Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/kZSGpN_OUP9kfEPdl70IVaNMVaY.roa
File: kZSGpN_OUP9kfEPdl70IVaNMVaY.roa (raw, json)
Hash identifier: orWmmwm5EKWKpHTPbO1u8OWCQf0nc+6cqOtsOg/Rrk0=
Subject key identifier: 91:94:86:A4:DF:CE:50:FF:64:7C:43:DD:97:BD:08:55:A3:4C:55:A6
Certificate issuer: /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial: 0185ED5D4F00D3173BDD8FE1AC88D4961451
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/kZSGpN_OUP9kfEPdl70IVaNMVaY.roa
Signing time: Thu 26 Jan 2023 09:16:33 +0000
ROA not before: Thu 26 Jan 2023 09:16:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203639
IP address blocks: 185.155.186.0/24 maxlen: 24
185.155.187.0/24 maxlen: 24
46.21.23.0/24 maxlen: 24
46.21.20.0/24 maxlen: 24
46.21.22.0/24 maxlen: 24
46.21.21.0/24 maxlen: 24
46.21.28.0/24 maxlen: 24
46.21.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 May 2023 15:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ed:5d:4f:00:d3:17:3b:dd:8f:e1:ac:88:d4:96:14:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
Validity
Not Before: Jan 26 09:16:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=919486a4dfce50ff647c43dd97bd0855a34c55a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:d6:d5:f7:58:2f:e7:fc:2f:14:cf:8c:79:
2d:d6:9c:86:fb:89:93:16:88:11:25:97:77:5e:a8:
6b:ee:18:c9:5f:63:95:38:9d:cb:13:66:bb:6d:85:
99:ae:88:92:3d:b8:5d:0f:10:2a:fc:51:18:9d:a7:
76:1c:70:29:44:f9:a0:af:06:1a:a6:b0:81:58:21:
5c:70:12:04:d8:a7:b7:7a:66:68:ef:97:a3:7c:3c:
fd:ee:91:d7:a5:9f:42:1e:3f:99:22:69:2d:89:16:
fc:e7:89:9a:bd:88:bc:1e:37:ef:d7:7f:2d:58:f5:
a2:0b:21:26:ad:ca:74:6c:f3:f9:d9:3f:ce:b6:42:
4c:35:c3:d9:af:aa:1f:31:07:9c:8d:60:59:bc:f3:
83:00:4f:1f:4d:29:7e:e8:f3:cb:64:78:ed:3a:b0:
81:5d:c1:2c:7b:8e:52:d7:da:1a:ac:b5:22:51:e8:
e9:eb:f5:12:e2:db:b2:88:8b:82:7c:3b:41:3b:d8:
6b:1b:3c:e4:49:eb:c3:70:ff:f9:2c:2f:4c:87:7a:
83:be:dd:aa:c8:ab:dc:a8:8f:7f:62:f1:12:44:15:
31:64:fa:b9:84:46:d9:23:a2:05:bd:26:b6:e4:88:
4b:5e:f9:8d:2b:39:10:10:7f:cb:93:93:48:1b:1f:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:94:86:A4:DF:CE:50:FF:64:7C:43:DD:97:BD:08:55:A3:4C:55:A6
X509v3 Authority Key Identifier:
keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/kZSGpN_OUP9kfEPdl70IVaNMVaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.20.0/22
46.21.28.0/24
46.21.30.0/24
185.155.186.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:16:7d:77:54:4a:dc:4b:8f:91:f1:69:9f:7a:ae:cb:4c:38:
39:91:59:ad:67:32:15:bb:2c:5a:d5:48:17:d1:58:ee:76:16:
3f:9e:8e:9b:96:a6:9e:d1:09:86:29:31:d0:77:78:2a:bf:bb:
71:33:1f:29:be:93:4d:3e:d0:fc:e3:d4:f4:96:e5:39:0b:44:
17:a3:d8:98:3e:66:33:7e:f2:4c:ca:a8:f1:fc:73:8f:df:f1:
07:02:d2:73:99:3b:4e:cd:a3:c0:ac:e9:95:27:84:22:32:fd:
7d:f1:b5:23:f9:88:47:92:71:06:9e:4d:5a:78:d3:91:aa:86:
e3:44:f8:ff:0a:55:f1:79:2b:d4:d0:59:a7:e7:30:29:5c:fe:
aa:20:61:96:51:28:2b:5b:b2:5c:a3:47:3b:44:10:6f:f7:d8:
94:58:66:5c:2a:8c:b1:a2:a2:c6:13:ed:70:01:9f:6c:69:0e:
98:72:a1:a9:c4:66:3f:c2:58:99:b7:db:79:15:75:8f:0d:9d:
5e:7a:1d:71:45:39:9a:c9:5d:78:60:c4:a5:f2:b0:d6:0f:42:
ec:06:7a:5f:57:44:24:7f:e5:ac:f6:b0:9d:f2:18:77:02:3b:
8c:43:bc:e2:61:fd:b1:be:16:4e:49:c5:7b:5d:b1:1b:bd:44:
01:a9:26:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:58 2024 by rpki-client on console-ams.rpki-client.org