Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/_OVKjsWeu31UFXusMyz0CQtNgcw.roa
File: _OVKjsWeu31UFXusMyz0CQtNgcw.roa (raw, json)
Hash identifier: fARzogO7EPwupJzgJV08S7bQ1q/YfYfKeTKYGKASmmo=
Subject key identifier: FC:E5:4A:8E:C5:9E:BB:7D:54:15:7B:AC:33:2C:F4:09:0B:4D:81:CC
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018C9048040004DE80FA2FDC5D88D762B290
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/_OVKjsWeu31UFXusMyz0CQtNgcw.roa
Signing time: Fri 22 Dec 2023 06:48:07 +0000
ROA not before: Fri 22 Dec 2023 06:48:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197730
IP address blocks: 185.222.43.0/24 maxlen: 24
45.136.184.0/22 maxlen: 24
45.136.185.0/24 maxlen: 24
45.136.186.0/24 maxlen: 24
45.136.187.0/24 maxlen: 24
185.241.58.0/24 maxlen: 24
45.130.181.0/24 maxlen: 24
45.130.183.0/24 maxlen: 24
62.106.75.0/24 maxlen: 24
45.130.182.0/24 maxlen: 24
45.130.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:90:48:04:00:04:de:80:fa:2f:dc:5d:88:d7:62:b2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Dec 22 06:48:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fce54a8ec59ebb7d54157bac332cf4090b4d81cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:39:b6:91:c8:37:e8:d3:9c:5b:c5:b0:0c:
f6:aa:65:e4:f5:fc:8a:69:a3:d3:fe:32:77:e7:f0:
53:dc:0c:45:9e:f7:f3:7b:81:d4:0f:84:a5:fa:ce:
cb:6a:7f:fb:08:eb:42:d1:03:28:e7:c3:71:5b:f9:
db:ab:df:ce:d5:83:23:18:88:69:0d:c4:c2:7e:c7:
b7:55:a1:fa:c8:b6:1c:80:be:46:69:5a:26:f3:07:
64:68:44:ba:8f:d4:3c:5f:35:91:12:b2:8f:82:1b:
2d:bf:9f:5d:1d:df:1a:fc:44:28:17:05:a5:a5:ef:
52:62:a8:53:84:29:45:85:c6:4c:de:47:17:73:d4:
a3:f3:d9:b5:f1:89:b7:bf:d6:08:4d:1f:df:2e:ff:
50:e5:69:c5:51:73:e2:3a:04:83:fa:37:09:4a:b9:
08:43:3c:69:92:45:11:fc:9f:a4:28:08:ee:65:86:
55:a2:94:db:0a:ba:46:d4:56:d3:bd:75:77:3d:5e:
1c:54:0c:88:cf:d3:40:51:50:2a:b1:eb:13:2f:8d:
99:3d:4d:89:22:28:f9:eb:af:24:2f:b6:91:d2:85:
7d:4c:e3:7a:be:91:d0:ae:56:be:67:59:5e:89:b9:
1a:62:a4:f0:5c:2f:60:69:66:ac:74:c5:99:9e:54:
66:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E5:4A:8E:C5:9E:BB:7D:54:15:7B:AC:33:2C:F4:09:0B:4D:81:CC
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/_OVKjsWeu31UFXusMyz0CQtNgcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.180.0/22
45.136.184.0/22
62.106.75.0/24
185.222.43.0/24
185.241.58.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:a6:29:2a:96:aa:c2:20:92:15:9d:71:71:0c:06:f4:7d:f1:
59:4f:97:a2:21:5d:b0:3e:55:83:b8:c3:e4:a2:2b:94:30:d4:
c8:18:d8:e7:7e:a6:ed:1d:1a:eb:eb:68:21:f9:87:c2:30:3a:
0a:1a:ea:38:0b:66:36:56:c4:d2:79:33:cb:9f:3b:57:c1:05:
69:33:36:fb:4d:bb:88:ff:5c:86:aa:b4:63:f7:63:22:5c:32:
73:7f:c3:97:45:18:f6:db:11:44:2a:bc:c3:03:74:0a:28:a9:
32:b6:dd:51:69:76:71:2e:f8:bd:f0:dd:e0:ea:bc:05:93:10:
75:36:7f:52:58:ce:80:36:e3:b4:c4:81:fb:80:cb:d1:bc:d7:
43:6c:c6:3f:d8:73:77:17:d9:5c:fb:3d:50:44:47:c8:ae:24:
8b:db:bc:d9:cf:7d:87:59:55:ef:55:71:d5:a2:42:01:64:2b:
bd:5c:ff:3c:4f:0a:56:7a:25:df:1a:cd:e6:8e:ba:3b:3a:e9:
d2:ee:5f:77:e4:1a:20:04:66:f6:5f:47:54:2b:c7:88:a5:77:
5b:58:7d:30:df:1f:54:98:b3:67:27:2c:9b:29:b0:cd:c6:28:
e3:49:15:40:bf:95:5b:7b:ed:c7:5c:84:42:d0:7d:01:3a:6e:
71:94:41:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org