Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/SYHsNoOTmBsdlXEYZ96P_lRpiTg.roa
File: SYHsNoOTmBsdlXEYZ96P_lRpiTg.roa (raw, json)
Hash identifier: QC8yTYY+3kQD/4pKiKwmpwWBsU0bzmBHJRHxYqaVD3U=
Subject key identifier: 49:81:EC:36:83:93:98:1B:1D:95:71:18:67:DE:8F:FE:54:69:89:38
Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial: 0187707E26F316F16DB67DA4538B25F83A43
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/SYHsNoOTmBsdlXEYZ96P_lRpiTg.roa
Signing time: Tue 11 Apr 2023 13:25:28 +0000
ROA not before: Tue 11 Apr 2023 13:25:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44565
IP address blocks: 188.124.4.0/24 maxlen: 24
188.124.1.0/24 maxlen: 24
188.124.0.0/24 maxlen: 24
188.124.3.0/24 maxlen: 24
188.124.2.0/24 maxlen: 24
188.124.11.0/24 maxlen: 24
188.124.6.0/24 maxlen: 24
188.124.8.0/24 maxlen: 24
188.124.7.0/24 maxlen: 24
188.124.10.0/24 maxlen: 24
188.124.9.0/24 maxlen: 24
188.124.13.0/24 maxlen: 24
188.124.12.0/24 maxlen: 24
188.124.15.0/24 maxlen: 24
188.124.14.0/24 maxlen: 24
188.124.16.0/24 maxlen: 24
188.124.18.0/24 maxlen: 24
188.124.20.0/24 maxlen: 24
188.124.19.0/24 maxlen: 24
188.124.22.0/24 maxlen: 24
188.124.21.0/24 maxlen: 24
188.124.24.0/24 maxlen: 24
188.124.23.0/24 maxlen: 24
188.124.25.0/24 maxlen: 24
188.124.27.0/24 maxlen: 24
188.124.26.0/24 maxlen: 24
188.124.29.0/24 maxlen: 24
188.124.28.0/24 maxlen: 24
188.124.31.0/24 maxlen: 24
188.124.30.0/24 maxlen: 24
79.171.17.0/24 maxlen: 24
79.171.16.0/24 maxlen: 24
79.171.19.0/24 maxlen: 24
79.171.18.0/24 maxlen: 24
79.171.21.0/24 maxlen: 24
79.171.20.0/24 maxlen: 24
93.186.112.0/24 maxlen: 24
93.186.113.0/24 maxlen: 24
93.186.115.0/24 maxlen: 24
93.186.114.0/24 maxlen: 24
93.186.117.0/24 maxlen: 24
93.186.116.0/24 maxlen: 24
93.186.118.0/24 maxlen: 24
93.186.120.0/24 maxlen: 24
93.186.119.0/24 maxlen: 24
93.186.122.0/24 maxlen: 24
93.186.121.0/24 maxlen: 24
93.186.124.0/24 maxlen: 24
93.186.123.0/24 maxlen: 24
93.186.127.0/24 maxlen: 24
93.186.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Apr 2023 17:57:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:7e:26:f3:16:f1:6d:b6:7d:a4:53:8b:25:f8:3a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
Validity
Not Before: Apr 11 13:25:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4981ec368393981b1d95711867de8ffe54698938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:c6:a0:c6:6b:dc:0c:f2:6a:70:92:70:47:
a6:05:68:53:8f:4f:2a:fd:6b:43:5d:57:35:d0:40:
59:74:bc:ac:f0:07:19:9d:e8:88:7c:20:3c:36:66:
50:fb:f5:24:08:c7:79:4b:6b:81:a6:e1:28:65:88:
75:cb:08:a2:93:01:4a:cb:41:f4:25:a6:0a:59:3c:
65:02:06:57:c5:ce:1c:2e:1a:97:e4:73:45:ec:70:
a8:12:cc:99:21:f7:6e:0a:e6:66:14:fc:74:c8:94:
5d:ac:e3:06:38:a4:79:32:61:e6:e1:fc:62:10:de:
6c:17:07:16:79:45:50:52:3e:e6:3f:13:58:60:6e:
b3:a1:d5:c5:e5:67:67:70:e8:bd:03:8f:07:5a:fa:
7c:11:54:6e:5c:92:4f:c6:f2:bd:b1:53:67:58:ef:
7d:ba:bc:9a:08:c3:5d:33:fc:d5:de:cd:48:11:08:
74:0a:08:97:63:40:36:3f:d9:31:98:75:6b:7a:69:
93:26:16:24:af:03:bb:2f:f9:85:b1:78:bf:93:47:
03:90:fd:88:cc:92:b2:43:13:0f:c4:e0:e0:99:d2:
19:3a:0e:41:78:9a:a8:8d:88:22:d3:6a:0f:01:a4:
1f:e5:89:c9:8c:89:73:65:e4:41:1e:f9:42:5b:a4:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:81:EC:36:83:93:98:1B:1D:95:71:18:67:DE:8F:FE:54:69:89:38
X509v3 Authority Key Identifier:
keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/SYHsNoOTmBsdlXEYZ96P_lRpiTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.16.0-79.171.21.255
93.186.112.0-93.186.124.255
93.186.126.0/23
188.124.0.0-188.124.4.255
188.124.6.0-188.124.16.255
188.124.18.0-188.124.31.255
Signature Algorithm: sha256WithRSAEncryption
67:3b:61:10:3f:49:39:2c:32:1d:67:a9:49:1a:33:6e:23:63:
c7:4a:26:1a:ad:71:9f:55:ac:80:18:48:41:66:79:6e:7e:97:
0b:f1:8d:58:fa:9b:c8:95:53:8f:54:35:d9:ef:3a:54:77:13:
40:b6:b3:ff:db:08:de:07:5e:ec:26:d5:63:7d:a4:89:2c:ce:
fd:ff:2d:b0:f0:0b:4e:e5:8d:a7:fd:23:40:94:9a:6d:e9:4e:
ab:19:98:6e:2d:e4:18:f6:f6:a2:79:2b:14:20:e4:eb:d7:73:
44:0a:31:fa:7a:d3:d9:a8:b3:14:2d:cf:7f:de:89:25:d2:7f:
66:3b:fc:73:bf:43:57:bf:83:ad:06:d4:6b:09:b3:48:ee:e4:
0b:9d:0e:ac:99:c0:6f:2d:cc:87:ef:1e:d2:b7:30:46:f5:8c:
09:ed:81:ae:44:42:07:64:72:be:76:29:77:65:f8:ff:51:93:
30:b4:59:d9:97:be:fc:ea:d6:03:ad:d4:db:66:0c:43:5a:b6:
74:2d:4c:92:61:7b:fb:7e:b9:90:7b:19:1b:1a:30:fa:e7:eb:
38:67:33:2a:75:91:4d:50:06:27:34:9c:9d:3b:e7:53:89:c9:
f5:9c:00:36:0c:86:db:85:bf:ab:11:31:5f:03:67:90:cd:07:
09:7d:ec:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:02 2024 by rpki-client on console-ams.rpki-client.org