79:ef:f6:a8:02:1b:ad:37:39:34:b7:
bc:b2:22:2f:ea:54:5b:18:a3:5e:11:96:2c:5b:6f:
a3:67:dd:23:bc:3c:af:cd:f8:e4:e4:ac:07:79:68:
ca:1b:b7:83:06:66:19:89:76:18:35:e0:da:a3:4e:
d2:c4:18:47:98:2d:f3:e1:bd:ef:c0:94:99:68:b7:
ac:45:49:5e:3b:af:55:e6:c8:87:20:a2:cb:f3:94:
0c:95:36:24:03:0d:62:aa:18:25:f2:50:89:22:64:
97:92:72:30:3a:d2:ee:ba:6b:3d:f4:78:d5:87:0c:
1f:f1:59:aa:df:1a:d6:53:d1:05:d6:44:1a:af:ec:
81:ad:6b:c7:55:33:77:56:b1:5e:30:73:e3:28:b1:
4e:be:c3:d6:1a:41:dc:b7:88:66:1e:97:be:34:a5:
33:0a:9f:c9:64:55:24:8b:6b:68:81:2b:da:51:96:
e1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2B:79:C0:32:DD:EF:4A:E7:BA:5C:07:DF:DE:E1:BE:F4:2B:BC:A9
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/7St5wDLd70rnulwH397hvvQrvKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.128.0/24
178.219.131.0/24
185.11.108.0/23
194.29.180.0/23
195.110.50.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a7:e4:b3:d7:a2:4d:82:04:5b:a4:43:39:4f:fd:d0:36:77:
8c:58:f0:46:da:31:35:e9:d4:35:bf:ee:3d:28:78:75:72:c2:
39:08:94:33:db:b8:09:24:68:82:f7:96:47:de:70:20:07:fe:
72:63:6a:c9:2b:4e:fc:f3:20:18:34:e1:0d:b0:85:5e:0c:18:
5c:aa:65:1f:40:d6:25:e5:e6:61:c0:cc:83:d7:b9:ab:f8:19:
d1:94:33:eb:7e:b8:1a:1f:09:f4:80:00:31:9f:82:19:e8:ad:
ee:34:d4:00:6c:1a:a8:34:24:97:1c:0f:df:ce:4a:ce:42:5d:
5b:ba:1f:e8:e0:e7:13:c0:88:4d:e4:34:d2:48:a7:cf:68:44:
c7:91:96:da:3b:98:54:03:e0:04:41:07:2f:1c:3a:79:50:fe:
fe:ed:a5:b7:4e:62:3b:d8:d8:e0:f3:b7:a9:85:3c:ea:44:0b:
14:7a:09:25:3b:88:83:f9:0d:90:35:72:c1:e6:c4:c2:de:bc:
98:af:ad:d9:34:45:c6:fb:84:26:03:e6:f0:c3:81:0b:b6:6a:
1a:c5:a3:e9:e7:b0:76:05:7f:bf:f1:db:26:2d:e9:61:18:d2:
c7:5f:23:a9:d6:40:c7:b1:67:71:d9:d8:3a:2c:4f:25:28:cf:
a3:80:e4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:59 2024 by rpki-client on console-ams.rpki-client.org