Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Sg_VM3Pu3ucMe5gzy-BkG6wl9PA.roa
File: Sg_VM3Pu3ucMe5gzy-BkG6wl9PA.roa (raw, json)
Hash identifier: ae2gv/ztd8FWO/yyPuNo/fxqKZ9oijLWEtk/A8U9CmA=
Subject key identifier: 4A:0F:D5:33:73:EE:DE:E7:0C:7B:98:33:CB:E0:64:1B:AC:25:F4:F0
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018AA6B58BB6FFCEBA6770328F4DE68189D5
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Sg_VM3Pu3ucMe5gzy-BkG6wl9PA.roa
Signing time: Mon 18 Sep 2023 05:13:50 +0000
ROA not before: Mon 18 Sep 2023 05:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 193.39.216.0/22 maxlen: 24
185.44.28.0/22 maxlen: 24
45.146.224.0/22 maxlen: 24
185.131.188.0/22 maxlen: 24
185.248.208.0/22 maxlen: 24
5.182.72.0/22 maxlen: 24
185.151.176.0/22 maxlen: 24
185.230.0.0/22 maxlen: 24
141.98.36.0/22 maxlen: 24
185.198.108.0/22 maxlen: 24
141.98.52.0/22 maxlen: 24
185.114.64.0/22 maxlen: 24
45.136.32.0/22 maxlen: 24
185.123.136.0/22 maxlen: 24
185.126.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Oct 2023 11:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a6:b5:8b:b6:ff:ce:ba:67:70:32:8f:4d:e6:81:89:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Sep 18 05:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a0fd53373eedee70c7b9833cbe0641bac25f4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:b0:2d:75:52:cf:28:e0:42:30:03:f0:fc:
41:42:8f:6c:48:1b:56:13:93:d3:2a:f9:fd:6f:94:
61:b7:b7:c3:5c:25:b1:3f:1a:a9:97:c7:cc:1d:ed:
cf:00:5b:34:02:b5:bf:30:c6:a0:9e:a3:4e:cd:2b:
24:bc:60:8a:25:c4:ed:30:06:fd:5a:e2:55:98:87:
7a:e4:96:88:15:8b:53:f6:77:45:c6:35:43:58:7f:
ac:09:4e:48:d2:27:b6:c5:9f:67:f4:a3:85:95:23:
91:4d:d5:f9:9b:5a:4b:8a:f7:06:2c:3a:90:69:68:
8a:f7:86:74:ba:aa:c9:d5:e9:30:17:de:4a:13:ef:
a2:0f:4a:28:12:b5:4f:fc:bb:09:a2:ca:e1:ab:4c:
ae:55:06:fa:ae:e3:f6:de:f1:cb:46:a2:16:6f:a3:
b8:93:8e:60:f0:10:e6:9e:37:8f:cc:ac:af:16:17:
e7:6f:da:65:b0:17:b2:f9:a6:07:44:35:08:49:0d:
c2:05:72:cf:bd:10:87:fa:f4:f0:f4:55:c4:e2:11:
5b:a2:37:cf:ef:4d:43:54:07:29:12:27:13:fa:91:
e0:ea:01:4e:6f:d7:65:35:15:db:fe:3e:0d:e8:84:
6f:13:ae:34:c0:4c:20:58:10:01:54:99:1c:2f:36:
15:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0F:D5:33:73:EE:DE:E7:0C:7B:98:33:CB:E0:64:1B:AC:25:F4:F0
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Sg_VM3Pu3ucMe5gzy-BkG6wl9PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.72.0/22
45.136.32.0/22
45.146.224.0/22
141.98.36.0/22
141.98.52.0/22
185.44.28.0/22
185.114.64.0/22
185.123.136.0/22
185.126.232.0/22
185.131.188.0/22
185.151.176.0/22
185.198.108.0/22
185.230.0.0/22
185.248.208.0/22
193.39.216.0/22
Signature Algorithm: sha256WithRSAEncryption
79:22:e5:25:0b:0c:79:d3:c7:6e:7e:b7:80:35:51:cb:fd:f4:
50:d7:a7:12:9a:57:3d:d2:99:44:0d:66:6b:d0:2b:64:66:da:
47:c6:e3:52:12:71:3b:33:de:aa:91:56:b3:86:7a:8a:d2:87:
d4:d0:c2:97:04:8b:9a:62:d2:fa:a9:d1:80:48:ed:27:36:d3:
43:25:48:3b:a5:8c:81:6b:51:59:3d:3a:42:26:eb:90:f5:86:
2f:f4:bb:3a:a8:12:2f:02:cd:e3:12:7a:a3:2b:84:8c:23:d7:
a8:c8:d3:4f:d4:e3:f9:2b:67:50:b4:40:21:06:a3:78:24:fc:
d9:ed:06:58:5e:6b:9c:13:14:de:db:5b:37:6e:c4:a8:11:f9:
3c:8b:95:13:a6:21:6e:cd:52:40:88:57:67:2f:0d:39:7f:8f:
d3:05:d3:4b:c5:29:78:85:a9:35:a1:35:18:bf:80:bd:ec:91:
41:73:5d:d5:02:3c:ce:5b:86:9f:a8:67:7a:0b:23:6e:8c:01:
6a:6a:e1:6b:6a:70:ab:ea:da:9a:2d:54:d6:5e:41:0f:4e:4f:
cd:1a:18:3d:77:18:15:67:dd:68:8f:fe:ce:d0:d2:97:be:dc:
22:db:fe:be:2a:32:ab:34:3f:82:6c:06:bf:16:eb:cd:cd:55:
b5:89:21:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org