Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/4rLWyUyzrg8EWrhRhFi2ilc-px8.roa
File: 4rLWyUyzrg8EWrhRhFi2ilc-px8.roa (raw, json)
Hash identifier: X4P1pFU+JLk0E8TVzuA9kaqfiNe+JVsGA40Fby/qCko=
Subject key identifier: E2:B2:D6:C9:4C:B3:AE:0F:04:5A:B8:51:84:58:B6:8A:57:3E:A7:1F
Certificate issuer: /CN=134efe7c541f5406dc7e0ff268d05582baefc996
Certificate serial: 0185C6B5BE1B9E8BF3949DF239EB00D7CECA
Authority key identifier: 13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/4rLWyUyzrg8EWrhRhFi2ilc-px8.roa
Signing time: Wed 18 Jan 2023 21:07:57 +0000
ROA not before: Wed 18 Jan 2023 21:07:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 194.127.98.0/23 maxlen: 23
45.91.40.0/22 maxlen: 22
94.140.6.0/23 maxlen: 23
94.140.5.0/24 maxlen: 24
89.147.104.0/22 maxlen: 22
83.229.28.0/23 maxlen: 23
185.212.7.0/24 maxlen: 24
185.126.33.0/24 maxlen: 24
195.85.6.0/23 maxlen: 23
91.208.213.0/24 maxlen: 24
89.35.228.0/24 maxlen: 24
195.158.236.0/23 maxlen: 23
2a10:13c0:da7a::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c6:b5:be:1b:9e:8b:f3:94:9d:f2:39:eb:00:d7:ce:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134efe7c541f5406dc7e0ff268d05582baefc996
Validity
Not Before: Jan 18 21:07:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2b2d6c94cb3ae0f045ab8518458b68a573ea71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:50:40:39:6f:0b:ad:10:4a:7e:34:eb:14:a1:
62:24:d1:8c:82:80:a2:bd:7d:46:0b:db:c5:81:dc:
d6:73:26:72:a8:21:47:f1:19:ac:58:dd:1e:27:a2:
b5:39:28:51:aa:7c:51:d7:19:06:9c:d2:5e:c2:19:
b8:54:df:82:eb:f0:90:f5:ee:7a:51:80:80:57:3b:
f9:60:64:46:0d:32:eb:21:4c:d4:07:2a:1d:b0:30:
51:5d:0a:aa:4d:46:b6:17:4d:ff:09:09:7f:51:fb:
1d:13:bf:e9:30:51:71:69:99:04:9a:5e:08:03:ef:
65:0b:1a:78:45:9e:c7:9e:50:70:be:1d:66:98:f2:
14:ab:c2:78:12:79:96:a1:da:15:67:bf:2b:5b:e9:
0d:4d:51:a9:a5:24:c9:63:a1:b6:79:63:64:57:f9:
04:53:5c:55:07:d3:4d:79:fe:d8:47:a7:c5:08:d4:
00:ec:40:dd:53:bc:3f:ee:89:c0:d7:6a:47:55:5c:
15:fa:28:74:c3:d7:84:46:2d:f4:57:f5:cc:73:24:
a6:c1:54:0e:c1:ba:fd:a1:39:e0:36:c1:52:0f:10:
65:6f:3c:08:a1:06:3e:d2:17:a7:1b:83:1b:9b:f5:
ef:f5:83:d3:f9:93:c6:a1:e5:95:44:c0:ff:80:08:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B2:D6:C9:4C:B3:AE:0F:04:5A:B8:51:84:58:B6:8A:57:3E:A7:1F
X509v3 Authority Key Identifier:
keyid:13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/4rLWyUyzrg8EWrhRhFi2ilc-px8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.40.0/22
83.229.28.0/23
89.35.228.0/24
89.147.104.0/22
91.208.213.0/24
94.140.5.0-94.140.7.255
185.126.33.0/24
185.212.7.0/24
194.127.98.0/23
195.85.6.0/23
195.158.236.0/23
IPv6:
2a10:13c0:da7a::/48
Signature Algorithm: sha256WithRSAEncryption
1b:36:eb:c1:53:ba:f4:ed:67:d5:7a:34:5b:b8:f3:b2:e6:ca:
ca:1c:f8:d1:b4:27:8c:34:06:c0:b6:ab:1c:b7:d5:fb:d0:af:
b7:57:6b:18:c7:1d:cc:e1:b4:97:38:c7:5e:4e:67:8c:84:8b:
f4:ba:48:25:74:17:d3:77:26:89:6d:d1:fb:84:85:e9:7f:99:
fe:6e:8b:37:7b:fc:52:11:2e:54:d9:7a:6f:df:b1:ab:e2:74:
f5:eb:4f:7a:87:74:ab:83:b6:25:15:07:ba:97:f7:3e:6c:37:
e7:b4:4d:e5:4c:e1:66:3c:e6:4e:72:05:c2:c9:a0:8f:d7:bf:
f4:e9:27:7a:9d:a5:2a:30:0a:57:9a:1f:4b:da:9c:98:55:bf:
02:f5:dc:47:ec:e4:1e:d7:91:bc:1a:53:e0:fa:19:93:ba:b1:
26:3d:c7:f5:bf:f7:1d:a3:81:1d:8f:ac:4c:d5:98:1a:7a:e0:
c6:af:b2:21:bd:65:54:1b:2d:73:7b:f5:5d:97:c5:29:c5:1d:
52:ce:55:6e:78:58:a1:1a:7f:b2:24:7d:c6:6e:65:ad:68:10:
95:5d:f0:e2:b9:27:a6:f7:e8:96:a5:d1:d3:9d:d6:bb:e8:ee:
c0:71:de:ef:31:7f:f1:3e:b9:b8:c5:ff:9d:8f:11:f6:f3:05:
2b:bf:2e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:38 2024 by rpki-client on console-fra.rpki-client.org