Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/64RdtfjW8kFVaH5Qavqdlu16tlY.roa
File: 64RdtfjW8kFVaH5Qavqdlu16tlY.roa (raw, json)
Hash identifier: qE/08NZea73OOeX0kTL48dmyKLH06JQGh2HPk4c5FSg=
Subject key identifier: EB:84:5D:B5:F8:D6:F2:41:55:68:7E:50:6A:FA:9D:96:ED:7A:B6:56
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0188B9440901A49C7ADF905F5A76D4576AFE
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/64RdtfjW8kFVaH5Qavqdlu16tlY.roa
Signing time: Wed 14 Jun 2023 09:37:03 +0000
ROA not before: Wed 14 Jun 2023 09:37:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 45.146.224.0/22 maxlen: 24
185.131.188.0/22 maxlen: 24
185.248.208.0/22 maxlen: 24
5.182.72.0/22 maxlen: 24
185.151.176.0/22 maxlen: 24
185.230.0.0/22 maxlen: 24
141.98.52.0/22 maxlen: 24
185.114.64.0/22 maxlen: 24
185.123.136.0/22 maxlen: 24
185.126.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Jun 2023 16:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:44:09:01:a4:9c:7a:df:90:5f:5a:76:d4:57:6a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jun 14 09:37:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb845db5f8d6f24155687e506afa9d96ed7ab656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:63:8c:e2:fe:70:10:6e:6a:26:88:ea:28:
62:6c:74:e7:46:56:74:c2:9b:b7:52:1a:83:a0:f3:
c6:e5:51:6e:23:a4:a7:92:a8:f0:a1:6c:ba:e7:bb:
5b:94:9b:78:b8:90:f9:6f:31:a3:9c:46:6e:71:0f:
e8:6e:21:02:91:e5:dd:a0:4f:27:75:cb:bd:78:90:
b3:86:e9:f9:b5:35:da:b7:39:23:d0:4e:27:f9:33:
ed:09:2c:2d:88:c7:57:e5:24:41:f0:df:fa:9e:32:
c6:07:dc:13:7a:7b:73:70:9e:34:74:c9:1c:bb:99:
36:be:e0:6e:ef:c7:a0:4a:9e:40:be:3d:cb:96:5a:
32:0a:04:92:46:f7:9d:a7:0e:2a:af:b0:e8:c6:c7:
b9:5c:71:05:96:dc:37:8e:4f:e7:8c:4e:f3:80:76:
72:b5:14:bc:0e:13:39:76:81:ac:02:4d:9b:95:7d:
6b:a3:6b:6f:79:4a:73:20:31:af:5b:20:53:5a:5e:
9b:e1:2f:2f:2d:1b:05:b1:b3:e1:bb:52:91:a6:89:
8e:d4:27:9b:d5:c6:92:5a:b3:e7:70:5b:83:1a:af:
9d:0d:3e:43:33:0d:17:e1:82:bd:03:91:f4:4a:c5:
2f:df:3d:9d:4b:79:ed:d3:e2:92:25:9a:0f:4e:4d:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:84:5D:B5:F8:D6:F2:41:55:68:7E:50:6A:FA:9D:96:ED:7A:B6:56
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/64RdtfjW8kFVaH5Qavqdlu16tlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.72.0/22
45.146.224.0/22
141.98.52.0/22
185.114.64.0/22
185.123.136.0/22
185.126.232.0/22
185.131.188.0/22
185.151.176.0/22
185.230.0.0/22
185.248.208.0/22
Signature Algorithm: sha256WithRSAEncryption
81:88:b3:fb:f2:e0:7b:41:33:d8:c2:21:5d:b3:cf:3d:55:9b:
c1:85:33:42:61:61:07:32:7b:79:1b:e0:fe:c7:a1:0b:6d:c5:
4c:1b:c4:ad:db:8b:f5:ce:19:83:ba:d9:ae:d4:7f:af:e2:fe:
70:83:99:45:92:53:80:71:29:42:84:0b:15:2c:0c:6d:67:d5:
02:03:43:67:d4:df:a1:b7:0b:6a:26:ce:0d:25:f7:bc:c3:07:
d2:7e:09:ac:54:ce:fe:3e:ce:6c:c6:cd:1d:23:ff:44:a0:c2:
c6:43:b2:8a:0a:b2:f7:c6:23:b3:98:2b:d9:55:fa:17:be:b2:
50:c7:c3:03:39:65:f4:98:c3:73:e2:1b:62:80:11:fe:4e:6a:
b3:73:12:a2:0e:5b:bb:ce:56:b3:9f:b9:22:f8:92:42:3c:db:
e0:77:54:47:85:fb:9d:62:1f:37:8b:cd:3d:2a:2e:15:bd:19:
25:ee:b9:9d:f8:0a:e4:6d:de:42:b1:81:24:9f:d8:33:1f:06:
b7:60:38:9b:50:5d:0f:82:55:c0:54:e9:b5:9c:cd:50:3c:96:
dc:14:a7:24:85:96:61:d8:46:85:41:35:7b:2d:f7:ce:b3:50:
c3:3f:d8:6e:d6:9c:bb:f7:fe:65:d9:45:0c:20:29:c9:c4:e4:
db:24:d8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org