Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/K-9CbvzFGV7u17vl_oIx2QVfJuk.roa
File: K-9CbvzFGV7u17vl_oIx2QVfJuk.roa (raw, json)
Hash identifier: lMtCbWECQe6AjH7qZg9F8cUIp1mf7x8Qgl6Htie5jps=
Subject key identifier: 2B:EF:42:6E:FC:C5:19:5E:EE:D7:BB:E5:FE:82:31:D9:05:5F:26:E9
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CCA2A6AAE6D57F9B4B0409461B5928A10
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/K-9CbvzFGV7u17vl_oIx2QVfJuk.roa
Signing time: Tue 02 Jan 2024 12:33:46 +0000
ROA not before: Tue 02 Jan 2024 12:33:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38136
IP address blocks: 185.248.184.0/22 maxlen: 24
185.220.236.0/22 maxlen: 24
178.236.36.0/22 maxlen: 24
188.253.4.0/22 maxlen: 24
45.137.180.0/22 maxlen: 24
5.226.48.0/22 maxlen: 24
185.36.192.0/22 maxlen: 24
212.87.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 13:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:6a:ae:6d:57:f9:b4:b0:40:94:61:b5:92:8a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:33:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bef426efcc5195eeed7bbe5fe8231d9055f26e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3c:c0:ea:5e:8b:f3:3e:eb:83:6d:cc:c1:4d:
0e:67:75:3c:f8:46:f7:4c:5a:bc:db:35:89:81:c1:
74:fc:e8:5f:59:5d:b5:41:00:1e:39:c4:93:70:c7:
60:ba:8d:43:70:13:b7:fa:8b:9e:9b:78:52:cb:b4:
68:e2:2d:37:30:f2:d3:79:5a:88:34:20:fc:e7:73:
df:bc:89:2d:cc:96:14:5a:74:0f:32:14:72:c5:82:
e0:e1:fe:94:1e:e4:7d:db:d7:16:37:34:6d:8d:31:
72:e4:41:1e:6c:bd:45:a6:86:67:dd:a7:cb:df:b6:
d0:8d:b0:fe:29:ee:bd:62:70:cf:d4:88:e5:1f:02:
d5:94:26:ce:61:96:5c:97:6b:07:82:13:97:6a:09:
4c:a2:ad:4c:b5:59:28:79:0c:55:9f:fc:6a:6b:ec:
e6:48:a2:57:36:58:92:c5:8a:f3:9f:e8:ba:36:68:
61:1a:50:85:81:dc:20:12:b3:b0:92:74:1b:3b:90:
3a:90:77:63:f5:ad:09:8d:bd:f7:b4:ff:f0:3e:42:
11:8e:13:d7:41:16:f8:e0:2f:9e:24:f9:69:28:cf:
f0:02:ca:07:31:af:59:ac:94:52:f8:21:ff:5d:dc:
60:04:74:87:7b:7c:ef:17:eb:97:7b:c5:95:6f:50:
d7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EF:42:6E:FC:C5:19:5E:EE:D7:BB:E5:FE:82:31:D9:05:5F:26:E9
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/K-9CbvzFGV7u17vl_oIx2QVfJuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.48.0/22
45.137.180.0/22
178.236.36.0/22
185.36.192.0/22
185.220.236.0/22
185.248.184.0/22
188.253.4.0/22
212.87.192.0/22
Signature Algorithm: sha256WithRSAEncryption
04:12:ea:8d:3b:a5:dd:ae:b7:f9:c4:82:0a:a6:e7:a7:90:5b:
86:78:7f:64:07:62:b5:21:38:02:23:80:31:17:54:f6:6e:b2:
24:73:7a:7d:f9:60:0d:89:50:a1:8a:72:7c:71:a0:51:09:f8:
04:ec:ff:0c:c3:c5:36:30:42:1f:1b:4c:42:ea:c2:40:4b:28:
0d:19:72:c1:5d:29:eb:eb:5b:59:2c:75:f7:da:99:c1:c2:8e:
bd:35:0a:84:0b:55:d9:0e:5d:68:81:6b:80:7d:16:0d:13:0e:
69:4a:27:13:a5:18:15:de:50:19:0c:38:11:17:0f:78:a8:07:
56:5b:cd:a1:78:36:92:3d:0b:0a:54:8a:28:b6:86:88:2f:da:
b3:19:df:26:6d:6b:f3:ef:2d:84:45:60:c5:c1:3b:75:34:48:
45:9e:06:c4:f5:30:4b:77:ca:3d:b1:e5:6c:3c:43:3a:31:ca:
eb:5d:f9:40:62:2f:43:c8:1c:eb:06:ef:ba:3a:64:61:53:fd:
e2:5c:8c:59:27:20:46:95:de:53:4b:8c:38:bf:f7:10:4b:1b:
f8:ad:67:26:bc:6c:a5:97:59:84:8a:ee:44:1f:54:b0:d4:77:
5e:b1:66:14:a4:f6:8c:ef:ce:85:97:d2:25:39:f6:19:4e:0c:
02:94:bf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 17:25:43 2024 by rpki-client on console-fra.rpki-client.org