Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/4RsQ8GGSsjRWRzQZeSalFi5F3Go.roa
File: 4RsQ8GGSsjRWRzQZeSalFi5F3Go.roa (raw, json)
Hash identifier: bk349NfOtsrA31UZs1uRfTDRPedWnUgxk0WEzs1ln1w=
Subject key identifier: E1:1B:10:F0:61:92:B2:34:56:47:34:19:79:26:A5:16:2E:45:DC:6A
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0185EA907269A12A46C845BAD3C6F0C660CC
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/4RsQ8GGSsjRWRzQZeSalFi5F3Go.roa
Signing time: Wed 25 Jan 2023 20:13:33 +0000
ROA not before: Wed 25 Jan 2023 20:13:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26548
IP address blocks: 217.145.227.0/24 maxlen: 24
45.66.208.0/24 maxlen: 24
185.61.217.0/24 maxlen: 24
185.61.218.0/24 maxlen: 24
185.61.219.0/24 maxlen: 24
185.61.222.0/24 maxlen: 24
185.61.223.0/24 maxlen: 24
185.61.221.0/24 maxlen: 24
147.78.182.0/24 maxlen: 24
147.78.183.0/24 maxlen: 24
147.78.180.0/24 maxlen: 24
147.78.181.0/24 maxlen: 24
217.145.224.0/24 maxlen: 24
217.145.226.0/24 maxlen: 24
194.104.11.0/24 maxlen: 24
45.132.184.0/24 maxlen: 24
185.68.185.0/24 maxlen: 24
5.181.170.0/24 maxlen: 24
213.108.2.0/24 maxlen: 24
45.148.124.0/24 maxlen: 24
45.138.100.0/24 maxlen: 24
77.220.193.0/24 maxlen: 24
77.220.194.0/24 maxlen: 24
185.88.100.0/24 maxlen: 24
45.10.166.0/24 maxlen: 24
93.177.118.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ea:90:72:69:a1:2a:46:c8:45:ba:d3:c6:f0:c6:60:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 25 20:13:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e11b10f06192b234564734197926a5162e45dc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:e0:cc:f2:76:71:e3:ae:af:50:16:48:df:
97:8b:9c:67:29:a2:47:4d:59:3a:c7:07:3b:40:f2:
c6:34:a8:8d:c6:44:b7:ce:b8:ad:80:ff:1d:5f:02:
96:50:65:3a:e8:93:a5:2e:35:fd:78:03:90:42:0c:
60:00:08:9e:e0:9a:11:b4:49:63:82:3c:79:81:e7:
26:da:e0:c9:3c:56:62:e6:6b:de:cc:fc:5a:57:bf:
75:ce:3a:3d:8e:ba:46:d4:58:62:95:f4:a0:a2:75:
dd:e1:a8:79:e3:21:53:73:af:7c:c2:a0:40:92:22:
c3:32:e8:6b:3d:35:1b:20:dd:a3:ff:0b:5d:ae:0c:
9a:9b:d0:ff:8d:94:a3:ff:2d:c7:19:dc:8d:d4:04:
03:24:9c:57:ec:86:8b:36:75:42:2b:b9:cb:3d:df:
2a:dc:54:bd:61:9a:26:cf:90:46:5c:9e:21:f4:8d:
ef:3b:5f:3a:78:a4:af:24:19:54:60:cf:bd:ed:46:
b1:21:ea:bd:c5:62:54:81:57:49:37:36:bc:c1:df:
0d:23:28:ac:15:64:5f:14:49:d3:fc:c5:31:1e:86:
b2:68:0d:b5:5a:7e:2d:1a:68:35:95:61:6f:fc:6c:
19:18:4b:8e:9a:3f:5f:c3:4a:b7:7a:a8:bc:5d:97:
51:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1B:10:F0:61:92:B2:34:56:47:34:19:79:26:A5:16:2E:45:DC:6A
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/4RsQ8GGSsjRWRzQZeSalFi5F3Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.170.0/24
45.10.166.0/24
45.66.208.0/24
45.132.184.0/24
45.138.100.0/24
45.148.124.0/24
77.220.193.0-77.220.194.255
93.177.118.0/23
147.78.180.0/22
185.61.217.0-185.61.219.255
185.61.221.0-185.61.223.255
185.68.185.0/24
185.88.100.0/24
194.104.11.0/24
213.108.2.0/24
217.145.224.0/24
217.145.226.0/23
Signature Algorithm: sha256WithRSAEncryption
00:19:0e:35:54:5e:ef:55:d3:54:e6:0b:4c:cf:53:3b:dc:96:
6f:35:3b:07:38:71:31:7b:09:92:60:3b:97:ac:76:7f:bb:84:
00:3c:51:b2:ff:05:e7:75:29:ec:80:4d:c0:ad:af:48:52:e6:
1f:82:33:22:12:2d:c2:27:35:5c:88:c8:69:a5:77:b0:b0:85:
3e:2d:00:30:44:da:3d:ee:58:56:72:c0:6c:64:9c:99:83:c0:
31:4f:54:bb:04:13:d8:bb:9f:05:62:24:69:30:dc:c7:97:a7:
b5:bc:7f:e7:64:78:69:bf:fa:33:49:b0:b7:ff:23:ca:50:32:
a9:cb:76:57:76:e7:aa:27:15:7f:2b:1b:15:4c:0e:ca:90:ae:
15:0c:fd:6b:a3:dc:0f:90:4d:59:23:81:a3:75:b6:e0:4c:66:
7b:6a:98:73:9c:c8:51:07:c8:0d:13:b8:4c:bc:ff:b1:65:ef:
28:ed:65:c9:c1:3d:6c:68:18:98:b9:2c:8f:e3:6e:45:e4:d3:
59:39:6d:9b:98:c1:03:4b:51:19:be:46:74:13:ae:4e:cd:09:
a4:48:fa:1f:32:70:83:32:10:08:5e:c4:cc:49:0a:64:db:c2:
cc:2c:6d:02:4d:9c:62:b0:50:93:b7:78:3a:4a:10:63:d3:05:
f5:d8:66:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org