Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ItxhGzpKj_cUDSVHlbC7UkwaFmM.roa
File: ItxhGzpKj_cUDSVHlbC7UkwaFmM.roa (raw, json)
Hash identifier: V3qARw68U4k/FBNR+vc97SiacEbOnrASN0nA9+lbhJE=
Subject key identifier: 22:DC:61:1B:3A:4A:8F:F7:14:0D:25:47:95:B0:BB:52:4C:1A:16:63
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01871A91FB6A2461FAFA026208332D51C53D
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ItxhGzpKj_cUDSVHlbC7UkwaFmM.roa
Signing time: Sat 25 Mar 2023 20:59:47 +0000
ROA not before: Sat 25 Mar 2023 20:59:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399587
IP address blocks: 194.28.156.0/24 maxlen: 24
194.28.158.0/24 maxlen: 24
194.104.4.0/24 maxlen: 24
194.104.5.0/24 maxlen: 24
194.104.6.0/24 maxlen: 24
185.177.78.0/23 maxlen: 24
212.69.133.0/24 maxlen: 24
212.69.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Mar 2023 21:16:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1a:91:fb:6a:24:61:fa:fa:02:62:08:33:2d:51:c5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 25 20:59:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22dc611b3a4a8ff7140d254795b0bb524c1a1663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:d9:ee:5f:67:a9:7a:45:64:65:4e:76:70:
f3:08:02:9a:57:cd:e4:76:38:c0:a5:c2:8c:9b:06:
42:f8:1f:34:32:6c:1d:81:a8:b3:46:14:be:42:fa:
b2:c2:2a:b1:ec:50:2f:fc:d2:0d:07:19:80:db:dd:
ee:47:23:5a:c5:47:66:c9:f6:31:19:75:59:48:4a:
b0:32:ce:9e:57:f1:cf:82:0c:e8:b1:58:56:aa:f7:
96:48:5e:b4:e6:23:08:00:ac:3a:07:9a:35:24:f3:
9e:2a:07:e2:8b:91:2c:d8:61:40:eb:62:b3:04:6f:
b4:3c:fa:e0:22:82:8b:1b:aa:94:14:27:67:d1:d6:
42:8f:63:93:26:70:45:05:be:62:fe:f6:7d:19:21:
04:5d:db:23:a7:01:28:00:66:9d:e1:d3:28:1f:8a:
6b:62:38:e0:81:ec:92:e9:d7:24:07:2d:0c:ed:31:
25:82:8e:e9:84:af:0c:b9:60:eb:b9:33:5c:fe:a7:
c1:04:aa:e9:4e:b2:06:a1:bf:e7:ae:10:45:21:05:
71:1d:b0:a7:43:b9:39:16:34:e2:51:ad:40:a5:44:
61:4d:fa:f3:75:bf:cf:c2:0e:43:1c:89:ad:3b:cf:
89:ea:e9:d7:3a:44:fd:a6:0f:fb:52:99:43:3c:33:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DC:61:1B:3A:4A:8F:F7:14:0D:25:47:95:B0:BB:52:4C:1A:16:63
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ItxhGzpKj_cUDSVHlbC7UkwaFmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.78.0/23
194.28.156.0/24
194.28.158.0/24
194.104.4.0-194.104.6.255
212.69.133.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
36:d2:42:e8:dc:0a:3d:80:d6:c1:55:94:36:21:bc:81:34:f3:
70:ed:68:1e:51:d8:00:df:b3:63:76:47:cb:13:ae:a8:75:72:
37:65:1f:7f:59:85:5c:e0:74:f5:9e:73:be:8c:e6:6b:a3:1f:
37:94:60:7b:93:30:c2:d9:cc:72:01:a7:76:d6:84:bd:5b:33:
ae:67:fa:55:79:de:96:26:e7:b2:d6:1f:bb:ad:63:2b:14:5f:
ca:75:d7:79:d3:16:d7:23:e4:8b:a6:3e:55:e7:4d:7e:35:37:
f6:6f:7e:8a:b9:c1:72:8d:7e:f9:ac:45:bb:28:2a:31:d8:1f:
78:67:b9:cb:57:51:3d:03:cf:35:11:2b:24:33:e4:a5:d1:9d:
83:26:89:86:bf:6b:50:f2:ab:79:f6:f1:91:45:e1:dc:72:9d:
35:11:08:cd:a6:dd:72:a5:10:28:ed:58:16:42:bc:28:ae:0b:
e7:49:fd:fb:b9:bc:6a:73:4e:e7:56:4b:f4:31:87:7a:69:69:
aa:20:d4:a7:0f:48:7e:0f:9b:40:f2:4b:32:42:83:2e:df:cf:
b6:1b:76:96:40:33:a8:cd:ce:f1:ae:5d:5e:88:ca:c3:97:3a:
38:ba:c6:c1:38:f5:d5:89:f7:5c:6e:f4:49:57:b9:81:50:ee:
56:bc:db:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:37 2024 by rpki-client on console-fra.rpki-client.org