Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/m0d90rGEi-xAJX1JYDpXbriAtiI.roa
File: m0d90rGEi-xAJX1JYDpXbriAtiI.roa (raw, json)
Hash identifier: 0ARjrYLKPMSUGHrUqInsYrhLNmp3PTFNajNSUCqrpHA=
Subject key identifier: 9B:47:7D:D2:B1:84:8B:EC:40:25:7D:49:60:3A:57:6E:B8:80:B6:22
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 01857042A87FB2147B00F705A518E5E2B74D
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/m0d90rGEi-xAJX1JYDpXbriAtiI.roa
Signing time: Mon 02 Jan 2023 02:14:54 +0000
ROA not before: Mon 02 Jan 2023 02:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61333
IP address blocks: 94.228.108.0/24 maxlen: 24
94.228.107.0/24 maxlen: 24
94.228.110.0/24 maxlen: 24
94.228.96.0/24 maxlen: 24
94.228.96.0/20 maxlen: 24
94.228.98.0/24 maxlen: 24
94.228.100.0/24 maxlen: 24
94.228.104.0/24 maxlen: 24
94.228.105.0/24 maxlen: 24
149.126.64.0/24 maxlen: 24
149.126.64.0/21 maxlen: 24
149.126.65.0/24 maxlen: 24
149.126.67.0/24 maxlen: 24
149.126.66.0/24 maxlen: 24
149.126.70.0/24 maxlen: 24
194.169.198.0/24 maxlen: 24
185.251.52.0/24 maxlen: 24
185.251.54.0/24 maxlen: 24
185.251.53.0/24 maxlen: 24
193.200.249.0/24 maxlen: 24
2a00:e30:ed00::/41 maxlen: 48
2a00:e30:a00::/40 maxlen: 48
2a00:e30:2100::/41 maxlen: 41
2a00:e30:3000::/41 maxlen: 41
2a00:e30:6900::/41 maxlen: 41
Validation: Failed, certificate revoked on Wed 26 Jul 2023 17:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:a8:7f:b2:14:7b:00:f7:05:a5:18:e5:e2:b7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Jan 2 02:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b477dd2b1848bec40257d49603a576eb880b622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:35:32:f3:84:dc:b1:b7:88:3e:2c:c3:6c:1a:
31:b8:33:17:54:25:84:42:75:72:02:af:6f:13:6d:
f8:70:43:4d:99:12:a7:d2:81:7d:bf:1d:3e:f7:bd:
39:e2:3a:88:68:59:86:96:63:a4:c0:55:9b:ab:9a:
bf:c2:1c:9d:7e:cf:7f:46:2c:31:a1:aa:ea:5e:cc:
f7:f5:d2:a6:47:7d:4d:2a:9c:43:cd:2e:f0:86:ae:
2b:d0:66:a2:aa:8a:4d:77:10:1e:bf:8f:e5:cf:89:
11:c5:26:9c:78:40:85:72:26:ac:ea:b9:b7:79:f5:
d6:a6:1b:7a:d0:d7:f5:06:f3:43:7c:f2:7f:c3:f1:
7d:37:fd:b3:dc:b4:c4:30:b5:01:a1:2d:9f:75:7e:
2d:2a:54:38:be:a2:48:ca:a7:6a:2b:5c:d2:ab:8e:
dd:92:52:0f:5e:23:34:36:f3:ff:ab:1c:71:97:97:
70:47:9d:e9:2e:8c:6d:d6:6e:d0:a2:a7:81:53:6f:
f5:2a:b6:58:85:98:13:fc:87:c7:5b:15:40:ac:cc:
f4:a3:81:b6:e4:b2:0f:dc:8e:4c:b5:d6:e0:5e:fd:
30:3c:79:ba:b5:62:5d:3c:52:e0:f4:b2:20:f6:54:
79:78:2e:1a:9b:f3:1d:7d:ff:03:de:40:a6:19:1b:
91:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:47:7D:D2:B1:84:8B:EC:40:25:7D:49:60:3A:57:6E:B8:80:B6:22
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/m0d90rGEi-xAJX1JYDpXbriAtiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.96.0/20
149.126.64.0/21
185.251.52.0-185.251.54.255
193.200.249.0/24
194.169.198.0/24
IPv6:
2a00:e30:a00::/40
2a00:e30:2100::/41
2a00:e30:3000::/41
2a00:e30:6900::/41
2a00:e30:ed00::/41
Signature Algorithm: sha256WithRSAEncryption
48:40:1b:d5:c0:3c:ed:2c:03:56:36:3f:83:ab:b9:39:fb:8f:
45:aa:60:92:30:8d:8b:65:fa:e2:71:0c:2e:8f:72:f8:54:b8:
77:b3:5e:f7:4d:47:65:4d:b5:94:22:c3:41:39:be:c5:9c:80:
a6:d8:e6:ff:51:86:e8:d1:19:30:87:19:dd:ee:08:b9:33:0b:
ae:e7:b9:9a:26:9a:11:20:4e:be:fe:57:b9:71:9a:9c:45:9c:
2d:06:27:73:7f:4c:e9:72:6c:cd:55:ca:e4:24:0c:8e:30:95:
50:07:69:80:cc:93:f6:38:bf:5e:53:c8:5c:dd:a7:a1:54:b3:
fd:92:b1:24:44:5a:89:5d:75:a6:7f:a4:5a:f9:77:2f:5d:2c:
1e:0e:db:4a:20:69:43:11:46:eb:57:2c:29:d0:5e:40:01:6b:
9d:ea:37:f4:12:fe:1f:a2:c7:f6:59:56:b7:df:9d:8a:06:78:
e8:b1:30:f2:c9:dc:46:9a:09:b7:c3:fb:78:6f:71:71:13:65:
f7:ba:46:61:37:5e:fa:e1:16:f2:49:74:29:9a:fc:99:7e:bc:
5e:89:8e:0e:e1:2b:92:d6:ff:3f:d4:f1:c6:8a:d4:95:ca:32:
4b:89:21:da:53:6b:c7:e1:35:82:48:4e:12:f8:21:6b:72:e8:
c8:91:b8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:03 2024 by rpki-client on console-fra.rpki-client.org