Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/CTW-pZNEfjRS96j4jWYpJFeePEM.roa
File: CTW-pZNEfjRS96j4jWYpJFeePEM.roa (raw, json)
Hash identifier: V1CioMkprXaWg5BZQ53IX9n61WtJAgtreSM55hkvQ90=
Subject key identifier: 09:35:BE:A5:93:44:7E:34:52:F7:A8:F8:8D:66:29:24:57:9E:3C:43
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: 0189BAE59FDF22F5702F80DAE98F2A4310B9
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/CTW-pZNEfjRS96j4jWYpJFeePEM.roa
Signing time: Thu 03 Aug 2023 10:15:58 +0000
ROA not before: Thu 03 Aug 2023 10:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 185.15.102.0/23 maxlen: 23
185.15.101.0/24 maxlen: 24
5.152.168.0/24 maxlen: 24
5.152.168.0/21 maxlen: 21
5.8.184.0/24 maxlen: 24
5.8.185.0/24 maxlen: 24
5.8.186.0/24 maxlen: 24
5.8.191.0/24 maxlen: 24
5.8.190.0/24 maxlen: 24
5.8.187.0/24 maxlen: 24
37.1.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 10:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:e5:9f:df:22:f5:70:2f:80:da:e9:8f:2a:43:10:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Aug 3 10:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0935bea593447e3452f7a8f88d662924579e3c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:32:e6:b0:8f:f6:bf:6c:a3:ff:b7:c6:2e:2d:
59:8c:fb:23:2f:5f:c7:14:85:40:9a:92:40:27:9a:
f8:b6:d9:f4:ba:1d:a6:f9:a2:f8:76:84:92:4a:5f:
27:ea:dd:0d:c0:6c:22:ea:9f:83:16:1f:83:db:12:
3c:52:5c:07:53:e4:48:47:5c:eb:d1:48:1f:dd:3c:
37:c8:f5:0a:99:f2:b9:3f:36:1a:a1:61:2b:8e:9a:
5f:78:c4:f8:4b:f7:4f:2f:de:c5:3c:42:21:19:70:
9b:b8:a8:96:32:15:e2:4f:9c:1e:a7:7f:73:db:28:
bb:22:6e:26:b7:04:f9:f3:24:2e:1a:2e:ab:3f:a8:
8c:87:54:a8:7a:9e:c7:57:1f:89:ea:a1:3a:85:05:
4e:01:6d:0c:23:e0:49:b1:76:07:4e:ca:0e:29:2e:
6d:63:37:ca:eb:31:c6:ff:27:fd:52:b5:b9:2a:8c:
9e:e0:5d:a6:fd:9d:c7:f7:3c:41:a7:33:59:23:55:
a3:6d:68:9f:cc:b1:5d:79:2e:94:5c:92:ab:81:5d:
d2:57:58:53:b4:14:63:e3:70:5f:dd:88:86:2d:f6:
65:43:64:0e:9a:9b:14:fa:55:c6:18:7e:94:c5:5a:
21:cb:67:97:e8:a7:46:b1:eb:5b:b2:c1:4f:19:a8:
b3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:35:BE:A5:93:44:7E:34:52:F7:A8:F8:8D:66:29:24:57:9E:3C:43
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/CTW-pZNEfjRS96j4jWYpJFeePEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.184.0/22
5.8.190.0/23
5.152.168.0/21
37.1.183.0/24
185.15.101.0-185.15.103.255
Signature Algorithm: sha256WithRSAEncryption
13:77:51:82:da:55:c5:38:81:64:d8:cc:a4:2b:14:ff:ec:56:
cd:df:cf:72:ef:b8:16:d2:c5:7b:4f:6c:b5:3d:c5:ee:7d:bd:
f6:c7:c8:46:9b:aa:fb:1c:82:c5:c8:83:a4:6e:f7:3b:2e:32:
e5:ca:64:ed:12:e0:50:e2:e4:49:a9:1e:21:bf:a9:35:32:9a:
97:4d:0d:1c:cb:b2:af:c0:ff:66:ef:c6:57:8b:0c:54:59:79:
ce:1f:9d:14:d6:9e:82:7d:8a:cb:75:6a:83:74:ca:be:ec:a3:
c8:6d:07:86:fd:92:e1:a9:6c:05:f1:ca:51:ef:73:80:04:57:
f0:d7:97:42:2f:d3:e5:52:60:9b:d7:28:12:94:d2:11:46:77:
21:11:cc:bf:fe:b5:0b:0c:82:0d:b8:1a:78:64:9b:13:72:5f:
e5:11:b2:1e:e2:87:7e:b5:e6:39:cd:c7:81:38:9c:fe:ea:3a:
66:ed:92:f6:eb:65:70:b8:7d:4a:ee:59:c4:61:3e:19:e3:32:
27:04:b4:3c:cd:30:7c:79:e2:5e:b1:d1:b3:78:3a:3a:80:d3:
1e:1f:e8:7d:f6:36:8e:53:bc:d8:68:93:ea:31:c1:58:7d:bf:
92:68:ed:1f:d5:a1:e5:67:89:43:e5:4d:11:ad:8f:44:78:73:
b6:04:93:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:08 2024 by rpki-client on console-ams.rpki-client.org