Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/RbrIVBNxq2fY4pg_uXrv97osh-o.roa
File: RbrIVBNxq2fY4pg_uXrv97osh-o.roa (raw, json)
Hash identifier: U5mWv8OTENSOTWKYYtrPbIfnrEYgpyxAEoQ7fGxO00I=
Subject key identifier: 45:BA:C8:54:13:71:AB:67:D8:E2:98:3F:B9:7A:EF:F7:BA:2C:87:EA
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 01857255996BD296ECCAD2E262F3E03E3020
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/RbrIVBNxq2fY4pg_uXrv97osh-o.roa
Signing time: Mon 02 Jan 2023 11:54:50 +0000
ROA not before: Mon 02 Jan 2023 11:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49453
IP address blocks: 178.20.215.0/24 maxlen: 24
178.20.214.0/24 maxlen: 24
77.243.91.0/24 maxlen: 24
77.243.89.0/24 maxlen: 24
77.243.88.0/24 maxlen: 24
185.101.20.0/24 maxlen: 24
185.101.21.0/24 maxlen: 24
178.20.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Jun 2023 17:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:99:6b:d2:96:ec:ca:d2:e2:62:f3:e0:3e:30:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Jan 2 11:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45bac8541371ab67d8e2983fb97aeff7ba2c87ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8e:ca:32:6d:42:0b:fe:95:ac:92:a8:9f:b6:
b2:7a:76:d8:bf:32:4d:6f:76:fc:2e:6a:17:f3:54:
ad:87:27:bc:ae:8a:fe:bc:83:59:2e:03:6d:0f:27:
01:5e:25:73:11:da:39:f8:c1:18:2c:e9:d2:a2:d0:
83:2c:83:a6:e4:a6:b0:fc:60:89:cf:4f:40:53:49:
13:22:02:c5:65:dc:dc:f6:51:2f:4b:b9:01:7c:9a:
d2:8b:43:ef:30:08:ab:fc:53:24:6e:79:92:06:57:
f3:df:a4:8d:4f:05:79:e4:51:a5:d0:8b:4d:1f:6c:
2f:ca:5d:25:6f:cb:2b:0b:cf:1f:98:05:04:94:24:
43:08:5a:d7:6f:dd:26:2a:16:91:76:fc:a9:59:1d:
99:37:8a:9b:d2:ec:db:3c:27:fc:58:ed:f0:46:2f:
18:46:3b:dd:33:d2:e8:65:06:77:33:22:1c:88:31:
90:85:64:ef:9c:db:79:c9:a9:c3:f0:65:69:28:f1:
91:72:0f:4c:75:e8:5d:5b:a9:79:b2:a1:f7:b9:32:
66:81:24:a1:8e:06:49:15:d6:a1:94:fe:60:de:8e:
cd:be:08:ea:ff:0a:bc:c4:55:ec:61:63:e7:d7:8d:
8f:b0:ef:c3:a7:fd:27:47:ae:98:a5:8e:f6:52:17:
2d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BA:C8:54:13:71:AB:67:D8:E2:98:3F:B9:7A:EF:F7:BA:2C:87:EA
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/RbrIVBNxq2fY4pg_uXrv97osh-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.88.0/23
77.243.91.0/24
178.20.213.0-178.20.215.255
185.101.20.0/23
Signature Algorithm: sha256WithRSAEncryption
04:e7:03:0f:5f:38:18:b2:5e:3c:7f:d8:89:84:fc:b3:1e:99:
ae:b7:e8:b0:b7:79:5e:5e:e9:c7:e4:fb:5f:cb:43:f8:6c:4b:
ff:fb:60:cc:70:83:84:96:53:c4:7f:09:ea:2e:f7:3b:0c:f8:
57:b2:38:bd:1e:2d:6e:56:8c:a5:f2:c9:20:ed:9a:73:8b:96:
51:63:ea:0e:22:4c:08:71:6a:ee:f3:e6:60:8e:42:b1:d2:24:
f3:b6:f9:83:62:0f:37:e7:6e:83:ae:72:37:e2:02:eb:b8:f2:
f0:39:6e:1a:08:a4:8b:92:fc:af:6f:03:a3:69:41:8e:eb:12:
83:3a:78:10:b8:5d:17:9f:35:11:3d:11:f8:f8:9d:d7:2a:fb:
d7:e9:7d:43:8e:83:31:91:dd:32:f5:6f:22:47:93:4b:14:53:
c3:d4:90:b1:6c:5b:6e:52:2e:9c:13:3a:1e:97:3b:4b:ab:1f:
45:08:40:64:d6:ab:c2:70:3f:05:a5:02:92:5a:63:92:46:ab:
1d:1e:c5:8d:a1:e1:d7:9c:ec:71:c8:9b:24:b2:19:6a:ed:4d:
ca:41:63:cd:e1:f4:fa:21:d2:4d:a7:10:a1:ad:5c:51:6b:4d:
ad:32:09:9b:df:14:e0:ef:bb:61:f2:c5:bf:7d:5a:fd:43:82:
05:90:d4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:41 2024 by rpki-client on console-fra.rpki-client.org