Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/wVCKyfxCcdq-MVLXgojSE4KS-2Y.roa
File: wVCKyfxCcdq-MVLXgojSE4KS-2Y.roa (raw, json)
Hash identifier: 4W4DVRd91wpMmX05oECxtsxHVzeUeUV9jkvQ6XsodOA=
Subject key identifier: C1:50:8A:C9:FC:42:71:DA:BE:31:52:D7:82:88:D2:13:82:92:FB:66
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 01857130A605E94C9EFAD79C49BB9012F4D8
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/wVCKyfxCcdq-MVLXgojSE4KS-2Y.roa
Signing time: Mon 02 Jan 2023 06:34:51 +0000
ROA not before: Mon 02 Jan 2023 06:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209604
IP address blocks: 185.255.92.0/24 maxlen: 24
185.255.93.0/24 maxlen: 24
185.255.94.0/24 maxlen: 24
185.255.95.0/24 maxlen: 24
185.132.126.0/24 maxlen: 24
185.93.70.0/24 maxlen: 24
185.93.71.0/24 maxlen: 24
185.93.68.0/24 maxlen: 24
185.93.69.0/24 maxlen: 24
193.164.5.0/24 maxlen: 24
89.35.52.0/24 maxlen: 24
93.115.10.0/24 maxlen: 24
93.177.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Feb 2023 09:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:a6:05:e9:4c:9e:fa:d7:9c:49:bb:90:12:f4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Jan 2 06:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1508ac9fc4271dabe3152d78288d2138292fb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:44:05:34:38:ea:5b:05:8e:aa:f9:99:5e:
10:b1:34:0b:47:b7:9d:3f:75:63:6d:2b:93:14:50:
7f:0e:6d:6a:07:97:dd:c7:6a:e4:d8:2e:57:fc:7e:
2d:1b:63:75:d0:76:7a:b4:81:61:e5:14:dd:d5:9e:
3a:94:6a:5b:f4:d4:2d:45:08:be:89:20:91:a8:90:
ac:89:d7:da:10:57:56:e9:58:4b:b4:e8:a9:ab:cd:
be:55:76:e7:ff:fa:a3:2d:cc:c1:08:33:c0:4f:6a:
f7:f2:67:1d:fb:72:9f:84:0f:50:56:03:79:e9:e2:
9f:d4:79:aa:16:2f:37:38:bf:2d:83:15:28:bc:94:
b7:4d:91:58:ab:b0:0c:a5:cf:76:48:88:12:a7:e9:
5e:9e:19:3c:b5:c0:c4:80:d0:1e:3d:65:71:a0:ad:
56:56:ca:ce:be:f8:71:c0:3e:5c:11:b4:6f:74:c9:
07:a6:a9:22:12:33:20:a7:40:07:0f:4c:0f:46:f9:
d3:da:06:05:fc:f6:4d:2a:b1:db:1d:0d:7f:4b:9a:
6e:1a:75:a1:d0:e2:7e:70:94:5f:48:77:3d:c5:a1:
09:08:4e:33:b7:af:74:49:1e:06:30:2f:cc:0a:37:
dd:f5:83:49:9d:0c:55:b4:5a:18:1f:47:84:ce:a6:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:50:8A:C9:FC:42:71:DA:BE:31:52:D7:82:88:D2:13:82:92:FB:66
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/wVCKyfxCcdq-MVLXgojSE4KS-2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.52.0/24
93.115.10.0/24
93.177.101.0/24
185.93.68.0/22
185.132.126.0/24
185.255.92.0/22
193.164.5.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a9:15:17:6f:7a:37:12:57:60:60:67:c3:9d:0f:96:4f:58:
ca:fd:15:7e:2d:25:e2:ec:05:f0:de:82:ac:cb:27:7d:b1:76:
64:13:9e:05:b9:ef:04:04:39:f2:8b:e3:13:35:8f:dc:fe:e0:
a5:d6:60:4b:f2:19:7e:f5:98:88:6c:64:25:42:c5:34:bf:dc:
46:e5:0c:1e:35:be:00:27:94:6e:83:ab:b7:c4:62:64:58:68:
df:08:49:cf:f8:db:35:5c:fb:2e:de:c5:6b:39:be:76:a8:aa:
4c:27:f0:f2:d3:5d:af:c9:f8:00:b8:9a:f9:6b:2a:be:62:80:
4c:9f:67:c9:fb:cc:dd:d4:e4:7f:bb:e4:84:dc:db:8f:fe:6a:
f7:7d:c9:88:18:f7:47:39:58:ac:64:26:ce:cb:43:d5:2c:06:
24:1d:6a:b0:b1:d1:d7:9e:cb:9a:d2:cc:00:9f:47:c8:8a:1b:
d7:0c:e5:0e:63:7b:87:7c:0a:1c:5c:18:4e:87:f4:05:98:66:
27:8f:58:45:d4:ff:61:e9:0f:f0:fb:bf:b7:94:ca:c2:bc:17:
f4:e6:b4:2f:7b:61:13:70:9c:f0:58:c0:bd:e3:e0:80:f5:68:
1a:9f:37:ab:7f:0b:f3:19:9c:1d:e7:f6:fc:c5:b9:2f:28:79:
65:ba:fc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:12 2024 by rpki-client on console-ams.rpki-client.org