Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/rCgiZXV9nnupYu5djKegrp7EgjQ.roa
File: rCgiZXV9nnupYu5djKegrp7EgjQ.roa (raw, json)
Hash identifier: 3QWzHvZDcH3F5jRHV6y27I4sglunXUmhrrF6K21CRtg=
Subject key identifier: AC:28:22:65:75:7D:9E:7B:A9:62:EE:5D:8C:A7:A0:AE:9E:C4:82:34
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 018D36C49E4F50EFEC59AAD825E5C3FA3513
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/rCgiZXV9nnupYu5djKegrp7EgjQ.roa
Signing time: Tue 23 Jan 2024 14:41:11 +0000
ROA not before: Tue 23 Jan 2024 14:41:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 93.180.216.0/24 maxlen: 24
93.180.217.0/24 maxlen: 24
93.180.218.0/24 maxlen: 24
93.180.219.0/24 maxlen: 24
93.180.220.0/24 maxlen: 24
93.180.221.0/24 maxlen: 24
93.180.222.0/24 maxlen: 24
93.180.223.0/24 maxlen: 24
138.124.156.0/24 maxlen: 24
138.124.157.0/24 maxlen: 24
138.124.158.0/24 maxlen: 24
138.124.159.0/24 maxlen: 24
144.86.228.0/24 maxlen: 24
144.86.229.0/24 maxlen: 24
144.86.230.0/24 maxlen: 24
144.86.231.0/24 maxlen: 24
185.20.196.0/24 maxlen: 24
185.20.197.0/24 maxlen: 24
185.20.198.0/23 maxlen: 23
185.20.198.0/24 maxlen: 24
185.20.199.0/24 maxlen: 24
185.138.120.0/23 maxlen: 23
185.138.120.0/24 maxlen: 24
185.138.121.0/24 maxlen: 24
185.138.122.0/24 maxlen: 24
185.138.123.0/24 maxlen: 24
185.254.12.0/24 maxlen: 24
185.254.13.0/24 maxlen: 24
185.254.14.0/24 maxlen: 24
185.254.15.0/24 maxlen: 24
195.133.220.0/24 maxlen: 24
195.133.221.0/24 maxlen: 24
195.133.222.0/24 maxlen: 24
195.133.223.0/24 maxlen: 24
199.74.188.0/24 maxlen: 24
199.74.189.0/24 maxlen: 24
199.74.190.0/24 maxlen: 24
199.74.191.0/24 maxlen: 24
2a0b:1880::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 06 Feb 2024 20:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:36:c4:9e:4f:50:ef:ec:59:aa:d8:25:e5:c3:fa:35:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Jan 23 14:41:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac282265757d9e7ba962ee5d8ca7a0ae9ec48234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4f:cb:69:b3:ee:ba:62:79:1e:29:c3:8e:f3:
23:be:b6:c6:d8:b0:d4:13:b2:27:a4:6f:93:45:a1:
e1:9f:b1:67:f0:72:c9:0f:fa:63:33:8b:e7:a2:0d:
93:87:91:5f:9d:07:a3:16:2e:bb:5d:e7:b5:8a:79:
20:46:dd:df:83:7c:dd:4f:f7:9b:a5:f5:e0:f1:98:
21:5c:f3:f1:77:95:af:7d:e2:1f:3f:e7:54:40:68:
ce:b2:27:bc:53:cb:07:c4:ba:a2:ec:9c:5f:94:8a:
5f:cc:85:74:2c:43:a7:73:36:a2:a9:f3:8a:bb:ff:
0b:11:f5:3e:7f:bb:38:5f:3c:8d:16:32:33:7d:08:
c1:8c:7a:91:8f:3e:74:c6:96:d9:c8:51:33:9e:b7:
89:a8:8d:a9:a0:21:bb:28:b8:f5:f2:1a:85:41:59:
f9:64:e3:f4:07:51:43:fe:d3:88:ba:41:5a:87:f6:
cc:c8:db:cb:87:4d:e1:e3:d9:8d:5d:98:4b:85:39:
6b:84:8c:3d:9e:e1:4f:e4:62:76:ff:68:ba:0d:22:
d6:92:6d:d4:f4:94:02:c9:a6:89:d2:51:87:90:c9:
d9:91:b4:55:87:ef:5f:df:51:60:e1:3e:51:d1:b9:
59:aa:f7:b2:0f:88:1b:7e:f3:3c:27:1d:58:b9:fd:
1b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:28:22:65:75:7D:9E:7B:A9:62:EE:5D:8C:A7:A0:AE:9E:C4:82:34
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/rCgiZXV9nnupYu5djKegrp7EgjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.216.0/21
138.124.156.0/22
144.86.228.0/22
185.20.196.0/22
185.138.120.0/22
185.254.12.0/22
195.133.220.0/22
199.74.188.0/22
IPv6:
2a0b:1880::/29
Signature Algorithm: sha256WithRSAEncryption
c8:22:7b:d2:fb:4f:3b:4c:d3:3f:38:0c:9c:a7:88:60:65:ba:
06:03:88:56:35:ff:9e:fd:ee:02:26:3a:61:ff:11:15:f2:b5:
a3:43:84:d0:7e:15:65:3a:2c:2e:e1:1a:97:24:b9:ae:2c:ee:
6b:6c:69:ce:4f:d7:8e:d5:bf:a1:8f:b3:9f:e5:02:ae:17:04:
3a:3c:61:60:8c:0d:e9:62:4b:77:da:0e:56:08:b9:93:47:26:
11:d4:fc:d8:0f:9b:fd:39:17:73:5a:c7:ce:37:85:3f:49:14:
97:0d:4f:4f:ac:8e:55:28:66:3a:db:9e:7f:d4:a5:27:9b:dd:
d2:f1:ca:11:41:29:ac:21:6d:4e:01:c3:1c:e7:81:af:04:f4:
cb:8b:f0:4d:c0:b9:4c:6e:cd:91:4e:24:5a:bb:bf:a0:67:56:
65:05:51:a0:76:a0:68:84:df:5e:f5:55:e1:a6:fa:73:19:e1:
68:03:59:1b:d7:3d:47:02:80:e8:70:c9:35:e3:3f:8c:56:f4:
64:dd:a2:a4:62:04:c7:67:8d:a8:d7:f5:54:64:95:97:6d:d2:
7c:a0:ec:26:be:87:7a:f0:e3:ea:4f:fe:01:ab:23:fa:8e:a0:
ea:2e:76:b4:1e:68:76:77:9c:d6:a2:10:2e:a4:6e:56:4e:98:
70:a8:77:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 00:16:52 2024 by rpki-client on console-ams.rpki-client.org