Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/_nEEr1jwrrRFBLYmtqOeF-R0BB8.roa
File: _nEEr1jwrrRFBLYmtqOeF-R0BB8.roa (raw, json)
Hash identifier: Og9IoXyiC1B/0CvFtZZChv4Xr1V4pmS7QQmOxl96Zrg=
Subject key identifier: FE:71:04:AF:58:F0:AE:B4:45:04:B6:26:B6:A3:9E:17:E4:74:04:1F
Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837
Certificate serial: 0186E474D500840BC6E73C8A1B5D7EA79EB0
Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/_nEEr1jwrrRFBLYmtqOeF-R0BB8.roa
Signing time: Wed 15 Mar 2023 08:48:27 +0000
ROA not before: Wed 15 Mar 2023 08:48:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 185.23.200.0/23 maxlen: 32
185.251.44.0/23 maxlen: 32
185.247.230.0/23 maxlen: 32
185.247.228.0/24 maxlen: 32
193.8.80.0/22 maxlen: 32
178.239.22.0/23 maxlen: 32
195.66.220.0/22 maxlen: 32
88.218.144.0/22 maxlen: 32
91.193.100.0/22 maxlen: 32
95.175.80.0/20 maxlen: 32
185.251.248.0/23 maxlen: 32
Validation: Failed, certificate revoked on Mon 03 Apr 2023 08:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:74:d5:00:84:0b:c6:e7:3c:8a:1b:5d:7e:a7:9e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837
Validity
Not Before: Mar 15 08:48:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe7104af58f0aeb44504b626b6a39e17e474041f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:02:65:92:a1:50:30:bd:a0:a8:87:8a:fc:56:
91:fd:10:52:a4:71:1c:6a:08:2a:3c:8e:19:10:c7:
36:38:38:25:11:f6:9d:9c:ec:90:70:35:70:5e:a3:
d1:53:84:87:e8:f1:55:06:00:f0:40:fd:cc:6f:1e:
c1:8b:25:a2:33:fb:1d:e3:c1:87:d6:3d:68:d8:0d:
45:85:1c:7a:48:13:cc:85:db:9f:e0:60:86:36:8c:
de:d6:3e:c6:fe:67:31:e9:1e:c2:f7:39:57:68:fa:
81:6e:d3:ad:64:b4:bb:ff:0e:94:b8:a4:84:a3:5c:
0e:26:74:0d:cd:c5:0a:77:d7:69:73:15:dc:ed:40:
f6:2a:9f:bc:e9:ea:71:3b:be:f2:a3:4e:11:fa:3f:
a2:07:c6:46:62:18:9d:b8:f1:d9:88:80:6f:50:cb:
1b:67:cd:37:5a:e4:39:ac:18:f0:77:b2:db:c6:b7:
c2:c4:f0:86:9b:5f:15:35:83:28:c5:c0:b7:d6:bb:
83:85:44:e8:cd:b0:de:96:7b:2a:84:ff:48:c5:f8:
9f:7f:b3:6d:5e:9e:6d:db:63:12:df:bd:fd:31:4f:
94:51:97:de:64:ba:2f:65:61:57:0c:59:e6:5d:5a:
33:84:ef:a0:aa:66:14:82:73:00:c3:5b:c7:e1:59:
60:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:71:04:AF:58:F0:AE:B4:45:04:B6:26:B6:A3:9E:17:E4:74:04:1F
X509v3 Authority Key Identifier:
keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/_nEEr1jwrrRFBLYmtqOeF-R0BB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.144.0/22
91.193.100.0/22
95.175.80.0/20
178.239.22.0/23
185.23.200.0/23
185.247.228.0/24
185.247.230.0/23
185.251.44.0/23
185.251.248.0/23
193.8.80.0/22
195.66.220.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:16:13:38:e3:d8:69:08:83:ce:a3:8e:86:c2:a4:ef:b5:c2:
34:ff:29:d1:16:51:39:32:e5:a6:cc:84:dc:ea:3d:e7:23:2a:
30:98:79:a6:4f:46:d4:db:83:7c:8a:92:d3:17:b4:1c:e8:5d:
e3:de:40:ea:2d:ce:12:4a:ec:05:4d:64:6d:75:df:ad:05:64:
38:68:e0:1f:36:c7:1f:c5:68:bd:14:50:67:85:20:88:57:c8:
73:6a:4f:82:da:65:92:65:2c:7d:39:ad:ac:3c:5a:52:7f:95:
cb:14:30:24:13:c1:e1:61:41:ea:62:ea:28:62:16:22:26:a1:
cf:3a:40:c1:bf:17:89:80:44:4f:f6:e9:e7:67:a4:11:6f:79:
c1:f1:08:d3:00:d8:37:50:b1:1d:7e:63:f4:16:59:f7:91:57:
cd:07:83:75:cb:ca:4c:00:f2:e5:88:0d:6a:54:d3:87:50:05:
6e:2d:24:a3:ed:64:8e:44:8c:10:5f:ee:a7:53:f6:0d:58:c4:
4f:5a:09:91:da:16:6a:55:7c:6c:46:0f:e9:72:15:ed:5a:f1:
be:a7:89:a7:ad:7d:db:f0:25:57:4e:2a:42:e7:1f:7e:29:93:
1d:b2:34:3f:d9:9e:a8:ad:36:d9:5a:f4:56:5b:58:cc:f3:e9:
48:74:89:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:32 2024 by rpki-client on console-fra.rpki-client.org