Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/IsHghnGUiehffHRszhS_8QwMCG0.roa
File: IsHghnGUiehffHRszhS_8QwMCG0.roa (raw, json)
Hash identifier: W/QOuIbJRZ13ilqnabzcRCn1sVux1JlcFh6yjkm+fok=
Subject key identifier: 22:C1:E0:86:71:94:89:E8:5F:7C:74:6C:CE:14:BF:F1:0C:0C:08:6D
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 01856D01C54CA4FEC14CADC091772C28A990
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/IsHghnGUiehffHRszhS_8QwMCG0.roa
Signing time: Sun 01 Jan 2023 11:05:10 +0000
ROA not before: Sun 01 Jan 2023 11:05:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57768
IP address blocks: 185.46.177.0/24 maxlen: 24
185.46.176.0/22 maxlen: 22
185.46.176.0/24 maxlen: 24
185.46.179.0/24 maxlen: 24
185.46.178.0/24 maxlen: 24
5.187.8.0/24 maxlen: 24
5.187.8.0/21 maxlen: 21
5.187.10.0/24 maxlen: 24
5.187.9.0/24 maxlen: 24
5.187.11.0/24 maxlen: 24
5.187.13.0/24 maxlen: 24
5.187.15.0/24 maxlen: 24
5.187.14.0/24 maxlen: 24
5.187.12.0/24 maxlen: 24
37.75.131.0/24 maxlen: 24
37.75.132.0/24 maxlen: 24
37.75.128.0/24 maxlen: 24
37.75.128.0/21 maxlen: 21
37.75.130.0/24 maxlen: 24
37.75.129.0/24 maxlen: 24
37.75.135.0/24 maxlen: 24
37.75.134.0/24 maxlen: 24
37.75.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jan 2023 07:08:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:c5:4c:a4:fe:c1:4c:ad:c0:91:77:2c:28:a9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: Jan 1 11:05:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22c1e086719489e85f7c746cce14bff10c0c086d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fc:9b:06:04:5d:28:75:45:c2:27:90:38:33:
e9:35:e3:d8:b0:58:4d:4a:b2:04:c2:36:35:f9:53:
21:9f:8e:68:14:62:70:f8:1f:79:c1:3a:98:e0:3b:
ac:22:8a:11:e1:4f:d4:3d:27:97:51:f8:6c:2d:d1:
21:18:8b:0e:92:e2:4f:8f:1f:51:ad:03:59:ed:f7:
4a:c7:53:8e:fd:0f:f3:d2:1e:3d:e9:9d:a5:65:35:
4f:5f:d7:5a:52:54:e6:a7:c7:2d:ee:bc:22:52:68:
d4:21:99:a3:db:f0:2b:ad:25:f4:5e:34:9d:28:73:
4e:b0:70:ca:dc:79:87:4f:bd:64:87:92:cd:4c:69:
d2:d9:80:8c:a5:db:55:8a:70:c6:f7:c7:3e:b5:34:
ee:0c:37:10:2d:bb:2b:04:93:50:7f:c6:11:15:ca:
27:ef:c1:44:07:ab:0f:91:06:08:a1:8a:2c:1d:a3:
1e:53:7b:48:80:e0:b4:3a:7e:79:fd:5d:ae:0f:c6:
8a:06:21:c9:b7:79:14:d1:e0:b8:0d:fd:cc:32:d0:
58:94:42:69:5a:be:71:a4:4d:c7:b3:7e:c0:0e:ee:
2b:6b:0b:f4:a4:66:61:f6:cc:e4:d8:59:78:d8:6d:
72:e4:87:fa:5f:3e:16:42:b1:1a:f3:6f:2d:00:1f:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C1:E0:86:71:94:89:E8:5F:7C:74:6C:CE:14:BF:F1:0C:0C:08:6D
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/IsHghnGUiehffHRszhS_8QwMCG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.8.0/21
37.75.128.0/21
185.46.176.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:89:2b:a6:73:6d:5f:1b:be:05:12:46:a5:03:e9:09:9e:03:
fb:87:8c:39:f8:66:23:8e:e6:d3:5a:1c:90:5f:97:7c:0e:65:
11:e6:b8:f5:11:2c:2e:5a:cc:6c:e4:07:3b:16:70:82:19:43:
e5:43:34:c2:57:65:49:3e:d6:f8:37:d8:75:87:f4:3e:60:f7:
db:48:99:42:76:5d:22:6d:06:40:59:5f:b4:78:a6:29:4d:3f:
cc:85:8d:9c:8a:eb:a7:c9:8b:3b:b8:a3:b9:9c:31:fe:1b:1f:
f2:d2:a8:40:e8:48:25:ec:79:df:13:ea:f6:28:09:55:fb:a5:
88:53:cb:f7:ca:3b:e0:cc:78:dc:26:3a:65:fe:bf:76:08:91:
4f:0b:f6:20:4c:ad:2b:ed:9a:5a:98:52:be:22:19:a6:54:58:
0b:f3:01:91:f6:ae:32:47:33:55:f5:9b:2c:4e:10:c7:c5:d4:
ff:ff:e4:7d:d6:ad:46:51:57:f7:08:1d:f9:d2:a7:74:cb:08:
b7:20:9a:01:a5:00:4c:f9:6a:54:b8:fc:8a:b0:f5:9a:f6:54:
62:ca:51:09:79:0d:a9:5e:a2:b3:aa:3f:32:c3:87:99:71:ad:
e1:e0:e8:db:22:c6:f0:3e:47:37:29:35:a1:08:83:fd:0f:f4:
d8:73:8e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:03 2024 by rpki-client on console-ams.rpki-client.org