Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/eXb8BM5PGzc0uUcCVVCM6pHu6fw.roa
File: eXb8BM5PGzc0uUcCVVCM6pHu6fw.roa (raw, json)
Hash identifier: HdxSHBjFsh8QDnnYkmDfcq8HScEiBVu7G0m+V5zAl2I=
Subject key identifier: 79:76:FC:04:CE:4F:1B:37:34:B9:47:02:55:50:8C:EA:91:EE:E9:FC
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 01856F42AF25279118D92A7392F009B6C654
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/eXb8BM5PGzc0uUcCVVCM6pHu6fw.roa
Signing time: Sun 01 Jan 2023 21:35:19 +0000
ROA not before: Sun 01 Jan 2023 21:35:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197216
IP address blocks: 185.55.230.0/24 maxlen: 24
185.55.229.0/24 maxlen: 24
185.55.228.0/24 maxlen: 24
185.239.124.0/24 maxlen: 24
185.55.231.0/24 maxlen: 24
185.239.126.0/24 maxlen: 24
185.199.36.0/22 maxlen: 22
195.189.80.0/22 maxlen: 22
79.98.105.0/24 maxlen: 24
185.228.24.0/22 maxlen: 22
79.98.104.0/24 maxlen: 24
79.98.108.0/24 maxlen: 24
79.98.107.0/24 maxlen: 24
79.98.106.0/24 maxlen: 24
79.98.111.0/24 maxlen: 24
79.98.110.0/24 maxlen: 24
79.98.109.0/24 maxlen: 24
185.52.205.0/24 maxlen: 24
185.52.204.0/24 maxlen: 24
185.52.204.0/22 maxlen: 22
2a02:80e0::/30 maxlen: 30
2a01:b6a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Mar 2023 09:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:af:25:27:91:18:d9:2a:73:92:f0:09:b6:c6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Jan 1 21:35:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7976fc04ce4f1b3734b9470255508cea91eee9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:35:a8:b3:e3:38:e8:8c:c7:b5:e8:55:78:b9:
d6:7a:af:1a:f0:d3:cc:ad:74:63:d5:b6:5c:92:38:
3a:4b:a1:5b:e3:ec:6b:e8:74:98:bb:b6:23:c3:cf:
1e:07:05:81:a6:47:4b:44:f7:5c:3f:19:8e:0c:ae:
ca:ec:83:b4:31:60:6a:27:2c:b2:88:dc:a7:25:c8:
18:d7:b2:17:94:ee:8c:a4:f6:00:7c:6c:ce:67:40:
6d:1b:07:b6:4e:61:37:79:1e:05:b2:b4:42:f2:41:
ea:ab:27:c9:a1:46:c5:e7:b6:b7:56:fe:e9:22:57:
dc:0f:7f:48:40:f1:ec:f7:25:35:60:f0:61:d7:08:
22:27:fe:74:2b:57:42:68:ab:c8:83:9d:e2:90:18:
7d:24:14:26:6e:e3:6d:84:d4:df:df:a0:8e:38:d6:
32:bb:1d:70:09:f0:02:21:e0:77:43:3e:3a:ab:b0:
b7:ec:68:bd:dd:72:09:03:d1:99:f0:f8:c6:d7:83:
fa:97:54:8a:4d:c6:e0:24:d9:2b:c5:7f:cd:3b:64:
e8:4b:3c:b7:ef:d5:41:30:5d:14:19:51:81:c0:e2:
f2:d1:ca:16:04:98:4d:cf:05:63:e9:d1:75:5a:ea:
4b:08:be:0f:6e:c4:08:f2:d9:64:7f:24:47:3a:71:
dc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:76:FC:04:CE:4F:1B:37:34:B9:47:02:55:50:8C:EA:91:EE:E9:FC
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/eXb8BM5PGzc0uUcCVVCM6pHu6fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.104.0/21
185.52.204.0/22
185.55.228.0/22
185.199.36.0/22
185.228.24.0/22
185.239.124.0/24
185.239.126.0/24
195.189.80.0/22
IPv6:
2a01:b6a0::/32
2a02:80e0::/30
Signature Algorithm: sha256WithRSAEncryption
79:28:2d:4a:e3:62:5f:40:b2:55:bd:33:f4:be:6e:35:bc:79:
48:aa:10:48:b8:66:cd:d4:45:57:e0:84:cb:a5:4e:6e:6a:3a:
3f:a0:2a:6b:06:fd:56:7a:5c:e1:98:df:91:f0:95:0d:4a:2c:
5f:64:50:17:cf:b9:b3:a3:14:07:8a:05:7c:0b:43:cd:c0:8f:
ee:e5:3e:bd:cc:5a:73:9f:dd:e3:f0:08:01:9b:bc:16:9b:4b:
0d:ed:2c:e9:f6:c7:6a:5a:c1:19:21:f4:e4:ee:63:74:87:66:
b3:f9:32:03:0a:87:6a:a9:83:a1:de:0f:dc:0b:21:16:5c:69:
49:67:dd:4f:6b:b1:47:21:17:0c:72:85:67:fa:88:da:21:b1:
b1:8f:af:b8:28:6e:60:d2:eb:52:ec:42:d7:54:81:1e:c2:05:
ff:4e:aa:42:86:b4:e8:41:92:69:10:7f:43:50:cd:f6:2c:77:
47:52:b9:ef:36:bc:91:19:bd:77:2b:21:90:78:e5:cf:b4:41:
4e:dc:13:3a:b9:b6:e8:3b:72:84:ea:6b:d5:31:8d:4a:2c:93:
21:9d:3f:7c:5c:98:a4:32:0e:72:36:29:12:f1:fe:f4:a4:4e:
5e:dc:54:be:7a:6e:f6:73:f8:94:86:dd:99:b1:3c:12:0c:06:
75:82:c3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:35 2024 by rpki-client on console-fra.rpki-client.org