Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ioXOXBl3zHarWd3kX9ow8VWy31k.roa
File: ioXOXBl3zHarWd3kX9ow8VWy31k.roa (raw, json)
Hash identifier: IPtIUIJPqZhtBWxWVZBJ2CS4EkHXIrZrGqGfadpXeRM=
Subject key identifier: 8A:85:CE:5C:19:77:CC:76:AB:59:DD:E4:5F:DA:30:F1:55:B2:DF:59
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018C8A7BCD5FF6CD817204EA63017023E9A1
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ioXOXBl3zHarWd3kX9ow8VWy31k.roa
Signing time: Thu 21 Dec 2023 03:46:58 +0000
ROA not before: Thu 21 Dec 2023 03:46:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 188.212.121.0/24 maxlen: 24
89.36.140.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
188.215.31.0/24 maxlen: 24
89.46.42.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8a:7b:cd:5f:f6:cd:81:72:04:ea:63:01:70:23:e9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 21 03:46:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a85ce5c1977cc76ab59dde45fda30f155b2df59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:39:a0:41:f2:17:49:39:58:2a:58:a6:a0:
78:1f:b7:63:07:a8:60:e3:af:4f:e5:e6:0c:27:01:
81:58:c5:0a:0d:6d:07:ab:74:00:f8:13:58:25:43:
14:97:70:b3:d5:a0:7f:46:a9:ac:62:c5:ac:49:00:
ba:20:0d:55:0e:e5:f4:2b:9c:d7:2d:10:12:d0:c0:
b4:c4:be:31:8b:a6:ec:47:01:e6:c9:c4:7a:f9:e6:
6b:bd:e8:8c:cb:1a:78:46:95:aa:41:e0:bc:d2:21:
33:c5:3d:37:1b:c7:e6:da:b0:64:4b:a7:87:bc:9b:
f0:92:9a:78:31:a0:a9:fe:82:34:37:55:b8:6c:19:
e5:f4:3e:c8:d4:b3:05:92:e6:6d:36:ac:a2:91:07:
e0:1a:80:63:a4:8f:45:32:81:03:89:55:57:10:c1:
84:7f:08:d1:11:13:f8:c6:57:5c:e5:e8:2c:80:7e:
fe:2d:5d:8b:63:c4:cf:19:ae:aa:c9:c7:31:b0:33:
e5:2c:d5:88:a8:61:7f:51:eb:05:ae:96:06:3f:6b:
6f:c5:13:2b:4a:dd:04:06:80:cf:ad:1b:81:44:d1:
61:0b:6e:4a:1e:72:51:da:36:fd:d9:83:ce:cf:f7:
c2:47:8f:fa:47:61:65:98:8d:bf:ba:cc:83:3f:3d:
53:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:85:CE:5C:19:77:CC:76:AB:59:DD:E4:5F:DA:30:F1:55:B2:DF:59
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ioXOXBl3zHarWd3kX9ow8VWy31k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
86.107.100.0/24
89.36.140.0/24
89.40.36.0/24
89.45.35.0/24
89.46.42.0/24
89.47.36.0/24
94.177.51.0/24
94.198.171.0/24
176.223.188.0/24
188.212.121.0/24
188.215.31.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:92:e3:8d:d2:21:c3:1b:76:94:99:45:13:b1:3b:19:82:a8:
6b:0f:0a:32:23:f2:5a:20:be:34:8c:a4:63:d4:d9:50:ad:7c:
1c:e9:ec:1c:b2:dd:15:0c:55:15:92:62:91:da:2b:88:1c:56:
2b:26:3e:73:d9:e0:22:84:07:5d:e3:82:78:b1:a6:dc:93:70:
51:39:30:c8:44:76:6d:f0:1d:2e:3c:3c:84:31:f8:82:79:f9:
bb:43:af:66:fe:82:a3:d6:27:82:87:82:4f:27:15:9b:81:0d:
b0:0c:9a:a6:2b:09:db:95:5a:53:da:fa:6f:d0:87:9e:c7:80:
d8:e7:90:2f:31:ba:27:d8:5a:26:43:7f:32:44:54:e9:4f:21:
4b:ab:f4:cc:3e:b9:51:dc:9f:33:96:5a:32:69:a9:64:fa:19:
d1:0a:27:1c:fc:f8:a4:48:89:68:60:e1:8f:14:f9:2e:d6:f6:
1d:e8:0a:3f:4e:1b:ca:a9:47:e4:1c:08:62:6a:f5:7a:c8:b8:
67:d8:d7:88:16:2a:fd:f2:b6:e2:5d:0a:c8:fa:68:c7:77:c0:
50:44:92:60:6b:ca:b8:2f:72:56:59:ef:07:8b:11:82:c7:fd:
d9:9f:5e:9b:b0:86:80:9b:76:e5:d3:32:54:62:51:62:1a:b8:
82:93:58:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org