Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/C_pcs4lq4y2bpJRdbnC0KqJi1ZQ.roa
File: C_pcs4lq4y2bpJRdbnC0KqJi1ZQ.roa (raw, json)
Hash identifier: cE1E4hkH78oY7KpnJ++BLNcAAlaVBfQEKsATY25A9uk=
Subject key identifier: 0B:FA:5C:B3:89:6A:E3:2D:9B:A4:94:5D:6E:70:B4:2A:A2:62:D5:94
Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial: 018CC5DD3D30A7A8A3868124BE40F79C44AC
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/C_pcs4lq4y2bpJRdbnC0KqJi1ZQ.roa
Signing time: Mon 01 Jan 2024 16:30:59 +0000
ROA not before: Mon 01 Jan 2024 16:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13273
IP address blocks: 185.114.208.0/22 maxlen: 24
195.54.62.0/23 maxlen: 24
91.216.209.0/24 maxlen: 24
213.162.32.0/19 maxlen: 24
213.162.32.0/20 maxlen: 24
213.91.0.0/18 maxlen: 24
185.21.152.0/22 maxlen: 24
213.162.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 15:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:3d:30:a7:a8:a3:86:81:24:be:40:f7:9c:44:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Validity
Not Before: Jan 1 16:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bfa5cb3896ae32d9ba4945d6e70b42aa262d594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:29:63:49:cb:66:4a:a8:33:f6:4a:ef:32:
35:62:d2:06:eb:8c:b0:7c:ba:69:d0:16:28:bb:8e:
f2:1b:c3:e3:78:3b:c0:74:1e:5a:e5:3a:f8:e6:37:
39:eb:2d:0b:79:cd:d8:52:85:7e:ca:d7:e7:7e:24:
5b:af:30:2e:06:45:01:c3:29:c6:e2:8d:aa:af:dd:
78:40:5c:94:20:27:bb:01:e5:93:86:6a:5f:a7:99:
a5:8d:d2:2f:ac:fe:32:02:1b:c4:6d:56:cb:ef:06:
ef:de:a8:7c:2f:04:c8:51:ff:91:c1:bd:60:4e:3f:
ff:a9:22:21:8e:81:0e:dc:d9:e3:d4:61:dc:a4:ed:
e1:97:2c:6c:fa:23:85:c4:98:97:23:72:f2:38:97:
fc:a3:9c:29:6b:53:73:77:a7:7f:88:ea:cf:52:99:
cc:18:1a:42:af:15:6b:0a:10:de:e3:65:98:0e:e4:
dc:d6:ef:18:1c:91:dd:11:9e:c0:c9:a9:72:2a:fc:
d1:00:03:91:36:66:e4:34:99:c8:fe:e8:19:ce:c7:
21:06:ad:2d:c0:25:8e:fe:5d:46:64:fd:d5:6f:39:
2d:11:12:bd:c5:6c:f4:ea:75:a6:1a:57:ef:7c:1b:
d0:e2:5b:00:48:71:04:9e:63:f9:50:47:ed:98:f8:
04:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FA:5C:B3:89:6A:E3:2D:9B:A4:94:5D:6E:70:B4:2A:A2:62:D5:94
X509v3 Authority Key Identifier:
keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/C_pcs4lq4y2bpJRdbnC0KqJi1ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.209.0/24
185.21.152.0/22
185.114.208.0/22
195.54.62.0/23
213.91.0.0/18
213.162.32.0/19
Signature Algorithm: sha256WithRSAEncryption
c3:c4:5e:90:db:a4:63:44:5b:73:b6:d7:1c:18:39:bc:b4:d0:
2d:41:3a:17:e6:c4:41:6a:fb:1c:4e:dd:0c:9b:a0:12:5b:ef:
af:66:40:8f:63:be:e0:e6:76:9a:71:e9:17:d8:2b:d5:8b:30:
12:e2:2f:f9:89:1c:6d:6f:c5:33:32:81:06:5e:44:6b:0e:5f:
50:cd:c4:b7:ad:2b:91:df:34:2c:ee:84:86:90:37:37:f7:aa:
aa:20:05:59:39:c4:73:1b:ef:05:36:ce:92:13:ac:2b:26:c3:
2e:72:44:e2:ea:92:18:0b:f9:92:6d:cc:a9:37:cb:09:a5:8f:
11:29:11:27:5f:ff:04:24:90:ec:52:30:9d:f4:c3:e9:49:cb:
00:12:65:67:39:65:41:1f:c8:54:7f:4c:0d:03:ee:de:6c:97:
f2:23:27:ba:3a:d0:2e:86:84:5a:e0:88:84:49:a7:6c:a3:4c:
75:7a:45:5d:e6:cd:53:0f:9d:09:e5:88:b7:18:66:5b:01:6d:
17:4f:64:96:94:32:e4:ca:f0:5d:99:dc:d0:ef:9d:99:47:92:
1e:9f:82:69:d2:43:70:3f:ad:d3:14:06:ce:84:15:b3:31:f6:
51:89:a4:a8:10:08:34:7e:f5:ce:32:c4:a7:8d:6b:8a:ee:7f:
db:34:a4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:57 2024 by rpki-client on console-ams.rpki-client.org