Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/_0G8_mBIHkcViMjpZProvUMo4To.roa
File: _0G8_mBIHkcViMjpZProvUMo4To.roa (raw, json)
Hash identifier: mk6+b08epkqRBKS0oXTmLleH2VHVpuboLj7ecJjYfsU=
Subject key identifier: FF:41:BC:FE:60:48:1E:47:15:88:C8:E9:64:FA:E8:BD:43:28:E1:3A
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018C060D435F4CE7305017FBB52539B109A0
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/_0G8_mBIHkcViMjpZProvUMo4To.roa
Signing time: Sat 25 Nov 2023 10:36:21 +0000
ROA not before: Sat 25 Nov 2023 10:36:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207713
IP address blocks: 185.71.214.0/24 maxlen: 24
185.71.215.0/24 maxlen: 24
45.93.213.0/24 maxlen: 24
45.93.214.0/24 maxlen: 24
185.100.156.0/24 maxlen: 24
185.95.228.0/24 maxlen: 24
185.111.24.0/24 maxlen: 24
185.73.180.0/24 maxlen: 24
185.73.181.0/24 maxlen: 24
185.68.186.0/24 maxlen: 24
185.68.187.0/24 maxlen: 24
185.75.132.0/24 maxlen: 24
185.102.114.0/24 maxlen: 24
77.83.246.0/24 maxlen: 24
45.151.234.0/24 maxlen: 24
185.79.132.0/24 maxlen: 24
45.151.235.0/24 maxlen: 24
185.79.133.0/24 maxlen: 24
160.20.156.0/24 maxlen: 24
160.20.157.0/24 maxlen: 24
185.77.138.0/24 maxlen: 24
185.77.139.0/24 maxlen: 24
193.38.231.0/24 maxlen: 24
193.38.228.0/24 maxlen: 24
193.38.229.0/24 maxlen: 24
193.38.230.0/24 maxlen: 24
185.105.47.0/24 maxlen: 24
185.88.98.0/24 maxlen: 24
185.88.99.0/24 maxlen: 24
185.182.130.0/24 maxlen: 24
185.182.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:06:0d:43:5f:4c:e7:30:50:17:fb:b5:25:39:b1:09:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Nov 25 10:36:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff41bcfe60481e471588c8e964fae8bd4328e13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:ca:e9:64:d3:35:d1:de:d0:6c:49:ee:67:
8b:76:9f:dd:96:15:44:32:5a:50:31:74:ad:df:a9:
21:ad:72:40:97:67:5e:da:2e:93:2c:5f:2d:0e:7b:
da:83:87:9f:ae:06:d9:be:8c:65:ff:29:59:f8:87:
1c:ad:e0:d2:84:d0:49:5b:ed:65:eb:a4:29:99:26:
3b:3a:af:64:d1:35:3e:8a:c0:75:e0:65:13:8b:25:
19:e3:6a:6d:ff:2d:8c:06:d0:9d:58:29:d6:db:eb:
1b:86:91:7a:44:b4:62:b1:f8:9e:24:54:c9:ab:e5:
be:27:7b:29:36:96:76:3e:04:96:35:fb:9f:82:f8:
4f:37:85:4c:19:a6:ef:4a:c8:80:cc:21:55:f8:c4:
e6:d2:a2:c0:80:15:67:f5:06:fe:40:06:80:d8:f3:
6c:98:7a:a9:31:48:f2:b6:ce:14:6a:e9:b8:34:81:
13:e5:c4:5c:d2:bb:94:6a:5b:d6:b0:1c:b3:ad:cd:
91:bd:e4:5a:fe:22:46:93:4c:03:34:af:2b:81:fc:
dc:28:48:c2:1d:43:4e:4c:6d:34:72:13:27:72:e8:
73:78:12:0b:b7:72:71:1d:89:80:2a:3b:e3:6a:4c:
e3:7d:8f:92:79:48:94:d9:0f:24:45:24:d3:e1:ec:
3f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:41:BC:FE:60:48:1E:47:15:88:C8:E9:64:FA:E8:BD:43:28:E1:3A
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/_0G8_mBIHkcViMjpZProvUMo4To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.213.0-45.93.214.255
45.151.234.0/23
77.83.246.0/24
160.20.156.0/23
185.68.186.0/23
185.71.214.0/23
185.73.180.0/23
185.75.132.0/24
185.77.138.0/23
185.79.132.0/23
185.88.98.0/23
185.95.228.0/24
185.100.156.0/24
185.102.114.0/24
185.105.47.0/24
185.111.24.0/24
185.182.130.0/23
193.38.228.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:13:84:63:f0:26:4e:ee:55:77:a3:73:c0:5b:e0:6e:f8:57:
07:4d:9c:fb:77:39:d9:78:b8:8c:b8:36:f7:b7:f9:d8:12:fb:
a5:12:1c:8b:30:e7:ac:c1:f0:d0:60:db:38:4c:8e:33:06:0a:
b0:04:87:64:c1:34:ac:dc:d2:79:67:c4:5b:6b:6e:98:8d:65:
e6:09:fb:6a:f1:fa:36:17:de:7e:4d:47:c7:79:24:4d:ac:a9:
93:f8:bb:e6:81:b9:27:4a:ae:64:34:50:40:60:61:e8:1d:15:
11:48:46:1e:d9:12:8a:c8:f4:b8:fb:dd:b7:17:67:5f:75:d2:
6a:45:53:09:2c:85:f5:c4:d5:0a:7f:ce:cf:36:0c:5f:da:d2:
0a:2e:cf:74:39:79:5b:6d:44:4a:60:40:ef:cc:c2:94:fc:91:
36:42:bc:54:ae:03:01:72:80:37:be:2e:65:31:d5:85:ea:00:
56:3a:13:33:53:d9:47:09:ad:59:b6:73:cf:c8:ed:b0:2b:b4:
b9:75:9e:72:7a:cb:f9:3f:af:ff:bf:f5:cf:e5:6b:5a:60:a5:
bf:73:64:85:56:a6:ea:a1:fc:a9:a6:35:cd:d3:47:46:8d:18:
4e:a1:f6:4f:b9:e0:c5:dc:24:ef:0c:96:a3:5d:59:1a:6a:10:
6f:f8:bc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org