Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/3qDDOkacmuF4VM500AqtWRglM2w.roa
File: 3qDDOkacmuF4VM500AqtWRglM2w.roa (raw, json)
Hash identifier: TmxDbTkwjTHPT2a6J4gyAdVZ1Z5k5z/sMo9moz76Ymc=
Subject key identifier: DE:A0:C3:3A:46:9C:9A:E1:78:54:CE:74:D0:0A:AD:59:18:25:33:6C
Certificate issuer: /CN=535825ce8bf544170282f720a2484141568b0e7d
Certificate serial: 01886B999FE98A6373B5E0C06953C3E99045
Authority key identifier: 53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/3qDDOkacmuF4VM500AqtWRglM2w.roa
Signing time: Tue 30 May 2023 07:40:10 +0000
ROA not before: Tue 30 May 2023 07:40:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43545
IP address blocks: 185.113.217.0/24 maxlen: 24
185.113.218.0/24 maxlen: 24
185.113.216.0/24 maxlen: 24
185.113.219.0/24 maxlen: 24
77.74.104.0/21 maxlen: 21
77.74.110.0/24 maxlen: 24
212.84.64.0/21 maxlen: 24
212.84.68.0/24 maxlen: 24
212.84.72.0/21 maxlen: 24
80.84.80.0/21 maxlen: 21
212.84.80.0/21 maxlen: 24
80.84.88.0/21 maxlen: 21
80.84.89.0/24 maxlen: 24
80.84.87.0/24 maxlen: 24
212.84.88.0/21 maxlen: 24
78.40.144.0/21 maxlen: 21
78.40.144.0/24 maxlen: 24
80.84.90.0/24 maxlen: 24
80.84.91.0/24 maxlen: 24
80.84.86.0/24 maxlen: 24
78.40.150.0/24 maxlen: 24
212.84.95.0/24 maxlen: 24
78.40.146.0/24 maxlen: 24
2a02:24d0::/32 maxlen: 32
2a02:24d0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:99:9f:e9:8a:63:73:b5:e0:c0:69:53:c3:e9:90:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535825ce8bf544170282f720a2484141568b0e7d
Validity
Not Before: May 30 07:40:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dea0c33a469c9ae17854ce74d00aad591825336c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d7:92:56:09:e6:41:cf:cf:dc:1c:79:c8:b5:
c5:2e:d7:ef:e7:c8:e9:27:08:81:b0:68:ae:ff:87:
83:82:26:fa:eb:45:69:8a:d0:80:3c:66:48:18:61:
cc:cb:73:9e:f4:e2:87:0f:1a:40:92:18:c2:b9:a8:
80:22:f2:a9:17:8c:40:2f:48:f4:2a:c5:b7:02:0c:
80:4d:96:a1:06:44:bc:ee:c6:20:27:a3:8b:b2:91:
cf:9b:5f:33:eb:66:e2:00:b0:46:ca:7a:f8:d7:79:
a9:54:e6:62:cb:f0:f0:17:ba:8f:d3:03:c2:ac:91:
5e:78:c5:9e:fe:0c:df:0f:24:aa:a0:4b:62:d5:18:
8a:79:f7:81:d5:1f:cc:54:ff:28:75:fb:fb:53:3c:
28:b9:3d:2a:7a:96:45:b8:13:cb:c3:ff:b3:cc:9f:
81:70:7f:77:00:d1:5b:da:0d:e0:60:f6:be:13:90:
9d:55:4b:e1:99:62:0d:15:77:7b:95:7f:2b:90:99:
ff:24:d3:36:0a:bf:34:d5:c1:0b:37:4e:d2:99:0d:
df:ee:75:62:ef:d3:ba:6b:b6:4b:c5:fc:03:a2:3b:
20:7e:70:e0:cd:20:08:a5:5c:f7:79:f1:bb:0c:67:
63:76:e7:18:f4:71:65:51:93:59:91:1d:c2:92:da:
22:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A0:C3:3A:46:9C:9A:E1:78:54:CE:74:D0:0A:AD:59:18:25:33:6C
X509v3 Authority Key Identifier:
keyid:53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/3qDDOkacmuF4VM500AqtWRglM2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.104.0/21
78.40.144.0/21
80.84.80.0/20
185.113.216.0/22
212.84.64.0/19
IPv6:
2a02:24d0::/32
Signature Algorithm: sha256WithRSAEncryption
06:38:b2:2b:39:62:17:da:80:b8:dc:dd:9e:fc:e7:15:9f:6a:
8f:8d:53:a4:d6:e2:5c:6a:ff:2c:82:cc:70:58:1e:ed:f7:bd:
34:12:bd:c0:d5:1c:be:06:fa:20:6a:d0:c9:e9:d0:72:24:eb:
ab:5a:37:bf:b2:98:d7:0b:80:06:df:a8:ac:93:c8:a0:4d:55:
06:8d:c4:82:84:e0:00:db:86:4c:8f:79:9e:05:65:cd:ff:aa:
99:5d:de:f8:71:89:5c:a6:43:a7:13:15:91:99:1f:e3:5b:f1:
87:e7:df:ca:43:1c:0d:21:eb:56:4d:34:86:f2:e8:4d:31:86:
da:f3:d1:fd:d9:87:d3:ee:eb:61:8f:32:0a:a2:c4:2d:21:a6:
49:68:ba:9c:64:8f:d4:d4:53:0b:cb:fa:e7:de:d2:5f:52:56:
43:e1:25:b2:96:33:57:24:2a:aa:b4:b0:63:f6:19:d3:4f:14:
0d:03:35:e7:9a:9f:47:2a:54:94:9f:e3:3c:4b:70:22:45:d5:
f4:88:b6:7c:e5:20:b8:7e:12:5d:91:2b:e3:d7:29:be:e5:79:
36:df:cd:e7:6d:4e:7b:5b:81:e2:51:4f:3d:ee:31:57:ff:4f:
e2:bc:96:3b:39:62:7a:8e:34:c4:45:4d:c4:af:cb:a2:04:c7:
95:ab:22:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:01 2024 by rpki-client on console-ams.rpki-client.org