Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/4M0eHOxipF8hLnnRL7vugZgdaPA.roa
File: 4M0eHOxipF8hLnnRL7vugZgdaPA.roa (raw, json)
Hash identifier: DUDu5rx9+nXQ9fIPSfQ9Cs6rKVO0S7CEprUiqz1a10Q=
Subject key identifier: E0:CD:1E:1C:EC:62:A4:5F:21:2E:79:D1:2F:BB:EE:81:98:1D:68:F0
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0185710C28F6BD82D5A6862E21B3FFC43D8F
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/4M0eHOxipF8hLnnRL7vugZgdaPA.roa
Signing time: Mon 02 Jan 2023 05:55:00 +0000
ROA not before: Mon 02 Jan 2023 05:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 162.218.90.0/24 maxlen: 24
162.218.95.0/24 maxlen: 24
212.60.15.0/24 maxlen: 24
185.205.205.0/24 maxlen: 24
185.253.122.0/24 maxlen: 24
5.182.192.0/24 maxlen: 24
31.132.52.0/24 maxlen: 24
185.187.212.0/24 maxlen: 24
45.67.140.0/24 maxlen: 24
63.246.150.0/24 maxlen: 24
92.249.31.0/24 maxlen: 24
192.145.71.0/24 maxlen: 24
147.78.206.0/24 maxlen: 24
147.78.205.0/24 maxlen: 24
185.230.122.0/24 maxlen: 24
94.154.177.0/24 maxlen: 24
217.197.169.0/24 maxlen: 24
94.154.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Sep 2023 18:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:28:f6:bd:82:d5:a6:86:2e:21:b3:ff:c4:3d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 05:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0cd1e1cec62a45f212e79d12fbbee81981d68f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:53:a8:05:c8:58:66:e4:ff:2f:6c:7d:6a:44:
94:a5:c4:a3:e0:c9:8f:2d:24:95:ed:19:83:a2:14:
39:e2:8a:39:8d:d8:95:20:bc:d7:79:3d:9e:1a:ab:
bf:61:e7:66:7d:29:2b:36:6b:21:3f:fd:8a:ad:76:
88:96:36:4f:de:58:4a:ae:c7:e0:d5:e3:52:05:5f:
43:44:40:ad:57:a7:21:49:9e:8c:1b:ae:36:09:0d:
11:38:15:65:4e:e8:97:6b:0d:e4:75:17:73:88:8c:
fa:96:e8:4f:da:8f:1c:74:29:96:d2:08:1c:cd:eb:
05:d3:65:cf:1e:aa:dc:d4:cc:ca:cd:31:4d:d2:46:
fd:80:80:a6:c9:0b:07:0f:28:13:35:4d:94:01:ec:
71:7b:f9:9d:f5:70:35:f8:a5:7b:56:97:eb:cb:35:
46:a5:5e:88:0e:0d:af:a4:ef:fc:7a:68:42:4a:b7:
52:b5:d2:d5:a5:dc:d0:59:b6:27:1e:b9:b8:4a:4f:
3d:bc:1e:60:e7:03:c4:04:0b:14:74:78:35:05:14:
57:38:7d:f4:5c:ad:f1:3f:78:37:7b:db:75:c5:a8:
61:9a:4b:9d:a1:c4:fb:48:01:b4:7e:52:a2:ff:de:
42:d7:f5:0a:27:47:ad:a4:13:5a:c5:17:04:fe:67:
cf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CD:1E:1C:EC:62:A4:5F:21:2E:79:D1:2F:BB:EE:81:98:1D:68:F0
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/4M0eHOxipF8hLnnRL7vugZgdaPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.192.0/24
31.132.52.0/24
45.67.140.0/24
63.246.150.0/24
92.249.31.0/24
94.154.177.0/24
94.154.182.0/24
147.78.205.0-147.78.206.255
162.218.90.0/24
162.218.95.0/24
185.187.212.0/24
185.205.205.0/24
185.230.122.0/24
185.253.122.0/24
192.145.71.0/24
212.60.15.0/24
217.197.169.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b7:30:b2:ba:69:53:82:fd:38:60:99:49:29:52:a4:32:30:
f4:7d:00:0f:92:89:e8:18:97:1f:ac:98:b7:12:76:0d:64:18:
de:07:ec:c5:b3:a6:e0:9e:ca:aa:43:3f:75:7b:8c:69:8e:00:
50:8e:1d:b9:eb:24:32:6a:d3:25:c2:52:47:be:b7:ca:59:93:
17:36:2f:ee:07:4a:6d:12:96:b2:4f:fa:69:fe:4c:7d:75:52:
41:e4:a1:7f:bd:d0:84:e8:3f:85:b0:6e:d0:cd:52:58:cf:91:
d5:f8:25:f6:31:af:a8:cb:d3:76:cb:73:5f:65:f0:45:02:f7:
89:75:d7:b6:ca:53:3e:62:c2:d7:09:b3:bf:73:c5:bf:d3:6a:
20:29:02:8f:17:0f:6c:6a:3b:59:2c:81:0e:59:fa:60:87:07:
d5:ff:8a:9c:d0:39:26:bd:2a:67:83:38:d0:aa:ed:bb:33:d1:
9a:ed:6c:7f:e8:89:31:03:5d:a6:ba:6b:18:68:5b:fa:bf:35:
ca:24:85:62:79:70:34:1f:95:8d:a8:c8:95:c2:00:a8:b7:f9:
45:6f:6f:ba:43:d8:46:1c:bd:d2:5d:b4:8b:c9:1d:55:38:62:
80:9d:c2:8e:bb:45:fb:63:6f:a3:f5:cd:14:d5:79:da:d0:69:
63:d6:3f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:54 2024 by rpki-client on console-fra.rpki-client.org