Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/3ruJ0SoR_4w7CgAUfxLz1jDk-SI.roa
File: 3ruJ0SoR_4w7CgAUfxLz1jDk-SI.roa (raw, json)
Hash identifier: sp4M1Olf4RKUa/4gzN/NN9+bFhoU0F0nmq29o9GLvxo=
Subject key identifier: DE:BB:89:D1:2A:11:FF:8C:3B:0A:00:14:7F:12:F3:D6:30:E4:F9:22
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018571F0FD1F4DC4F31E59A836EC51CBB1DC
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/3ruJ0SoR_4w7CgAUfxLz1jDk-SI.roa
Signing time: Mon 02 Jan 2023 10:04:56 +0000
ROA not before: Mon 02 Jan 2023 10:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199738
IP address blocks: 176.227.146.0/24 maxlen: 24
5.154.58.0/24 maxlen: 24
5.154.56.0/24 maxlen: 24
5.154.57.0/24 maxlen: 24
5.154.56.0/22 maxlen: 22
5.154.59.0/24 maxlen: 24
109.167.92.0/24 maxlen: 24
84.232.55.0/24 maxlen: 24
109.167.92.0/23 maxlen: 23
109.167.93.0/24 maxlen: 24
93.114.252.0/23 maxlen: 23
93.114.252.0/24 maxlen: 24
93.114.253.0/24 maxlen: 24
109.167.58.0/23 maxlen: 23
109.167.58.0/24 maxlen: 24
109.167.64.0/24 maxlen: 24
109.167.64.0/23 maxlen: 23
109.167.59.0/24 maxlen: 24
109.167.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:fd:1f:4d:c4:f3:1e:59:a8:36:ec:51:cb:b1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 10:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=debb89d12a11ff8c3b0a00147f12f3d630e4f922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:98:f7:0b:70:32:c1:45:3e:34:96:d6:dd:
bd:98:88:c0:48:e7:c1:c4:91:e7:ce:59:8a:5e:85:
12:c5:1d:c9:17:97:1f:67:93:e4:25:bc:64:fe:65:
7a:f6:a2:4e:c2:93:5d:7b:48:d9:10:0c:04:78:2c:
42:80:ae:47:f6:f0:45:e8:84:21:e3:67:f7:c5:94:
41:e0:b2:4b:15:5d:ca:0b:00:39:0c:dc:a3:d0:58:
64:1c:7f:8c:9f:11:e5:7e:71:89:39:4d:fd:50:cc:
b8:48:b0:b4:9d:d7:ff:58:59:94:8e:44:99:6c:08:
d6:6d:fb:eb:23:84:10:31:a1:51:aa:2f:e8:d3:6e:
71:77:35:98:0a:43:e9:05:8e:ca:6f:d1:99:e5:65:
15:ba:58:55:77:6c:98:d9:94:35:04:03:e2:c7:07:
53:70:25:67:72:7e:5a:a8:d6:b3:5a:4a:e4:cd:32:
51:64:48:ed:ba:d7:c9:c7:5b:f8:89:dc:e8:76:3b:
5f:29:91:c0:0f:7f:68:68:af:d8:0e:72:21:23:7d:
a4:98:00:8a:fb:20:a4:e4:4a:8f:1a:c3:b5:c2:ad:
da:81:e4:58:66:01:a0:21:1e:c7:e1:18:4b:a4:7c:
e9:57:d6:cf:01:74:19:f3:63:e5:d1:39:5c:cf:2a:
01:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BB:89:D1:2A:11:FF:8C:3B:0A:00:14:7F:12:F3:D6:30:E4:F9:22
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/3ruJ0SoR_4w7CgAUfxLz1jDk-SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.56.0/22
84.232.55.0/24
93.114.252.0/23
109.167.58.0/23
109.167.64.0/23
109.167.92.0/23
176.227.146.0/24
Signature Algorithm: sha256WithRSAEncryption
16:fc:b3:7d:5f:37:b3:7b:5d:f1:61:5e:1f:77:45:10:e1:19:
71:67:8d:34:f9:f4:88:ca:7d:b3:31:05:ab:90:dc:4a:ae:0b:
f5:49:cf:8e:bc:a8:74:36:89:b4:32:7f:6e:10:93:1d:bc:60:
ac:2c:4b:d1:94:7d:e2:5e:3d:8d:5a:bf:fc:75:08:d5:5c:06:
f5:2f:1d:9c:b6:ff:6f:47:3d:7b:7c:c5:1a:22:8b:23:c9:d2:
df:d2:63:28:4f:0d:30:c4:6f:d0:6f:ba:77:8c:95:8b:14:12:
9c:bb:6a:9b:41:f6:02:a2:80:53:04:7f:80:65:43:0c:bb:17:
91:0b:df:04:38:cd:50:e6:fc:e8:f7:b3:83:70:e5:c3:f1:ab:
48:7d:dc:33:1b:17:96:f9:a5:31:f9:83:72:ba:02:1a:91:34:
fc:a7:f4:8b:af:06:c4:b7:ce:0e:8b:80:ba:e4:a8:c7:1e:21:
82:e5:42:2d:16:41:45:a5:e7:38:a1:a7:ac:f3:ab:54:12:ff:
9b:a5:29:fd:1f:5f:45:7e:b8:12:f7:50:b1:35:62:db:55:5d:
3f:30:66:24:03:73:f9:65:e1:70:0e:f7:31:68:2d:87:d4:1a:
74:4c:37:6c:46:4f:3a:be:c4:73:66:18:e5:b1:b4:91:c4:35:
b9:9d:32:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:01 2024 by rpki-client on console-ams.rpki-client.org