Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/2xKmGy20RrjrD4smFd1uGm8l_sQ.roa
File: 2xKmGy20RrjrD4smFd1uGm8l_sQ.roa (raw, json)
Hash identifier: LToCMUxtkJ7U1pkOb4LY9P6SphQYQgF8t7ASPpQcNKA=
Subject key identifier: DB:12:A6:1B:2D:B4:46:B8:EB:0F:8B:26:15:DD:6E:1A:6F:25:FE:C4
Certificate issuer: /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial: 0185FD10B2174A00AE1BF861D2540FF4A0E3
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/2xKmGy20RrjrD4smFd1uGm8l_sQ.roa
Signing time: Sun 29 Jan 2023 10:26:47 +0000
ROA not before: Sun 29 Jan 2023 10:26:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202779
IP address blocks: 213.173.96.0/19 maxlen: 24
213.244.248.0/21 maxlen: 21
185.154.156.0/24 maxlen: 24
185.154.159.0/24 maxlen: 24
185.154.157.0/24 maxlen: 24
185.154.158.0/24 maxlen: 24
91.201.220.0/24 maxlen: 24
91.201.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 26 Apr 2023 11:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fd:10:b2:17:4a:00:ae:1b:f8:61:d2:54:0f:f4:a0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Validity
Not Before: Jan 29 10:26:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db12a61b2db446b8eb0f8b2615dd6e1a6f25fec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6b:07:35:80:ba:df:e5:ae:25:37:48:8e:84:
34:00:c3:70:5f:40:a3:e0:1c:9d:d6:3e:84:fe:f7:
f3:75:37:a9:cb:5f:3e:21:b1:af:6f:ff:8e:a1:fc:
fc:cc:33:99:64:83:4f:c7:d4:d5:e2:0b:6c:3a:a8:
bc:41:83:5e:7d:42:75:01:af:ed:3a:db:39:77:7d:
a7:73:8d:db:7b:6b:00:b5:f2:75:95:86:15:3d:14:
e0:b6:b5:6e:5a:74:e4:47:44:18:36:39:dc:75:e1:
93:98:b6:1c:f3:76:84:e1:81:bb:77:8d:b6:fc:f9:
f5:3f:d2:55:c3:e1:99:4c:bb:43:09:e4:b3:c2:97:
d1:8e:cf:a3:1d:ce:f0:01:19:cd:1d:00:21:8b:55:
c4:02:2a:8a:af:a6:41:a7:3c:0b:09:22:9c:14:c7:
fd:61:e1:a2:84:3a:23:88:53:f6:09:ee:60:5c:51:
5d:fd:fa:72:18:e2:7b:a0:22:6f:c2:23:e3:bf:db:
82:db:17:34:fa:25:cc:2c:45:8e:52:8c:ad:d8:0a:
41:67:cd:cf:85:b2:fb:88:fa:07:dd:b8:02:1f:ee:
da:e9:f4:85:39:9e:a8:83:bc:9f:4b:aa:f5:5c:f1:
b3:d2:8d:10:8e:69:22:2a:61:fa:f4:38:80:e8:6b:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:12:A6:1B:2D:B4:46:B8:EB:0F:8B:26:15:DD:6E:1A:6F:25:FE:C4
X509v3 Authority Key Identifier:
keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/2xKmGy20RrjrD4smFd1uGm8l_sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.220.0/22
185.154.156.0/22
213.173.96.0/19
213.244.248.0/21
Signature Algorithm: sha256WithRSAEncryption
42:ee:27:63:b7:76:be:67:0f:5f:f4:6a:31:89:a7:f3:95:18:
54:ef:2c:7e:51:7c:31:be:51:0a:29:0e:1f:fd:e6:62:5b:a7:
a0:fc:b1:5c:cf:3c:b3:d6:60:cb:b6:bb:86:06:3d:03:d9:85:
8e:7f:c5:28:b3:dd:08:9e:21:90:2b:1e:96:b2:d7:0c:b5:98:
12:1b:38:e0:1c:9e:73:85:70:03:93:2a:91:49:ad:21:07:1b:
30:2e:ad:26:e4:f2:01:cf:ce:8d:72:7d:ee:9c:3d:4d:f2:22:
6c:e4:32:2e:7a:b5:94:33:cd:e5:4e:31:80:13:db:93:b5:f2:
69:ff:d1:8e:6b:03:e0:70:05:d7:82:5c:bc:17:ca:f5:c8:9f:
96:33:0f:80:7e:e5:17:95:2b:3b:9f:13:c6:2f:43:bc:9c:4a:
98:0d:b4:8f:c1:28:45:a0:45:0f:4b:2a:67:20:d8:5d:12:03:
3f:4e:10:29:05:37:54:59:ce:09:3e:d8:82:c1:d5:64:7c:c4:
7e:af:29:8d:e4:bf:2b:70:57:c2:99:16:b0:1d:96:02:f4:4d:
c7:e4:4d:fb:74:b7:00:fe:41:90:72:33:4b:e5:7c:59:e7:15:
14:16:c0:00:29:96:be:b3:70:2a:8e:86:3b:a2:45:db:f5:b2:
a7:69:25:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:39 2024 by rpki-client on console-ams.rpki-client.org