Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/oTbw5q_wQqgaQXF03eBk1w7uXwU.roa
File: oTbw5q_wQqgaQXF03eBk1w7uXwU.roa (raw, json)
Hash identifier: QTbMqKWfU99NSn3Q1lVHawgCszsXMlDq0nnjK17hlGg=
Subject key identifier: A1:36:F0:E6:AF:F0:42:A8:1A:41:71:74:DD:E0:64:D7:0E:EE:5F:05
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01857716326E12FDC39B2B420108FB370676
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/oTbw5q_wQqgaQXF03eBk1w7uXwU.roa
Signing time: Tue 03 Jan 2023 10:03:41 +0000
ROA not before: Tue 03 Jan 2023 10:03:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48146
IP address blocks: 92.118.248.0/22 maxlen: 24
185.148.52.0/22 maxlen: 24
151.237.131.0/24 maxlen: 24
185.240.22.0/24 maxlen: 24
185.240.20.0/23 maxlen: 24
185.240.23.0/24 maxlen: 24
185.255.72.0/22 maxlen: 24
81.22.232.0/22 maxlen: 24
194.36.104.0/22 maxlen: 24
185.209.8.0/22 maxlen: 24
194.147.144.0/22 maxlen: 24
45.89.40.0/22 maxlen: 24
5.182.80.0/22 maxlen: 24
45.147.204.0/22 maxlen: 24
45.14.208.0/22 maxlen: 24
193.228.194.0/23 maxlen: 24
185.210.60.0/22 maxlen: 24
151.237.58.0/24 maxlen: 24
193.228.204.0/23 maxlen: 24
185.210.72.0/22 maxlen: 24
151.237.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jan 2023 15:09:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:16:32:6e:12:fd:c3:9b:2b:42:01:08:fb:37:06:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 3 10:03:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a136f0e6aff042a81a417174dde064d70eee5f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b3:55:ce:d4:d3:5c:44:8f:5a:df:d2:1e:cf:
9e:72:ed:aa:32:f7:15:48:0f:78:fb:19:74:2c:7d:
b3:0c:a2:8c:8e:e3:26:c8:dd:30:ad:87:f1:4d:13:
98:71:e0:7e:7d:2f:bf:a6:c6:68:c3:d4:31:97:51:
95:3e:b5:7a:e6:b7:dd:b8:c4:b2:a1:c7:b0:e9:3b:
4c:af:db:5e:f1:b3:6b:46:20:b7:06:70:7e:f6:94:
01:a8:cc:50:d3:29:ff:00:b2:b6:92:90:15:f6:3c:
1d:75:60:66:0b:cf:6b:30:14:09:55:55:da:97:1c:
c4:bd:50:ca:7c:18:ac:dc:db:7c:9a:37:6b:df:71:
4b:f0:26:ad:74:01:5c:9c:77:e8:cb:ae:80:3e:24:
d9:11:d4:b2:ba:6a:37:a3:50:72:0b:82:fd:f4:36:
45:9d:ff:8f:8b:8b:d2:4f:f3:c4:14:57:05:69:de:
5d:14:53:3a:3c:3c:21:0d:f3:4a:3b:f4:38:01:e4:
54:c6:5a:81:d6:9b:1e:76:42:a5:69:79:c0:58:e6:
33:b6:25:2a:62:a3:57:f7:f8:d5:47:a5:08:6a:d7:
48:45:42:76:0a:ad:3f:aa:73:50:03:cc:96:09:ff:
13:18:d5:3b:58:35:c8:ed:dd:e5:9c:fc:59:48:59:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:36:F0:E6:AF:F0:42:A8:1A:41:71:74:DD:E0:64:D7:0E:EE:5F:05
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/oTbw5q_wQqgaQXF03eBk1w7uXwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.80.0/22
45.14.208.0/22
45.89.40.0/22
45.147.204.0/22
81.22.232.0/22
92.118.248.0/22
151.237.58.0/23
151.237.131.0/24
185.148.52.0/22
185.209.8.0/22
185.210.60.0/22
185.210.72.0/22
185.240.20.0/22
185.255.72.0/22
193.228.194.0/23
193.228.204.0/23
194.36.104.0/22
194.147.144.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:49:43:72:e8:fa:f5:ba:2a:f0:86:af:62:d6:5a:45:18:65:
b3:20:dd:d1:6f:f0:a7:db:8e:95:f0:68:b8:f0:0e:0e:71:bc:
f7:35:a0:b1:a8:79:40:55:21:76:83:df:63:ac:b0:49:f3:5b:
c1:cb:24:0d:ac:35:24:38:45:f8:37:41:a0:63:54:a3:97:fd:
ef:ad:f3:86:a3:ab:08:23:90:0a:6e:0a:b6:73:b5:39:61:23:
c9:b4:d9:34:41:f2:0b:8d:be:b7:81:17:2a:87:1d:19:f9:05:
20:0d:75:0d:f9:df:99:00:8f:57:96:c2:13:70:84:e0:67:53:
37:d4:69:7a:99:f9:3c:f1:f7:30:31:fb:2c:a6:93:59:a4:c1:
01:7e:68:22:3a:c1:f7:e2:82:a6:29:4f:52:94:7f:4c:db:27:
b1:44:a4:be:88:ec:e2:04:bc:ff:32:d0:52:67:c4:75:0b:8c:
44:df:c5:a9:7f:3a:17:45:c2:08:47:33:f0:ff:dc:38:4e:f7:
9b:a1:13:71:b1:e7:68:e2:78:2d:d7:ef:8c:5e:a6:e8:41:46:
62:46:b6:5b:6f:92:bf:50:21:16:f3:0a:e1:c4:08:80:ca:74:
11:5e:1a:03:53:30:8c:03:a3:d2:6a:29:a9:43:d6:6a:6d:c3:
a7:0b:36:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:51 2024 by rpki-client on console-ams.rpki-client.org