Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/pT_awaPRrxYmSeUUaSVSNFpGjmw.roa
File: pT_awaPRrxYmSeUUaSVSNFpGjmw.roa (raw, json)
Hash identifier: ogk2RfeyRTHE7WDRV85jwaUWBuKH+9KzX4krKinlZlw=
Subject key identifier: A5:3F:DA:C1:A3:D1:AF:16:26:49:E5:14:69:25:52:34:5A:46:8E:6C
Certificate issuer: /CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Certificate serial: 01856BE58AF703657B48786999905E94A6F5
Authority key identifier: 59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/pT_awaPRrxYmSeUUaSVSNFpGjmw.roa
Signing time: Sun 01 Jan 2023 05:54:43 +0000
ROA not before: Sun 01 Jan 2023 05:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3223
IP address blocks: 185.242.206.0/24 maxlen: 24
185.242.205.0/24 maxlen: 24
185.242.204.0/24 maxlen: 24
185.242.207.0/24 maxlen: 24
93.115.92.0/22 maxlen: 24
93.115.80.0/22 maxlen: 24
93.115.80.0/21 maxlen: 24
93.115.88.0/22 maxlen: 22
93.114.40.0/21 maxlen: 24
93.114.41.0/24 maxlen: 24
93.114.42.0/24 maxlen: 24
93.114.46.0/24 maxlen: 24
93.114.45.0/24 maxlen: 24
5.254.0.0/24 maxlen: 24
5.254.0.0/17 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:8a:f7:03:65:7b:48:78:69:99:90:5e:94:a6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Validity
Not Before: Jan 1 05:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a53fdac1a3d1af162649e514692552345a468e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b7:cf:84:2e:11:63:d6:a6:e4:e1:4a:d3:3d:
82:3b:85:44:22:27:fc:a2:7d:ca:3f:19:b8:8e:9d:
8d:de:45:f4:0a:75:4c:41:39:a0:1a:66:56:45:9a:
51:90:7b:e0:45:06:21:74:32:bd:e7:8d:f6:72:a5:
db:3a:79:ba:6e:a5:7b:fb:aa:70:d0:26:71:a7:e8:
d2:9a:74:4a:3c:ee:b0:d8:92:95:f0:b5:42:a0:03:
08:f9:1f:4c:be:60:18:33:10:31:53:98:76:0e:27:
59:78:3d:6e:53:5b:6b:d4:0c:d6:bf:78:9f:80:78:
f6:16:48:f7:dc:90:5f:d6:bc:72:65:e5:b0:2f:9f:
5d:e5:9d:27:94:a0:f4:2c:42:bf:59:22:e6:11:51:
28:14:60:6f:59:29:9b:11:aa:25:76:21:23:d6:ae:
38:2c:12:dc:fb:a0:84:93:20:02:eb:19:e3:1f:8f:
12:36:92:d5:fd:56:71:58:04:d3:e2:fd:da:88:f4:
e5:28:e2:b4:a6:88:6b:cf:83:60:83:ae:6b:c7:fe:
03:69:57:da:65:20:97:43:6d:40:5d:7f:43:8b:ee:
86:e0:5e:ea:49:9a:e2:87:92:9a:2a:27:dd:db:21:
9a:c0:e2:12:21:61:98:69:b6:be:a4:0b:a7:33:f0:
37:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3F:DA:C1:A3:D1:AF:16:26:49:E5:14:69:25:52:34:5A:46:8E:6C
X509v3 Authority Key Identifier:
keyid:59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/pT_awaPRrxYmSeUUaSVSNFpGjmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.254.0.0/17
93.114.40.0/21
93.115.80.0/20
185.242.204.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:89:c3:94:84:ca:0c:0a:d5:f7:bf:80:fd:5b:44:6d:33:17:
8f:f3:9b:49:81:8d:df:c0:44:86:91:95:73:7e:be:36:72:34:
01:4e:7a:0d:6e:d2:35:da:b0:74:a0:95:fc:1d:70:6d:a2:df:
0a:7f:71:e3:4c:19:b4:86:63:14:91:4b:83:e4:f2:3d:59:d2:
fa:6f:96:c1:db:cb:ca:17:d1:ec:2f:bc:23:72:56:13:24:ad:
56:1a:ed:b4:f5:a8:ed:4a:56:7b:1a:33:5e:c8:8f:18:ea:73:
1b:57:9d:b0:27:bd:a2:77:d2:78:30:22:f0:1e:9b:6e:f5:70:
49:13:7f:45:1e:0d:4c:0c:68:63:e3:17:b4:6c:f7:7d:3d:26:
1c:01:ff:3e:c1:ec:84:ae:d3:89:b4:69:27:43:ca:31:ad:76:
6a:ad:a3:8a:bd:e6:73:f2:d8:f8:b9:14:e2:fe:10:ff:5d:ca:
03:17:24:b7:0d:c2:a8:f4:98:9b:19:30:6e:f5:04:c6:ab:fe:
ed:0e:25:0c:32:ee:a4:99:58:3e:0e:a7:dc:0d:f2:b3:be:7b:
08:a7:fa:2c:7d:9c:21:18:dc:ad:c8:2f:81:2e:3b:3f:ef:79:
5b:3a:09:ad:74:9a:3e:62:ac:8e:bd:ce:45:d7:55:1c:d6:05:
cf:ad:97:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:30 2024 by rpki-client on console-fra.rpki-client.org