Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/90zd5cusdK8CFxDSN1lzno6t42g.roa
File: 90zd5cusdK8CFxDSN1lzno6t42g.roa (raw, json)
Hash identifier: jQW5BnBWOPcnUYB+9po0UfU70BFaD7huHN/H+ceDw8Q=
Subject key identifier: F7:4C:DD:E5:CB:AC:74:AF:02:17:10:D2:37:59:73:9E:8E:AD:E3:68
Certificate issuer: /CN=74198f7022b9560501db448af60301fa285e9236
Certificate serial: 0185BB2069323A6E4E2ECB18E631FA299B88
Authority key identifier: 74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/90zd5cusdK8CFxDSN1lzno6t42g.roa
Signing time: Mon 16 Jan 2023 15:09:01 +0000
ROA not before: Mon 16 Jan 2023 15:09:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3342
IP address blocks: 185.98.96.0/22 maxlen: 22
185.170.132.0/22 maxlen: 22
185.157.132.0/22 maxlen: 22
92.241.192.0/20 maxlen: 20
178.72.16.0/21 maxlen: 21
212.237.250.0/23 maxlen: 23
92.241.216.0/21 maxlen: 21
2a06:b00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:20:69:32:3a:6e:4e:2e:cb:18:e6:31:fa:29:9b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74198f7022b9560501db448af60301fa285e9236
Validity
Not Before: Jan 16 15:09:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f74cdde5cbac74af021710d23759739e8eade368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:05:ee:c9:75:5b:2e:94:34:22:b0:56:d5:60:
ae:0e:92:63:09:ed:02:e4:c2:48:dc:af:fc:98:04:
85:3a:52:7b:00:c6:22:8e:fb:ba:2f:76:45:7c:7f:
62:ca:c2:ee:29:5e:01:14:3c:47:7d:14:49:8b:b4:
a1:7c:ff:ad:3a:f8:ed:39:79:f9:6f:90:58:b6:d3:
b2:f2:5d:f5:8f:cc:14:b2:59:43:96:46:fe:d3:48:
15:c9:c3:a5:cc:6f:b3:c9:72:73:2d:19:32:a2:40:
f7:52:e5:20:8d:a5:a1:08:01:b8:ba:92:fe:fe:51:
33:b6:38:de:b8:ea:f2:f7:5e:b3:f8:b5:c5:34:95:
14:5c:d6:b7:06:f7:50:9e:7c:39:06:45:8a:82:6e:
7f:f7:c3:4a:97:aa:57:ad:0d:b2:21:d6:ab:69:4b:
95:4b:dd:a4:40:e8:d8:c1:8d:f4:77:a7:66:5e:79:
81:ed:79:28:7c:37:e4:b6:a9:f3:aa:48:2b:06:23:
92:49:e7:f9:33:c2:ab:05:9c:03:27:c7:3f:c4:70:
a6:3d:20:91:a3:ce:fa:3b:c8:c4:e0:b6:1b:e8:0d:
4c:c7:d0:b7:4c:ca:3e:af:82:e7:8c:83:9e:68:97:
40:ff:10:5b:61:7d:51:c2:55:6c:0b:f6:68:a5:9a:
f4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4C:DD:E5:CB:AC:74:AF:02:17:10:D2:37:59:73:9E:8E:AD:E3:68
X509v3 Authority Key Identifier:
keyid:74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/90zd5cusdK8CFxDSN1lzno6t42g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.241.192.0/20
92.241.216.0/21
178.72.16.0/21
185.98.96.0/22
185.157.132.0/22
185.170.132.0/22
212.237.250.0/23
IPv6:
2a06:b00::/29
Signature Algorithm: sha256WithRSAEncryption
6d:a5:9b:82:44:a6:75:2d:0b:64:c0:98:f1:8c:34:6e:6b:91:
ef:a4:a6:dc:52:fb:cf:50:95:0e:a8:80:46:fa:9f:48:40:e3:
20:02:24:4a:34:e6:87:7e:37:61:b3:39:54:1c:25:4c:a2:10:
4e:9a:3f:fb:be:8b:df:ab:ca:8c:34:87:85:2a:1f:13:17:c0:
7f:81:62:f6:78:e6:8e:0a:05:d1:b9:1f:2a:9e:c9:41:26:45:
12:1a:86:01:e7:b6:74:0b:7f:7f:89:60:80:88:b8:df:94:66:
05:81:1b:e4:36:48:90:80:22:72:74:f7:95:28:d6:a6:e9:51:
a9:43:08:26:1f:bc:0e:8b:a1:45:80:a1:b2:8e:dc:2c:29:17:
14:4d:8f:1a:39:8c:11:28:0c:aa:2d:83:72:bb:f2:8c:b6:f1:
71:2c:85:39:e7:26:0b:51:4b:60:bc:e9:19:cd:e3:50:1d:73:
4f:fc:e5:81:25:bf:88:8c:e7:61:ff:cf:05:38:4f:1e:bc:f9:
4c:3c:99:ab:4e:13:c6:a6:36:35:9a:a0:97:83:f4:3e:5a:8a:
2e:15:c4:f9:de:20:d7:14:b9:b5:c2:62:7c:79:40:1d:eb:26:
b1:cb:98:1b:98:e7:5d:a5:26:16:94:74:19:b1:3f:6c:38:3b:
59:ff:bc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:14 2024 by rpki-client on console-ams.rpki-client.org