Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/9OM2j61-lJZ5qKEG6Azc4QR-K6g.roa
File: 9OM2j61-lJZ5qKEG6Azc4QR-K6g.roa (raw, json)
Hash identifier: iepND8onEPfpIUZ4JbC7nszpd3g1qg4tgmpk5YkajUI=
Subject key identifier: F4:E3:36:8F:AD:7E:94:96:79:A8:A1:06:E8:0C:DC:E1:04:7E:2B:A8
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0188A4F139452E8BB7043D64494E80C50E3E
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/9OM2j61-lJZ5qKEG6Azc4QR-K6g.roa
Signing time: Sat 10 Jun 2023 10:54:12 +0000
ROA not before: Sat 10 Jun 2023 10:54:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14576
IP address blocks: 185.68.246.0/24 maxlen: 24
185.89.43.0/24 maxlen: 24
185.89.42.0/24 maxlen: 24
185.68.247.0/24 maxlen: 24
194.104.10.0/24 maxlen: 24
194.104.9.0/24 maxlen: 24
194.104.8.0/24 maxlen: 24
185.68.184.0/24 maxlen: 24
5.181.169.0/24 maxlen: 24
5.181.168.0/24 maxlen: 24
213.108.3.0/24 maxlen: 24
213.108.1.0/24 maxlen: 24
213.108.0.0/24 maxlen: 24
5.183.252.0/24 maxlen: 24
185.77.220.0/22 maxlen: 24
213.232.122.0/24 maxlen: 24
213.232.120.0/24 maxlen: 24
83.171.226.0/24 maxlen: 24
83.171.225.0/24 maxlen: 24
83.171.224.0/24 maxlen: 24
83.171.227.0/24 maxlen: 24
77.220.192.0/24 maxlen: 24
77.220.195.0/24 maxlen: 24
141.98.84.0/24 maxlen: 24
141.98.87.0/24 maxlen: 24
5.183.255.0/24 maxlen: 24
45.10.165.0/24 maxlen: 24
45.10.164.0/24 maxlen: 24
185.88.36.0/24 maxlen: 24
45.10.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a4:f1:39:45:2e:8b:b7:04:3d:64:49:4e:80:c5:0e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jun 10 10:54:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4e3368fad7e949679a8a106e80cdce1047e2ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:8f:84:58:d7:2b:ce:f9:76:fc:bd:d4:7b:
18:da:0c:29:8a:a9:ed:aa:53:20:df:51:6b:39:17:
72:2d:75:6c:84:72:25:45:df:16:ba:7c:b4:32:97:
48:a8:61:52:ed:fe:24:ed:f7:d0:dd:73:27:86:4c:
72:eb:a2:84:8c:78:b8:24:23:27:e7:fe:05:af:96:
3a:fc:6b:39:d0:7f:14:09:c6:55:32:e2:23:1f:ef:
28:bf:fd:04:01:62:8d:93:6a:13:eb:eb:98:8c:2a:
de:15:e3:da:ca:d7:d1:24:94:0f:b4:fe:0e:01:56:
73:94:e1:7f:1f:ed:6f:60:1e:01:b1:55:47:b6:6c:
1e:03:91:cc:7c:29:90:b0:34:c3:6f:f3:cd:83:bf:
12:af:4c:22:1c:9d:78:41:12:01:b7:66:78:b9:8e:
1a:88:cf:f1:d9:8c:04:54:95:72:bc:be:cc:a2:dc:
69:44:4d:31:6d:dd:5e:f7:6f:cd:aa:38:23:8b:27:
0c:64:f6:e1:81:a2:34:a0:83:a6:c9:2f:01:91:32:
24:0c:0c:a9:9f:b4:2b:65:9f:c1:4a:a8:d1:ed:c7:
70:1c:73:86:67:f7:bd:4f:39:9d:67:72:b6:c2:20:
b9:e2:67:24:44:c0:33:f8:53:69:1a:7f:e6:7b:17:
66:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E3:36:8F:AD:7E:94:96:79:A8:A1:06:E8:0C:DC:E1:04:7E:2B:A8
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/9OM2j61-lJZ5qKEG6Azc4QR-K6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.168.0/23
5.183.252.0/24
5.183.255.0/24
45.10.164.0/23
45.10.167.0/24
77.220.192.0/24
77.220.195.0/24
83.171.224.0/22
141.98.84.0/24
141.98.87.0/24
185.68.184.0/24
185.68.246.0/23
185.77.220.0/22
185.88.36.0/24
185.89.42.0/23
194.104.8.0-194.104.10.255
213.108.0.0/23
213.108.3.0/24
213.232.120.0/24
213.232.122.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:25:9d:ad:30:d5:42:d5:1f:b4:61:f7:0a:27:ab:b5:8d:6f:
6b:75:19:ee:9f:a5:2d:55:4d:4c:d3:40:20:09:9f:6d:b8:3b:
65:88:dc:44:fe:0d:b0:76:98:9a:c2:42:b2:9b:79:45:17:d1:
60:44:22:f2:3a:e2:06:c3:3e:03:c4:57:5b:6a:3e:87:30:d7:
10:f7:e2:da:29:e1:7d:91:bd:93:92:e6:4b:fc:bd:32:5c:7d:
96:aa:13:94:15:01:6c:64:90:0b:13:49:1d:26:cf:e9:19:37:
e2:15:fa:6f:4b:3b:f5:e0:6a:35:d5:9d:0c:8c:3d:1e:11:e5:
42:c2:93:dd:75:08:f8:3b:83:d1:fc:fa:18:b7:4a:c3:08:7f:
0a:e8:ac:56:21:be:aa:87:3d:3f:7f:39:bd:31:74:a5:34:c6:
72:de:5f:27:55:f6:21:93:96:77:5b:63:ff:34:62:a3:2b:50:
8d:86:6a:72:a7:ab:5e:80:9d:99:d3:ce:c3:c9:68:ba:a6:e2:
a6:79:bb:e2:f6:a3:5e:6e:5e:b8:4e:a2:0b:d8:59:df:db:3e:
17:38:64:16:25:40:75:1f:d5:f7:0d:1b:27:f6:17:2b:8a:82:
d8:45:5e:f0:f2:39:ba:83:ca:f2:77:31:5a:b2:ad:74:6f:3d:
5b:dc:fb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org