Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/5AbTkgePxYX3y2MIv6uOs7Bq7j4.roa
File: 5AbTkgePxYX3y2MIv6uOs7Bq7j4.roa (raw, json)
Hash identifier: ErtXijR59p4NLwrCdVO2693ogAvjiXFhFNoi4c0BWFw=
Subject key identifier: E4:06:D3:92:07:8F:C5:85:F7:CB:63:08:BF:AB:8E:B3:B0:6A:EE:3E
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0185FE5DF1BA740AA8BD016A20CED5F88E37
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/5AbTkgePxYX3y2MIv6uOs7Bq7j4.roa
Signing time: Sun 29 Jan 2023 16:30:47 +0000
ROA not before: Sun 29 Jan 2023 16:30:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 185.112.56.0/23 maxlen: 24
185.95.102.0/23 maxlen: 24
185.95.100.0/23 maxlen: 24
213.170.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Feb 2023 18:13:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fe:5d:f1:ba:74:0a:a8:bd:01:6a:20:ce:d5:f8:8e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 29 16:30:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e406d392078fc585f7cb6308bfab8eb3b06aee3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:48:7d:73:91:7c:1b:f2:cf:10:c9:5b:f8:2d:
cb:59:ce:ed:3a:75:4c:47:4d:12:fa:61:f1:37:ab:
7f:b6:c0:ab:b0:a4:06:2b:bb:c3:15:b6:0e:eb:7f:
b0:c3:7d:f1:3e:cb:9f:07:d3:ce:6c:d9:c7:1d:b3:
ec:7a:26:56:37:0c:5a:26:ff:c7:8a:39:7e:8d:50:
4f:cd:18:bb:92:17:0c:0c:6f:fa:d2:bf:79:89:24:
66:b0:15:db:ce:51:46:9b:34:b7:5f:52:9d:de:25:
84:1b:46:b7:63:f8:d7:cd:a3:d5:e2:a8:62:e6:e6:
c7:97:e7:b4:1f:71:b3:df:59:aa:6c:b2:8e:ff:3b:
a6:1d:58:c1:df:40:57:39:b1:f7:84:b7:fa:2a:de:
4b:1d:13:16:ff:45:8d:20:17:70:a6:50:0a:e3:55:
81:e9:57:70:a7:17:55:33:ce:6b:7e:81:db:5c:20:
6e:92:60:ae:24:44:9a:de:22:52:97:b2:f6:4c:b6:
4d:2f:1e:72:68:bb:ea:4b:39:69:e3:9d:e8:b4:3a:
89:1a:d1:7a:ae:81:7c:48:60:da:51:81:2a:6a:2c:
ac:e5:8e:b5:19:6f:6a:e8:5c:31:28:ae:32:11:ab:
ea:00:d0:db:19:94:4a:90:8f:d2:e1:46:7a:6a:b0:
ca:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:06:D3:92:07:8F:C5:85:F7:CB:63:08:BF:AB:8E:B3:B0:6A:EE:3E
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/5AbTkgePxYX3y2MIv6uOs7Bq7j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.100.0/22
185.112.56.0/23
213.170.223.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d5:36:b4:8a:d2:1d:f0:91:b3:23:25:96:9e:ee:e3:52:6c:
24:e2:4f:c5:b5:4b:de:51:00:84:fa:ef:23:47:c1:e6:c6:4a:
74:9c:15:e4:05:36:44:ac:81:4a:36:5d:6d:10:44:68:1d:13:
dc:f0:1f:43:eb:37:99:d2:47:30:9f:a5:29:56:6d:21:72:6a:
09:11:92:dc:d5:9b:f6:ef:7e:70:46:f8:56:b6:0b:a8:e6:56:
b8:0e:4b:0b:89:f9:cd:ea:54:6d:f4:8c:e5:64:85:60:fb:5a:
de:c6:cb:ef:32:5d:38:1f:c1:c1:c4:5f:33:d5:c0:1a:93:00:
0f:04:bb:b4:70:ea:ce:13:eb:8f:fb:55:61:1e:19:43:24:88:
1c:cf:e3:03:3b:0f:e6:07:c4:8f:e7:a7:9e:fd:c9:11:3c:c0:
a8:e0:e2:8d:c1:82:37:6e:8a:45:4a:9d:e5:5f:3a:a9:22:31:
32:ac:9b:3d:9e:4b:b9:e1:64:12:07:fd:53:88:d7:42:6f:4d:
eb:23:26:06:b5:b6:b7:5f:9c:d7:3e:fe:a4:7d:12:fe:21:7e:
01:78:f6:80:11:4c:00:9d:7c:1f:16:4d:65:2f:c8:7f:c7:0c:
6b:41:f0:6e:6a:71:7d:90:bb:d9:9a:30:ec:13:ab:0c:4a:ad:
e0:11:cc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org