Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/pLebCihpTEaLxkFI7sBSPvcQ_Jk.roa
File: pLebCihpTEaLxkFI7sBSPvcQ_Jk.roa (raw, json)
Hash identifier: Wa6PdirUMh8DZ2ggJ32QVrQQJrSe8IQhGM2HmCcR7xE=
Subject key identifier: A4:B7:9B:0A:28:69:4C:46:8B:C6:41:48:EE:C0:52:3E:F7:10:FC:99
Certificate issuer: /CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
Certificate serial: 0185725591A2CF91852DEBCA274D56DEA489
Authority key identifier: 2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/pLebCihpTEaLxkFI7sBSPvcQ_Jk.roa
Signing time: Mon 02 Jan 2023 11:54:48 +0000
ROA not before: Mon 02 Jan 2023 11:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201540
IP address blocks: 185.120.192.0/22 maxlen: 22
185.120.196.0/22 maxlen: 22
185.120.200.0/24 maxlen: 24
185.120.201.0/24 maxlen: 24
185.120.202.0/24 maxlen: 24
185.120.203.0/24 maxlen: 24
185.120.208.0/22 maxlen: 22
185.71.192.0/23 maxlen: 23
185.71.194.0/23 maxlen: 23
185.109.75.0/24 maxlen: 24
185.109.72.0/24 maxlen: 24
185.109.73.0/24 maxlen: 24
185.112.168.0/22 maxlen: 22
185.109.74.0/24 maxlen: 24
185.109.80.0/23 maxlen: 23
185.109.82.0/23 maxlen: 23
185.111.8.0/22 maxlen: 22
185.111.12.0/22 maxlen: 22
185.120.216.0/22 maxlen: 22
185.120.224.0/22 maxlen: 22
185.120.232.0/22 maxlen: 22
185.120.240.0/22 maxlen: 22
185.109.61.0/24 maxlen: 24
185.109.62.0/23 maxlen: 23
185.109.60.0/24 maxlen: 24
185.111.136.0/22 maxlen: 22
185.111.64.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:91:a2:cf:91:85:2d:eb:ca:27:4d:56:de:a4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
Validity
Not Before: Jan 2 11:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4b79b0a28694c468bc64148eec0523ef710fc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:37:4b:ac:64:db:c1:b2:e4:8f:52:88:4f:50:
ae:7a:e5:78:83:a1:02:a5:74:11:af:44:5c:94:23:
6f:a9:f9:e0:e9:6e:29:4b:fc:c0:96:72:54:45:73:
7f:5f:b6:20:89:f3:ce:2a:ec:84:33:21:4b:f4:b7:
aa:05:ca:14:e8:71:77:56:ba:82:c3:5d:99:b7:22:
6e:c1:e3:81:15:a7:0a:eb:57:a3:65:dc:e7:ab:3e:
66:b2:ac:22:3e:0b:e2:04:d6:4a:35:67:a3:80:17:
67:4f:a9:99:85:f5:b5:09:68:b9:7c:fa:4a:c0:4b:
ea:fd:1e:f7:bb:5d:28:f0:a1:44:22:a8:08:a5:dc:
1a:4e:2e:6f:35:20:24:d9:e9:00:3d:67:f0:92:7c:
6e:7b:5b:24:86:bf:f2:48:2e:09:23:c2:fb:93:70:
85:22:57:4b:0b:68:30:55:b8:61:1d:5f:37:01:1e:
89:69:d8:49:54:43:d1:ec:2e:07:b9:51:ec:2a:ff:
42:bc:3a:c8:bf:0e:8e:ab:78:e0:81:b1:05:4a:2b:
15:ab:e5:69:5b:b0:bb:78:ba:7e:04:18:f9:26:71:
fd:92:cd:e8:2c:57:9f:22:f9:99:0b:87:99:fc:ae:
c2:ae:bf:18:f1:c5:2f:59:a3:49:d8:e6:65:4b:70:
bb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B7:9B:0A:28:69:4C:46:8B:C6:41:48:EE:C0:52:3E:F7:10:FC:99
X509v3 Authority Key Identifier:
keyid:2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/pLebCihpTEaLxkFI7sBSPvcQ_Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.192.0/22
185.109.60.0/22
185.109.72.0/22
185.109.80.0/22
185.111.8.0/21
185.111.64.0/23
185.111.136.0/22
185.112.168.0/22
185.120.192.0-185.120.203.255
185.120.208.0/22
185.120.216.0/22
185.120.224.0/22
185.120.232.0/22
185.120.240.0/22
Signature Algorithm: sha256WithRSAEncryption
84:00:90:5c:08:7d:e8:a8:2c:d9:d2:10:23:65:f8:94:3d:92:
69:87:cd:c8:dd:57:25:f8:e1:50:72:8b:a7:66:8f:ba:86:2c:
7f:69:a8:0c:12:e3:d1:cb:dd:79:d5:99:b9:06:ff:32:6d:b4:
88:61:ee:9c:49:f1:d6:ce:d7:63:82:65:ea:95:13:4c:94:b3:
0c:6b:db:e4:7c:c2:10:58:3a:8f:5f:57:5d:ce:30:d7:b3:2f:
87:89:3b:f3:32:84:e8:c2:b6:ec:4d:7c:0a:af:7c:a0:db:53:
85:f0:02:e7:8c:d7:b4:60:1b:06:4b:5f:dd:fe:2c:c7:dd:85:
08:7f:ed:ca:eb:b0:d3:bf:bb:be:66:6d:00:8d:e3:f2:c1:3b:
1e:a3:2b:66:57:a7:3e:a1:18:db:ce:4b:2d:02:01:6f:9a:a7:
e2:23:df:ca:16:02:14:1c:0a:09:8b:4c:10:ed:f7:87:66:2e:
f7:e3:18:c7:69:d1:04:02:7d:2d:12:5d:3e:89:d7:ae:f5:fe:
f6:46:3e:ce:03:3a:6b:15:bd:45:18:30:fb:1f:97:98:22:3a:
09:a4:95:12:b4:30:ba:ab:cf:72:35:5e:01:a9:e0:08:f9:cc:
87:6b:74:0e:86:dd:f4:8f:de:0f:93:39:b7:f0:d5:d7:2b:52:
8c:51:72:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:05 2024 by rpki-client on console-ams.rpki-client.org