Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/R7Vr0L875fXw-ySv1vEZO24hTfE.roa
File: R7Vr0L875fXw-ySv1vEZO24hTfE.roa (raw, json)
Hash identifier: MBXyVS7JlcwdNc2BeC+awaNfSUKVc/9qDPBZE4c9RYE=
Subject key identifier: 47:B5:6B:D0:BF:3B:E5:F5:F0:FB:24:AF:D6:F1:19:3B:6E:21:4D:F1
Certificate issuer: /CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Certificate serial: 01884CFAFA254CE6DE5F36B7ADAD1BBF8E53
Authority key identifier: 40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/R7Vr0L875fXw-ySv1vEZO24hTfE.roa
Signing time: Wed 24 May 2023 08:58:16 +0000
ROA not before: Wed 24 May 2023 08:58:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61102
IP address blocks: 185.18.206.0/24 maxlen: 24
185.18.205.0/24 maxlen: 24
89.33.29.0/24 maxlen: 24
185.18.204.0/24 maxlen: 24
89.33.28.0/24 maxlen: 24
185.18.207.0/24 maxlen: 24
176.223.65.0/24 maxlen: 24
185.217.98.0/24 maxlen: 24
185.217.97.0/24 maxlen: 24
185.217.96.0/24 maxlen: 24
185.217.99.0/24 maxlen: 24
107.150.179.0/24 maxlen: 24
107.150.178.0/24 maxlen: 24
188.210.255.0/24 maxlen: 24
185.37.150.0/24 maxlen: 24
185.37.149.0/24 maxlen: 24
185.37.148.0/24 maxlen: 24
185.37.151.0/24 maxlen: 24
2a03:ff40:4ed1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4c:fa:fa:25:4c:e6:de:5f:36:b7:ad:ad:1b:bf:8e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Validity
Not Before: May 24 08:58:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47b56bd0bf3be5f5f0fb24afd6f1193b6e214df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:6b:23:c3:2c:4f:63:d7:07:38:3f:7e:7b:
24:51:b6:5d:1f:8e:45:e9:02:33:37:75:f8:9e:9e:
de:72:31:4b:b3:49:59:80:3d:5a:f8:99:e8:db:28:
18:f7:0c:e7:94:1f:98:62:47:b4:4f:dd:8e:a7:41:
79:3c:3d:78:3a:11:6c:fd:e9:2c:55:20:d8:ff:2c:
1b:0b:9c:2d:c2:08:69:81:e6:89:34:7b:27:4a:f9:
5c:80:df:91:52:57:41:71:db:78:01:56:d8:e3:4e:
84:81:61:a5:fe:32:98:da:6f:94:e6:07:fb:97:dc:
6b:95:96:a4:a7:a0:57:db:79:49:6e:73:2e:d8:2c:
94:ab:bb:12:c9:9a:6b:3d:27:c1:2e:b9:a4:0a:06:
a0:01:cd:0d:fd:c1:85:23:21:63:5a:e6:57:91:53:
28:34:d8:39:24:39:3a:4e:f4:b4:3c:cf:2c:c6:44:
7d:f1:06:16:f7:c5:45:35:2b:3d:c3:a3:40:6a:cc:
cd:34:ee:61:cf:51:e2:1b:71:3c:a9:31:48:20:f7:
3a:bc:2a:90:28:46:8e:9b:d6:98:20:f7:93:82:70:
d5:33:c5:60:8b:d7:e3:0a:37:b0:eb:d4:5f:fa:fc:
26:c8:49:57:6e:0b:66:b3:c9:b4:79:19:85:38:20:
0e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B5:6B:D0:BF:3B:E5:F5:F0:FB:24:AF:D6:F1:19:3B:6E:21:4D:F1
X509v3 Authority Key Identifier:
keyid:40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/R7Vr0L875fXw-ySv1vEZO24hTfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.28.0/23
107.150.178.0/23
176.223.65.0/24
185.18.204.0/22
185.37.148.0/22
185.217.96.0/22
188.210.255.0/24
IPv6:
2a03:ff40:4ed1::/48
Signature Algorithm: sha256WithRSAEncryption
72:5d:91:46:c7:1e:93:5b:36:be:b6:20:41:95:19:4f:f5:63:
e9:9d:25:db:b3:fe:80:ba:1b:e4:d9:2b:f1:52:33:70:94:6b:
19:32:43:0e:d9:98:d5:bc:d5:dc:42:5d:6b:17:65:96:c8:ea:
fc:dc:7d:ed:a4:77:a4:e2:4f:3d:1a:7c:df:d6:b6:36:2f:46:
ff:67:8d:85:71:3d:30:f5:5c:a8:32:bf:ed:d6:fa:70:8e:ec:
a8:77:b5:c9:f3:0a:5d:f7:47:30:6d:6e:90:af:7f:c4:55:12:
3e:c3:ac:48:43:2b:f1:55:e8:d2:db:42:94:79:ad:05:03:91:
a0:ff:23:c0:93:f9:6e:be:dc:bc:5e:75:6c:5b:af:c5:5c:61:
cb:94:88:75:91:ba:08:5e:13:e2:fa:be:71:e7:52:96:c6:60:
1c:73:41:48:00:6a:be:89:5e:3b:bc:8a:d9:d6:28:89:fc:77:
7a:2a:c7:75:b9:3a:58:3e:42:96:3d:00:ea:e4:98:0f:63:d1:
bb:27:c2:b5:fb:c8:17:57:83:d2:9e:b3:80:e3:aa:a7:d7:05:
e9:0c:40:c1:a0:21:0b:50:17:14:0e:89:15:cc:40:df:08:d7:
cc:cc:63:6b:93:be:87:68:3b:4c:2e:b3:29:87:80:2a:fe:fd:
89:36:fa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:39 2024 by rpki-client on console-fra.rpki-client.org