Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/lifHqYRx1siOKHRHAy1bOl_M6n0.roa
File: lifHqYRx1siOKHRHAy1bOl_M6n0.roa (raw, json)
Hash identifier: zBZZSs4/pFgC7/fYzfU/myQVrlLhoPD9xnKyFZfl2tc=
Subject key identifier: 96:27:C7:A9:84:71:D6:C8:8E:28:74:47:03:2D:5B:3A:5F:CC:EA:7D
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018752323550D0505458C35561FA1DE5FFE3
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/lifHqYRx1siOKHRHAy1bOl_M6n0.roa
Signing time: Wed 05 Apr 2023 16:13:54 +0000
ROA not before: Wed 05 Apr 2023 16:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200088
IP address blocks: 5.44.46.0/24 maxlen: 24
5.44.47.0/24 maxlen: 24
185.166.196.0/24 maxlen: 24
185.166.197.0/24 maxlen: 24
81.200.157.0/24 maxlen: 24
81.200.154.0/24 maxlen: 24
81.200.156.0/24 maxlen: 24
81.200.155.0/24 maxlen: 24
89.191.226.0/24 maxlen: 24
194.31.173.0/24 maxlen: 24
37.220.81.0/24 maxlen: 24
194.31.174.0/24 maxlen: 24
37.220.83.0/24 maxlen: 24
37.220.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Apr 2023 13:21:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:32:35:50:d0:50:54:58:c3:55:61:fa:1d:e5:ff:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Apr 5 16:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9627c7a98471d6c88e287447032d5b3a5fccea7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f8:5a:1f:5d:12:53:ca:a8:6d:0a:f9:45:cb:
05:53:05:84:f3:c7:41:2e:f8:66:2e:71:a7:21:05:
b8:8c:7c:bc:48:93:b4:1a:e2:2b:34:5c:d4:6c:3a:
ab:d1:bc:4a:02:a6:5d:58:0b:ef:ce:54:8d:90:54:
9c:a1:fd:e3:43:00:38:48:3c:b0:fb:9a:33:14:99:
c4:bc:00:94:24:fc:80:98:9b:fb:39:fd:a9:d6:59:
ce:dc:0b:73:72:0a:0d:57:9d:22:93:6e:7c:70:39:
19:16:5b:3c:3f:67:45:34:e6:15:06:16:9a:b6:85:
90:4a:3a:26:e1:31:29:f7:f2:02:f2:e7:f5:70:43:
8a:cb:28:6a:0e:57:66:73:54:08:a6:5d:eb:40:54:
a1:4d:0e:f6:75:55:b4:64:49:d0:74:c9:0a:7b:b0:
90:3b:85:bb:85:72:16:e3:63:f1:87:ad:65:c7:ac:
a4:ce:84:83:55:69:f4:ff:45:5f:0d:c7:e3:86:ee:
5d:d7:ef:ca:b1:b2:c0:70:73:96:a0:ae:02:ab:32:
fe:15:94:df:78:e1:06:8c:ae:1d:c0:ab:05:bc:33:
0b:05:15:46:e9:ea:87:65:1d:2d:f5:ae:f1:06:fe:
e3:ff:43:00:0c:92:45:85:20:a8:1a:8f:03:7d:b2:
37:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:27:C7:A9:84:71:D6:C8:8E:28:74:47:03:2D:5B:3A:5F:CC:EA:7D
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/lifHqYRx1siOKHRHAy1bOl_M6n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.46.0/23
37.220.81.0-37.220.83.255
81.200.154.0-81.200.157.255
89.191.226.0/24
185.166.196.0/23
194.31.173.0-194.31.174.255
Signature Algorithm: sha256WithRSAEncryption
49:7d:20:77:84:29:c3:67:6a:f3:fe:b2:01:2d:e6:2f:b0:ac:
4a:3d:d2:1d:21:c5:2d:d2:0c:f9:bd:37:4d:47:fc:b8:8f:b8:
e9:c9:31:8d:a7:4c:b8:f7:67:6f:d7:96:91:78:2d:15:47:95:
57:a9:25:38:bb:49:87:0a:2b:18:99:9e:9e:b1:1b:3e:6d:6b:
61:3c:cd:15:2c:6c:3f:49:fa:bc:ba:f5:b1:0c:73:a4:d9:57:
4f:12:52:07:82:d7:d8:1e:7e:ec:b0:77:c9:6e:ca:ac:9e:01:
ff:e4:4b:d3:22:ec:3c:57:78:5a:01:db:d3:f9:2d:60:48:d1:
3f:0a:1a:33:f8:9a:df:c6:42:bf:6e:30:ed:74:7d:5d:03:f7:
88:88:ab:5f:12:99:c5:2f:71:fc:95:63:98:f6:ce:9a:8a:7a:
7c:d6:e7:64:95:fa:52:79:13:84:2b:cb:4f:81:c7:9f:9c:28:
0c:31:94:00:e4:59:f9:12:5a:1e:cf:71:ad:bd:46:ee:13:80:
99:1e:c8:b8:b2:6f:b8:9d:83:56:22:a4:3d:13:fa:d3:f5:8f:
cd:e4:f9:c7:f1:87:f2:29:90:93:e8:fc:67:6a:10:05:01:51:
cb:6e:1d:90:25:2a:b2:5e:3b:32:7a:df:64:ea:a2:b1:83:8a:
70:b7:21:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:55 2024 by rpki-client on console-fra.rpki-client.org