Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/94VVCzy48GlPTG8TtAsITxkPR54.roa
File: 94VVCzy48GlPTG8TtAsITxkPR54.roa (raw, json)
Hash identifier: e34DTzmQXkoJShXhHPGKgipuoi24ftx73/ieIaldH3E=
Subject key identifier: F7:85:55:0B:3C:B8:F0:69:4F:4C:6F:13:B4:0B:08:4F:19:0F:47:9E
Certificate issuer: /CN=5b3358110dadf224e719914161731df5e56c4188
Certificate serial: 01857054C78FAB445907F486F8AF5B45500F
Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/94VVCzy48GlPTG8TtAsITxkPR54.roa
Signing time: Mon 02 Jan 2023 02:34:42 +0000
ROA not before: Mon 02 Jan 2023 02:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28979
IP address blocks: 194.127.216.0/21 maxlen: 21
194.127.217.0/24 maxlen: 24
194.127.215.0/24 maxlen: 24
194.127.218.0/24 maxlen: 24
194.127.219.0/24 maxlen: 24
185.204.240.0/23 maxlen: 23
185.204.242.0/23 maxlen: 23
2a04:b647:fffe::/48 maxlen: 48
2a04:b647::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:54:c7:8f:ab:44:59:07:f4:86:f8:af:5b:45:50:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3358110dadf224e719914161731df5e56c4188
Validity
Not Before: Jan 2 02:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f785550b3cb8f0694f4c6f13b40b084f190f479e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:72:1d:06:db:95:6e:f9:40:e2:dd:9d:7f:60:
aa:16:32:d6:3a:ca:7f:88:fe:ad:fb:32:35:26:eb:
07:a0:36:99:5e:35:54:78:2a:b3:28:99:c7:8e:12:
21:ef:5c:89:ff:3e:76:88:b3:b4:e7:5f:c3:e0:36:
20:e5:cb:7e:90:68:7f:9c:3c:44:40:34:40:79:f1:
5f:13:01:49:8e:45:68:18:05:38:f9:e2:2c:85:c3:
9a:1d:50:5e:dc:29:c5:01:a1:1e:b8:66:bc:fd:f2:
09:5c:5e:fd:40:7e:08:89:86:4d:91:df:d2:e6:5c:
a7:fc:ee:94:6a:5d:27:cd:7a:ec:07:1d:0e:2b:9d:
bf:0b:87:d3:8e:77:4d:49:a4:64:8c:ea:aa:c0:74:
ac:56:dc:ea:90:1e:bc:c8:d5:74:83:32:7c:4e:27:
60:a5:fc:97:53:ba:55:00:95:5d:10:8c:66:b5:c5:
37:bd:b6:93:a3:1c:7b:95:83:76:1b:ea:dc:cb:f7:
4b:de:7f:56:e7:47:0b:b3:2a:0e:79:3f:62:96:ce:
6d:36:dc:a3:3b:23:f2:31:18:22:0a:8e:f2:9e:1c:
8c:ad:20:dd:73:cc:5b:4b:91:3d:db:99:82:e8:b8:
85:f8:5c:d9:44:6d:66:3b:b0:3a:5f:28:78:ab:b5:
d1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:85:55:0B:3C:B8:F0:69:4F:4C:6F:13:B4:0B:08:4F:19:0F:47:9E
X509v3 Authority Key Identifier:
keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/94VVCzy48GlPTG8TtAsITxkPR54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.240.0/22
194.127.215.0-194.127.223.255
IPv6:
2a04:b647::/32
Signature Algorithm: sha256WithRSAEncryption
90:05:22:1a:a2:6f:f5:f5:d4:28:a4:99:67:c7:ef:32:05:d2:
6d:3a:e8:13:b2:e3:fc:63:9f:2f:23:c6:ab:55:f6:81:80:ed:
08:74:85:75:da:85:33:68:59:78:ec:c0:70:40:3c:5b:fa:ce:
6a:5f:1e:d9:b6:eb:60:5d:71:c3:71:2a:87:47:c9:d9:e4:a5:
88:46:ee:d8:45:c7:c8:f5:38:5e:63:73:b4:0e:1e:ad:b0:3a:
5d:4a:d3:ea:5b:9e:29:ac:4d:b5:03:cd:78:d3:a1:b8:86:2b:
1c:d6:83:89:4d:cd:ae:49:92:49:97:99:c6:97:64:fe:df:de:
5e:32:6b:37:f5:90:be:83:06:95:00:2a:27:95:88:f8:94:d2:
25:a1:3b:ec:18:de:7c:d2:fd:96:b2:30:01:cb:60:97:be:31:
96:d0:c4:0d:46:84:c0:b0:c2:60:94:2f:05:b7:0f:44:43:26:
c0:be:26:dd:a7:65:e5:81:2c:d3:ce:19:6c:13:71:6d:f9:e8:
3c:ee:74:f4:3e:85:a1:7e:6e:6e:67:72:04:33:55:38:6d:37:
2a:20:fd:ce:6a:79:09:a9:9d:3e:00:d3:0b:3a:a7:95:00:5d:
a3:2d:09:fb:ae:23:00:dd:6b:d2:c0:8a:b5:48:d4:87:bf:10:
2a:01:1d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:19 2024 by rpki-client on console-ams.rpki-client.org