Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/8XHU7wV56kraylZtcNZ9Yt1pNX8.roa
File: 8XHU7wV56kraylZtcNZ9Yt1pNX8.roa (raw, json)
Hash identifier: IBc/RqrVRlWoeV5O8hhC51N7PdnZXLNTf7TISfRykRo=
Subject key identifier: F1:71:D4:EF:05:79:EA:4A:DA:CA:56:6D:70:D6:7D:62:DD:69:35:7F
Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial: 0188003D7C6D897D7241FFCA8DB58A02C4EE
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/8XHU7wV56kraylZtcNZ9Yt1pNX8.roa
Signing time: Tue 09 May 2023 11:20:09 +0000
ROA not before: Tue 09 May 2023 11:20:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198508
IP address blocks: 185.168.4.0/22 maxlen: 22
185.168.4.0/24 maxlen: 24
185.168.7.0/24 maxlen: 24
185.168.5.0/24 maxlen: 24
185.168.6.0/24 maxlen: 24
37.75.224.0/21 maxlen: 21
2a00:8440::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:00:3d:7c:6d:89:7d:72:41:ff:ca:8d:b5:8a:02:c4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Validity
Not Before: May 9 11:20:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f171d4ef0579ea4adaca566d70d67d62dd69357f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c4:2c:82:83:15:f9:05:3f:aa:fe:0c:bd:98:
2c:33:44:21:b3:bd:bd:e5:3b:27:51:d2:3d:bb:48:
7f:4c:fa:82:2c:d9:cf:e8:38:6a:bc:9c:8c:94:c0:
41:c1:24:5e:0e:6e:d6:64:36:4c:56:4d:dd:1f:0d:
00:69:93:34:14:6a:e3:92:3a:86:4f:22:c3:ef:e6:
5c:18:83:b1:e3:88:a6:d2:57:5c:c2:9c:82:58:ec:
d2:f3:ca:50:41:cd:5e:1f:f5:a6:40:00:90:f1:32:
9c:28:a0:f6:db:d2:c3:f6:63:84:b5:9f:24:5f:0a:
17:3c:ef:8b:e4:a8:7a:2b:ee:61:f5:03:1f:73:5b:
be:24:7f:4b:32:7f:31:de:b8:53:3c:cc:10:3c:84:
42:f7:ba:44:3e:55:da:07:13:d3:31:4c:14:a5:8f:
15:e3:99:ca:b1:0c:72:15:38:96:37:42:db:b5:e8:
f1:0f:1c:fc:6a:31:08:a4:f7:83:7d:d0:48:98:0b:
58:4e:01:65:e0:df:32:a6:1c:cf:58:33:21:88:3c:
3a:c2:eb:6f:50:f0:50:ed:2e:c1:92:86:e8:00:1d:
ce:f5:f7:74:0d:eb:99:8f:d7:24:1c:58:5f:71:d2:
8f:fd:94:d8:99:24:a7:d4:59:98:13:17:7f:3f:46:
c5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:71:D4:EF:05:79:EA:4A:DA:CA:56:6D:70:D6:7D:62:DD:69:35:7F
X509v3 Authority Key Identifier:
keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/8XHU7wV56kraylZtcNZ9Yt1pNX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.224.0/21
185.168.4.0/22
IPv6:
2a00:8440::/32
Signature Algorithm: sha256WithRSAEncryption
62:75:2e:58:88:e9:0e:f9:fd:9a:5d:83:14:d6:f6:e2:5c:5b:
5d:d2:06:4e:ee:cf:d8:b4:34:94:69:d0:7f:80:61:53:7e:cb:
76:24:59:f3:c2:38:e2:a7:c3:0e:19:71:30:1d:c1:6c:ea:fc:
10:87:15:ee:70:28:cf:c0:4d:84:0a:9e:9c:87:e4:da:8f:62:
fc:82:30:80:42:41:49:bb:22:7c:79:eb:56:34:b9:f9:8c:95:
29:0b:19:17:ec:ff:09:e9:bf:52:b2:02:49:57:09:95:e7:bd:
99:c5:01:b9:23:06:cd:70:6a:e8:4e:d0:53:3b:21:60:ec:3b:
c7:6d:47:69:29:52:a3:d2:4d:c5:88:18:6e:4d:eb:73:c6:40:
92:73:2b:95:06:91:41:ea:9b:6c:96:5c:22:11:b6:f4:29:d5:
a6:3b:84:e1:ae:8b:65:8d:b3:9c:b6:19:ed:56:76:a5:14:9e:
71:21:9e:7c:3e:12:4e:f9:38:5f:a3:a4:7d:9d:c2:02:ba:d2:
e6:f4:ae:02:5a:4e:29:26:b8:9c:c4:57:f1:7f:f9:4e:fd:5d:
35:ab:ce:6c:3c:d5:83:9a:c3:3f:16:c3:0b:51:93:ca:7d:26:
54:ed:4a:a5:99:f4:c6:4e:45:35:65:94:af:6c:04:99:4a:f9:
22:00:53:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:12 2024 by rpki-client on console-fra.rpki-client.org