Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/TcLObtC5IEitJYQnjuNuMFMlXTs.roa
File: TcLObtC5IEitJYQnjuNuMFMlXTs.roa (raw, json)
Hash identifier: 1kpDPY2V+8YCIJjfk7ewjmR3nOgeoSQQijYCM21wFlw=
Subject key identifier: 4D:C2:CE:6E:D0:B9:20:48:AD:25:84:27:8E:E3:6E:30:53:25:5D:3B
Certificate issuer: /CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Certificate serial: 01856D66115BDCDADE765247B37DDCABBE93
Authority key identifier: C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/TcLObtC5IEitJYQnjuNuMFMlXTs.roa
Signing time: Sun 01 Jan 2023 12:54:43 +0000
ROA not before: Sun 01 Jan 2023 12:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59790
IP address blocks: 194.135.200.0/21 maxlen: 21
5.183.208.0/24 maxlen: 24
94.176.100.0/22 maxlen: 22
193.32.11.0/24 maxlen: 24
195.216.136.0/22 maxlen: 22
185.107.24.0/22 maxlen: 22
93.92.116.0/22 maxlen: 22
193.124.144.0/21 maxlen: 21
5.154.233.0/24 maxlen: 24
185.224.116.0/22 maxlen: 22
185.125.36.0/22 maxlen: 22
193.124.76.0/22 maxlen: 22
185.35.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 09 Aug 2023 15:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:11:5b:dc:da:de:76:52:47:b3:7d:dc:ab:be:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Validity
Not Before: Jan 1 12:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dc2ce6ed0b92048ad2584278ee36e3053255d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:eb:19:15:84:81:8f:40:58:e9:95:48:a0:
0f:ec:de:96:1e:87:f5:a5:28:39:ed:14:5e:fb:fe:
2c:b7:c7:26:5b:e8:81:44:2c:47:a4:11:00:b9:5c:
75:22:8a:a3:ce:83:58:a4:fa:43:12:69:e9:53:4f:
a0:00:aa:74:1f:22:26:e6:3c:2f:c7:65:66:07:5c:
1f:dc:1a:3b:11:57:01:20:7a:0f:c2:ee:12:43:e5:
cd:cd:8a:e2:57:54:46:2c:cd:35:16:a3:1a:d3:87:
0a:36:18:eb:97:e8:19:06:71:25:47:c0:7b:cf:3b:
bd:7d:1e:be:b6:0e:86:13:63:d5:ea:af:15:8c:b5:
30:27:61:81:fa:84:1a:bf:38:0d:53:29:4e:dd:79:
bf:d8:e0:9b:98:b4:90:b4:69:5b:8d:b3:a8:70:4e:
20:8e:19:6a:02:98:b2:77:6b:93:3a:ab:e1:cd:6f:
30:41:38:ae:78:4b:5b:1e:a9:33:6a:65:c4:4d:1e:
74:f9:36:fa:c6:ff:75:d5:e4:e2:80:94:73:1a:d1:
d5:f6:13:b0:12:ca:3c:b7:56:cf:1b:25:1e:5e:88:
21:7d:50:3c:7d:a7:87:3e:5d:3e:91:1c:2c:98:06:
46:6c:ef:c1:72:a9:9b:a3:3c:60:0f:9f:8e:4c:6b:
3a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C2:CE:6E:D0:B9:20:48:AD:25:84:27:8E:E3:6E:30:53:25:5D:3B
X509v3 Authority Key Identifier:
keyid:C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/TcLObtC5IEitJYQnjuNuMFMlXTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.233.0/24
5.183.208.0/24
93.92.116.0/22
94.176.100.0/22
185.35.232.0/22
185.107.24.0/22
185.125.36.0/22
185.224.116.0/22
193.32.11.0/24
193.124.76.0/22
193.124.144.0/21
194.135.200.0/21
195.216.136.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:0a:fa:e0:49:c2:b2:19:ca:24:6d:28:86:9a:19:29:5e:a0:
1b:54:7f:db:cb:27:ef:57:65:8d:11:c1:b1:07:7c:a7:f7:20:
d8:d6:6d:d9:f3:08:5a:44:10:55:1d:1c:b8:54:fa:82:94:b2:
bd:d3:28:fe:c7:4a:6d:5a:85:b8:2d:e8:56:20:8e:3e:b3:45:
d9:5d:2d:88:21:81:40:c9:0c:45:e5:03:9a:e4:3d:b3:95:c8:
75:74:83:69:10:ab:82:17:a2:57:7b:dc:b7:51:14:b0:05:a7:
d1:e6:2f:23:da:2e:35:9f:9e:73:8b:64:47:c7:0d:80:60:c6:
41:1a:e6:50:0a:82:fa:cd:a8:02:47:37:a7:a6:80:89:66:26:
ed:53:e2:9c:ee:f9:0d:6d:9b:b6:9c:6d:17:5d:a8:c5:7c:aa:
e5:a7:57:1c:64:3f:68:ae:b0:33:b1:2c:2f:85:ca:16:77:28:
c7:3a:90:82:ae:95:99:c8:07:4b:1d:7b:f8:fc:be:e9:e7:51:
29:35:ce:2c:d6:b8:e1:15:45:f1:1d:2c:6a:5b:74:9d:f7:c0:
75:e7:e8:27:42:57:b7:ec:d8:ee:06:ed:ef:f6:ea:c7:bc:7b:
c0:53:ba:f6:19:0e:5b:e8:73:c1:48:ff:62:24:fa:8e:a1:e7:
8e:fa:40:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:55 2024 by rpki-client on console-ams.rpki-client.org