Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/6oBMxnDB_ftfEwQyui3eBfcgHHY.roa
File: 6oBMxnDB_ftfEwQyui3eBfcgHHY.roa (raw, json)
Hash identifier: 80fllur2cRoT8psaHfi9d2rjfRE9a4XZAoEJhrtt4LU=
Subject key identifier: EA:80:4C:C6:70:C1:FD:FB:5F:13:04:32:BA:2D:DE:05:F7:20:1C:76
Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837
Certificate serial: 01874651BC6E2A76A48A82C406F94C45222A
Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/6oBMxnDB_ftfEwQyui3eBfcgHHY.roa
Signing time: Mon 03 Apr 2023 08:52:54 +0000
ROA not before: Mon 03 Apr 2023 08:52:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 185.23.200.0/23 maxlen: 32
185.251.44.0/23 maxlen: 32
185.251.46.0/23 maxlen: 32
185.247.230.0/23 maxlen: 32
185.247.228.0/24 maxlen: 32
193.8.80.0/22 maxlen: 32
178.239.22.0/23 maxlen: 32
195.66.220.0/22 maxlen: 32
88.218.144.0/22 maxlen: 32
91.193.100.0/22 maxlen: 32
95.175.80.0/20 maxlen: 32
185.251.248.0/23 maxlen: 32
Validation: Failed, certificate revoked on Mon 03 Apr 2023 10:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:51:bc:6e:2a:76:a4:8a:82:c4:06:f9:4c:45:22:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837
Validity
Not Before: Apr 3 08:52:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea804cc670c1fdfb5f130432ba2dde05f7201c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3f:f8:8e:5e:9c:41:3a:c0:07:7f:c0:3d:f1:
ef:c9:7e:61:35:8a:0f:df:32:cd:db:1f:2c:66:f4:
d8:35:5c:bf:45:e2:1e:ea:30:2c:9c:b6:3c:82:e2:
78:38:3c:93:2d:71:a1:30:34:44:ff:46:e0:84:c2:
7a:05:a3:ab:1b:92:02:76:5c:d2:a0:ec:f7:6e:f8:
a1:28:d3:fd:3f:8c:5e:b4:16:dd:19:1d:8c:1d:12:
8c:4e:b2:2e:ab:c7:c2:ac:ec:46:73:68:73:5e:07:
f5:a5:14:62:97:58:8b:d9:a9:2f:23:35:74:22:e2:
5b:45:ea:ee:61:5b:11:a7:28:db:52:cc:1c:52:75:
5f:6e:39:c5:ba:be:6e:ae:5f:30:c7:97:7c:13:09:
bc:e0:92:ad:a6:48:42:8a:6d:01:f0:9b:27:a2:01:
77:57:b2:df:2a:28:f0:9a:1e:47:df:15:49:1f:a0:
28:1b:5d:20:f8:e2:3c:3b:12:54:02:35:81:07:93:
f4:f7:e9:7a:7f:55:c7:c4:77:9e:cd:11:22:eb:a1:
98:04:7e:69:84:18:a7:e5:e9:44:15:b8:33:5c:23:
dc:16:ce:40:da:c6:04:8f:cc:f4:ba:0e:57:a9:21:
cc:bf:42:4d:44:0d:91:2c:06:61:90:b5:cd:20:cc:
aa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:80:4C:C6:70:C1:FD:FB:5F:13:04:32:BA:2D:DE:05:F7:20:1C:76
X509v3 Authority Key Identifier:
keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/6oBMxnDB_ftfEwQyui3eBfcgHHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.144.0/22
91.193.100.0/22
95.175.80.0/20
178.239.22.0/23
185.23.200.0/23
185.247.228.0/24
185.247.230.0/23
185.251.44.0/22
185.251.248.0/23
193.8.80.0/22
195.66.220.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:0f:7f:e5:bb:c4:06:dd:6e:70:b8:8f:82:63:f8:e7:24:d0:
8a:12:d3:c9:c9:f2:84:7d:78:65:9d:f3:16:de:73:10:34:ee:
fa:bf:0e:23:26:f5:8a:78:e2:bd:95:29:77:03:fd:dc:65:cd:
86:26:e1:87:14:24:dd:55:f1:ec:4e:4e:5e:7c:3e:41:a2:2f:
a1:9b:e3:ca:1c:31:c6:88:ed:48:34:f9:4e:2e:df:86:f8:41:
45:66:dd:85:7d:28:12:9b:f5:90:5a:1d:95:0f:87:84:94:d3:
4f:92:80:2e:df:93:bb:c6:9b:7a:98:41:2e:37:d2:4c:46:73:
57:bf:a4:ca:c4:23:bb:12:9f:00:5f:69:f4:ae:e2:74:8e:86:
5e:7f:d2:1e:8b:ec:47:30:ca:88:30:2d:48:21:ed:70:76:5b:
b7:c1:c3:df:b9:b1:69:5c:e9:6d:f6:43:f2:70:a5:f5:6c:db:
00:d3:36:27:8a:c9:3c:f0:41:b9:48:ac:58:f8:04:64:71:b9:
9d:3a:f1:56:fe:4a:e4:25:d6:9a:82:ad:3b:a3:0e:b8:50:fa:
85:7c:da:20:b7:ce:2a:23:cd:6e:5c:b6:26:0b:76:e8:54:cc:
00:86:4b:1d:21:b9:f4:fc:0e:21:fd:a1:74:e7:82:f9:89:82:
07:b1:ea:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:29 2024 by rpki-client on console-ams.rpki-client.org