Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/84cCMZJ6UiVEveR2oCisQlf91jM.roa
File: 84cCMZJ6UiVEveR2oCisQlf91jM.roa (raw, json)
Hash identifier: RDOIbBPz/XO5HuPmZ5K8MDJVJAy1H5gTD04amzBBz1Q=
Subject key identifier: F3:87:02:31:92:7A:52:25:44:BD:E4:76:A0:28:AC:42:57:FD:D6:33
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 018C16D6BF2B8421E6ADF811DC7B3A64D5F5
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/84cCMZJ6UiVEveR2oCisQlf91jM.roa
Signing time: Tue 28 Nov 2023 16:50:21 +0000
ROA not before: Tue 28 Nov 2023 16:50:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209737
IP address blocks: 160.20.109.0/24 maxlen: 24
185.254.31.0/24 maxlen: 24
185.243.181.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
109.236.49.0/24 maxlen: 24
109.236.50.0/24 maxlen: 24
91.194.55.0/24 maxlen: 24
193.160.141.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
185.86.6.0/24 maxlen: 24
93.190.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:16:d6:bf:2b:84:21:e6:ad:f8:11:dc:7b:3a:64:d5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Nov 28 16:50:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3870231927a522544bde476a028ac4257fdd633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:ae:fc:0f:83:3e:42:63:75:05:8e:53:a5:
c3:b1:d8:d9:6c:ef:04:09:c2:b4:4a:82:e6:19:66:
2e:57:db:52:f2:0a:7a:da:af:9b:c1:99:88:a0:47:
36:c6:29:90:b1:11:c3:1a:02:b4:76:3c:83:60:7c:
79:31:76:8d:e2:f8:a4:d9:59:f0:44:64:f9:4c:cc:
b7:0f:f1:92:76:fc:e2:b6:de:c2:aa:5e:0d:0c:f8:
fb:21:fc:07:27:7c:ac:b0:f3:5b:fd:14:92:b4:ec:
b9:4b:c6:37:0c:2e:31:d1:2c:78:ee:21:54:12:77:
2e:8d:65:71:da:8f:c0:c4:7b:ca:cb:4c:36:d8:af:
f8:79:01:15:9f:f0:b9:b6:7a:07:0a:25:7e:91:bf:
21:34:d0:0b:01:58:a3:e2:b0:90:05:8e:e1:ae:e7:
23:f9:0a:86:a8:f0:bb:07:72:a2:0c:95:60:cc:3e:
3e:27:44:f4:e1:0b:11:53:e1:5b:36:a1:5a:fa:65:
37:bc:4b:91:ac:ef:88:f2:92:9f:f4:cc:08:fd:52:
58:c3:5d:51:ce:26:d9:4f:b9:8e:c7:bc:3a:a7:d2:
1e:9a:f5:32:f4:07:af:5a:0d:6e:0b:0b:22:c7:fa:
63:47:4a:17:b1:75:a7:26:50:b5:68:9f:a5:84:47:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:87:02:31:92:7A:52:25:44:BD:E4:76:A0:28:AC:42:57:FD:D6:33
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/84cCMZJ6UiVEveR2oCisQlf91jM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.55.0/24
93.190.12.0/24
109.236.49.0-109.236.51.255
160.20.109.0/24
185.86.6.0/24
185.243.181.0/24
185.254.31.0/24
193.160.141.0/24
193.160.143.0/24
Signature Algorithm: sha256WithRSAEncryption
85:f5:25:df:5d:ae:d7:1f:f1:a8:51:ec:8f:db:c9:8a:d0:07:
29:9b:54:a5:22:27:85:e0:3c:ad:70:e9:a9:d3:64:48:9e:fd:
10:f5:7d:82:75:cf:3b:44:36:56:2b:6c:25:ed:f7:08:e6:24:
16:25:f9:35:f6:eb:a4:91:d9:05:18:54:84:d5:7c:01:aa:bb:
70:89:8a:30:78:93:56:69:46:af:ce:8f:64:35:78:7d:42:4f:
eb:21:87:00:92:35:c6:ae:dd:32:93:c4:8d:4e:2a:25:8e:7d:
6d:73:e2:b5:41:7c:34:60:83:d4:70:a5:31:9e:32:f2:43:0d:
e8:ae:4b:3a:01:c9:ef:d9:ef:61:24:c2:31:75:55:84:e4:a1:
f0:88:76:fc:86:0e:50:bd:ea:b5:0d:02:ad:8b:5f:0e:f6:68:
69:a1:6d:ca:ff:c5:47:42:23:9c:87:2f:d9:08:4b:9e:ad:bd:
63:cb:98:7c:ee:13:5e:9e:51:f4:9a:72:3d:52:ba:b5:07:4d:
c4:be:93:e9:0d:55:c9:cf:82:57:6d:5c:8b:60:f5:22:cc:30:
cc:2e:9e:95:02:5e:8c:2d:8a:93:f6:78:ab:21:66:6f:c8:89:
a6:06:99:d3:dd:8e:a8:c6:12:d8:dc:57:f0:c5:45:fd:96:10:
ac:2d:84:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:24 2024 by rpki-client on console-ams.rpki-client.org