Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/p58dq2lvMEpBz7hLks-VLGodGl4.roa
File: p58dq2lvMEpBz7hLks-VLGodGl4.roa (raw, json)
Hash identifier: OpnglbLsrKQ30ESMqHiHU3WLlel9ZUWf/uhVEEp2B+4=
Subject key identifier: A7:9F:1D:AB:69:6F:30:4A:41:CF:B8:4B:92:CF:95:2C:6A:1D:1A:5E
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 0186B607F880C11377D6D2D364BC52295BBE
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/p58dq2lvMEpBz7hLks-VLGodGl4.roa
Signing time: Mon 06 Mar 2023 08:27:00 +0000
ROA not before: Mon 06 Mar 2023 08:27:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 171.22.248.0/23 maxlen: 23
171.22.251.0/24 maxlen: 24
171.22.250.0/24 maxlen: 24
45.146.206.0/23 maxlen: 23
45.146.204.0/23 maxlen: 23
45.82.223.0/24 maxlen: 24
45.135.18.0/23 maxlen: 24
85.208.32.0/23 maxlen: 23
85.208.34.0/23 maxlen: 23
5.183.94.0/24 maxlen: 24
185.244.8.0/23 maxlen: 23
185.244.10.0/24 maxlen: 24
185.244.11.0/24 maxlen: 24
193.42.226.0/23 maxlen: 23
194.116.250.0/23 maxlen: 23
193.42.224.0/23 maxlen: 23
194.116.248.0/23 maxlen: 23
2.58.12.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Apr 2023 16:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:07:f8:80:c1:13:77:d6:d2:d3:64:bc:52:29:5b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Mar 6 08:27:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a79f1dab696f304a41cfb84b92cf952c6a1d1a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:db:d3:98:89:15:bc:9d:5d:5e:92:22:cb:
dd:02:51:fb:21:6c:79:6f:38:a4:75:38:90:03:16:
7f:57:8a:0f:0f:e7:37:c0:76:d6:86:97:9a:f2:8d:
11:e3:e4:ec:9b:63:b0:c8:f4:06:ea:bb:99:6e:fc:
7e:d8:5c:2a:2a:e8:07:ce:1a:7f:86:31:69:6e:35:
dc:e7:ab:df:89:ab:34:7c:b2:fb:7e:cf:d8:c3:3a:
d8:09:23:cd:b4:45:24:82:cf:46:17:bb:48:b0:df:
83:ae:25:e4:57:72:55:b2:78:d1:1d:a4:30:e1:cf:
39:74:20:df:8e:fe:ba:67:be:ef:cd:82:81:bd:db:
90:b6:b6:31:0f:2d:9f:03:e9:7d:eb:d5:4c:64:ff:
ad:8f:c4:34:d6:ed:82:c1:2c:48:92:b1:ce:94:d5:
c1:9f:2f:89:d3:59:6a:93:3b:09:f2:1c:f5:5b:aa:
3c:28:8a:f3:88:55:b8:26:b2:2f:9a:77:b7:9b:05:
81:82:b6:47:da:74:74:c2:b2:f6:7c:00:a0:fe:e6:
eb:68:38:e8:6e:3d:29:54:53:58:65:08:3b:59:91:
33:18:b5:2a:61:f4:fc:74:4d:b6:2b:82:32:ce:b0:
8a:29:bb:13:1d:c2:05:6e:c7:9d:7b:73:6c:d2:9d:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9F:1D:AB:69:6F:30:4A:41:CF:B8:4B:92:CF:95:2C:6A:1D:1A:5E
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/p58dq2lvMEpBz7hLks-VLGodGl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.12.0/23
5.183.94.0/24
45.82.223.0/24
45.135.18.0/23
45.146.204.0/22
85.208.32.0/22
171.22.248.0/22
185.244.8.0/22
193.42.224.0/22
194.116.248.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:7d:07:65:6d:29:a4:d5:c5:d9:91:2c:cf:15:7a:14:0a:0c:
1f:a3:16:58:d7:b2:40:c8:6a:e6:f3:f8:8b:f8:84:1a:42:a3:
50:cb:38:ad:5b:ed:b4:42:e1:6d:40:5b:87:33:2a:59:89:cd:
27:3a:18:d4:95:38:d9:f3:85:80:63:b1:db:08:83:f6:49:21:
b6:60:7e:5d:e9:14:79:1c:81:ad:28:10:be:9a:6c:8d:c0:56:
5b:50:a8:6c:15:8a:4c:ed:83:cb:e1:c0:b0:4f:c1:70:09:be:
45:7d:ff:60:14:1e:88:5e:c0:51:2d:2d:e9:45:a2:f0:41:e2:
7f:1b:ee:a2:74:08:ed:4f:e3:82:3f:bd:7c:a6:e3:a0:5d:15:
00:ab:2d:dc:1d:15:76:ba:8e:b0:aa:47:61:8a:76:d4:e6:28:
b2:7c:51:a3:47:58:be:47:85:27:80:7e:e9:0c:be:22:9e:de:
6e:38:5e:df:b3:be:30:bf:b0:16:60:b8:a7:f0:12:4d:2f:33:
6d:cf:e1:e9:c9:a1:79:f8:88:ad:3b:c1:b4:77:bb:c1:f6:50:
76:76:ff:05:67:5d:6f:0b:2e:79:ca:65:c9:5b:e3:b9:55:58:
99:fa:f5:8f:1b:be:6b:5c:67:a4:cd:eb:8c:16:b5:87:db:4f:
ef:e1:7f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:36 2024 by rpki-client on console-ams.rpki-client.org