Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/eC_1uUInaZ4ESHUs4rXPqRIu80o.roa
File: eC_1uUInaZ4ESHUs4rXPqRIu80o.roa (raw, json)
Hash identifier: RMynfMFppoQxCeQiY3hoeAnG9+ubdBSz7Pa2j217qwk=
Subject key identifier: 78:2F:F5:B9:42:27:69:9E:04:48:75:2C:E2:B5:CF:A9:12:2E:F3:4A
Certificate issuer: /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial: 018CC26D613F98E7EC633DD9426F4A2D996C
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/eC_1uUInaZ4ESHUs4rXPqRIu80o.roa
Signing time: Mon 01 Jan 2024 00:29:57 +0000
ROA not before: Mon 01 Jan 2024 00:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44407
IP address blocks: 37.140.224.0/21 maxlen: 21
185.204.252.0/22 maxlen: 22
79.132.144.0/20 maxlen: 20
86.105.88.0/21 maxlen: 21
185.243.120.0/22 maxlen: 22
185.16.48.0/22 maxlen: 22
80.240.160.0/20 maxlen: 20
217.26.192.0/20 maxlen: 20
89.43.156.0/22 maxlen: 24
185.176.176.0/22 maxlen: 22
85.112.192.0/19 maxlen: 19
185.223.148.0/22 maxlen: 22
45.87.56.0/22 maxlen: 22
185.183.60.0/22 maxlen: 22
185.183.64.0/22 maxlen: 22
185.181.152.0/22 maxlen: 22
194.36.192.0/22 maxlen: 22
45.148.108.0/22 maxlen: 22
45.156.228.0/22 maxlen: 22
46.247.224.0/19 maxlen: 19
185.183.252.0/22 maxlen: 22
195.123.7.0/24 maxlen: 24
185.198.224.0/22 maxlen: 22
86.107.248.0/21 maxlen: 21
185.209.140.0/22 maxlen: 22
185.184.4.0/22 maxlen: 22
89.35.208.0/21 maxlen: 21
45.81.80.0/22 maxlen: 22
195.177.108.0/22 maxlen: 22
2a0a:1c80::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 08 Jan 2024 10:51:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:61:3f:98:e7:ec:63:3d:d9:42:6f:4a:2d:99:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Validity
Not Before: Jan 1 00:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=782ff5b94227699e0448752ce2b5cfa9122ef34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:81:cb:da:7b:af:2b:6d:a9:86:7a:d6:30:13:
d3:cf:81:96:56:c3:0f:51:17:52:73:69:3f:cd:67:
f6:c3:81:2c:8f:2a:5a:eb:ea:f7:9d:57:ff:05:9d:
2f:a7:ab:d3:d2:8e:45:5a:8a:dd:aa:aa:ab:86:cc:
34:4a:5c:75:d7:47:4e:e3:b7:be:11:d2:d9:83:6a:
c6:59:e0:e2:60:7a:5a:94:b9:64:a6:ce:16:49:dc:
b3:f9:e2:1f:ec:d9:27:ca:c3:b7:c8:4e:5a:e4:66:
d2:6d:30:90:11:74:c0:29:4d:5e:e3:a0:34:45:e8:
c1:a9:34:7b:aa:65:11:65:d7:98:8e:88:6d:5e:7b:
49:80:e8:84:1e:9d:eb:64:ca:12:b8:88:68:ba:a4:
3a:db:b6:0f:aa:f8:71:d2:88:3f:ae:c6:cd:d1:b6:
75:ae:c4:4d:b1:33:8e:0c:b3:c8:e2:b4:62:bf:a0:
51:b9:08:28:39:2f:57:07:cf:ca:f5:0c:32:0a:4a:
9c:e6:39:94:aa:c7:f1:6e:b7:9e:8d:ef:ad:53:f3:
17:d9:50:f1:9b:45:32:3a:dc:e8:39:e2:60:1a:02:
05:9f:01:78:ed:ad:3f:7a:cc:75:fb:41:73:12:79:
d1:9f:6f:5f:63:32:72:bd:a0:de:56:85:44:c6:63:
c0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2F:F5:B9:42:27:69:9E:04:48:75:2C:E2:B5:CF:A9:12:2E:F3:4A
X509v3 Authority Key Identifier:
keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/eC_1uUInaZ4ESHUs4rXPqRIu80o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.224.0/21
45.81.80.0/22
45.87.56.0/22
45.148.108.0/22
45.156.228.0/22
46.247.224.0/19
79.132.144.0/20
80.240.160.0/20
85.112.192.0/19
86.105.88.0/21
86.107.248.0/21
89.35.208.0/21
89.43.156.0/22
185.16.48.0/22
185.176.176.0/22
185.181.152.0/22
185.183.60.0-185.183.67.255
185.183.252.0/22
185.184.4.0/22
185.198.224.0/22
185.204.252.0/22
185.209.140.0/22
185.223.148.0/22
185.243.120.0/22
194.36.192.0/22
195.123.7.0/24
195.177.108.0/22
217.26.192.0/20
IPv6:
2a0a:1c80::/29
Signature Algorithm: sha256WithRSAEncryption
63:f6:bf:3b:41:29:94:20:41:83:51:26:d0:8e:5d:91:0d:b4:
52:7f:ce:14:fd:27:a9:2d:cb:6c:0a:a4:3b:65:34:25:ff:98:
46:69:04:7d:af:34:d5:b1:cf:05:41:a8:d6:9c:93:cf:83:68:
47:93:c5:37:20:2d:e6:7b:f5:b8:68:68:77:43:f9:71:32:c6:
c7:ba:ae:c4:f1:c8:99:f1:e6:9f:68:4f:a6:b9:b1:43:1a:26:
76:2c:04:3b:05:e3:d7:8a:2d:a5:e1:b0:5c:57:36:7a:53:63:
47:40:1a:98:e5:99:48:d1:e8:2f:1a:c2:0d:47:a0:16:6e:46:
52:a6:32:1d:d6:e7:67:b1:cf:d2:79:9e:a1:a1:0b:2a:51:4f:
96:8b:30:d3:51:a8:7b:96:c9:18:f9:6d:ce:8f:8a:95:e8:ac:
07:da:ff:14:73:31:9f:28:c7:66:51:16:8a:7b:e5:15:93:ed:
5b:a1:f8:95:25:61:9f:b0:2a:9a:fe:7e:14:65:10:54:5b:7c:
88:01:32:b7:3d:99:14:8a:d7:85:95:f4:7a:82:93:d3:6e:fe:
cc:b3:13:aa:2b:0e:22:94:1a:a0:90:9c:a3:69:d7:66:02:35:
e3:7c:1b:d5:38:c5:68:48:a3:14:04:30:82:40:91:8c:c1:7a:
10:26:da:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:46 2024 by rpki-client on console-fra.rpki-client.org