Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/4qyRWsbhItn-Hd9xSd0sGT_T0fQ.roa
File: 4qyRWsbhItn-Hd9xSd0sGT_T0fQ.roa (raw, json)
Hash identifier: RoeXRDKDvcBlySpQ85Ty/sSDU9h1pagC9t36qfkeJe8=
Subject key identifier: E2:AC:91:5A:C6:E1:22:D9:FE:1D:DF:71:49:DD:2C:19:3F:D3:D1:F4
Certificate issuer: /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Certificate serial: 01856F8BA49359F8189C5E8501900BFF3DF9
Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/4qyRWsbhItn-Hd9xSd0sGT_T0fQ.roa
Signing time: Sun 01 Jan 2023 22:55:00 +0000
ROA not before: Sun 01 Jan 2023 22:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202761
IP address blocks: 178.19.172.0/24 maxlen: 24
178.19.172.0/22 maxlen: 22
178.19.172.0/23 maxlen: 23
178.19.174.0/23 maxlen: 23
178.19.175.0/24 maxlen: 24
178.19.173.0/24 maxlen: 24
178.19.174.0/24 maxlen: 24
185.251.124.0/23 maxlen: 23
185.251.124.0/22 maxlen: 22
185.251.124.0/24 maxlen: 24
185.251.125.0/24 maxlen: 24
185.251.126.0/24 maxlen: 24
185.251.127.0/24 maxlen: 24
185.251.126.0/23 maxlen: 23
2a07:8cc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:a4:93:59:f8:18:9c:5e:85:01:90:0b:ff:3d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Validity
Not Before: Jan 1 22:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2ac915ac6e122d9fe1ddf7149dd2c193fd3d1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:b3:b7:ef:7d:c1:23:9b:a2:cb:46:6c:36:
5e:f9:40:ff:a7:a9:42:ec:41:8a:eb:ff:12:66:2f:
fb:48:6e:a5:73:80:e6:c8:0c:f6:e4:b4:8e:bb:04:
86:de:d2:32:ce:6f:a8:05:bd:59:ee:2c:5d:d1:b2:
99:22:fb:17:fb:4e:1d:bc:9e:05:6e:bb:fb:3f:f6:
00:b5:94:7c:81:c7:a8:06:2a:3b:e0:e5:ff:ab:7e:
e3:13:ee:14:12:04:19:ac:e7:a0:f3:bc:15:a1:0e:
87:e7:62:b5:c2:8e:fa:03:5e:a3:67:61:64:45:bf:
0a:6b:45:7b:ab:35:57:dd:c6:bc:ac:bc:94:49:89:
de:8b:2a:74:fc:cd:63:bb:6f:bf:eb:db:34:9f:3c:
25:00:2d:00:84:69:5b:b9:7b:f9:bc:c8:0f:f5:db:
a9:06:9a:27:94:b5:ac:1a:b1:7c:0e:8d:47:9f:d6:
8a:55:d7:52:b5:a3:66:ef:94:b8:ca:dd:ca:31:ac:
6f:ab:59:c7:f7:4a:6e:f1:95:01:c7:da:fa:3a:da:
a2:73:e8:b1:76:db:0d:a9:9f:c8:c3:8f:58:af:21:
56:53:49:cb:d2:2b:03:4e:ec:4f:db:0e:14:c8:69:
8c:4c:d3:28:71:86:32:3e:82:bd:00:ff:38:43:b7:
11:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AC:91:5A:C6:E1:22:D9:FE:1D:DF:71:49:DD:2C:19:3F:D3:D1:F4
X509v3 Authority Key Identifier:
keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/4qyRWsbhItn-Hd9xSd0sGT_T0fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.19.172.0/22
185.251.124.0/22
IPv6:
2a07:8cc0::/29
Signature Algorithm: sha256WithRSAEncryption
8d:bc:a6:31:d1:ea:64:0f:43:f1:c6:ce:10:3a:0a:8d:3e:c2:
a4:a8:b5:71:d1:0f:b3:8c:fd:a2:14:07:93:a3:94:09:bc:b1:
be:f1:d5:6a:de:1e:4c:e1:11:de:84:a6:bd:6d:67:53:0b:7e:
48:43:e6:9e:ac:c2:d2:1e:1f:0a:ce:99:f6:cf:a4:80:ba:1c:
11:b5:29:00:6c:9f:70:19:5f:c0:3d:17:a7:37:b6:dc:1b:d9:
be:bf:5e:4c:0d:e8:01:b8:74:9c:c6:30:66:e8:2f:00:84:e1:
c9:48:47:5f:2c:61:28:3f:7c:5c:8b:27:e5:11:44:e0:34:bf:
e7:55:df:0f:73:2f:04:c4:57:1c:33:96:b4:29:3c:94:ae:ac:
dc:78:9f:8a:5e:41:30:7b:73:ed:13:1e:56:de:8a:01:18:af:
44:9b:ee:eb:53:9e:92:ce:b6:fa:9c:46:aa:53:66:10:ee:17:
8e:af:8f:3f:38:80:23:03:5f:a1:a0:6d:a4:42:6a:34:e9:f8:
14:14:e5:ff:a2:2e:aa:20:93:f9:72:7a:52:b7:27:af:d1:69:
0c:84:83:9e:a4:90:00:d2:97:b9:bc:3c:d0:4a:e4:78:2b:11:
ae:3c:83:76:a4:7b:95:62:a0:11:d6:c6:a5:39:7b:fb:2a:62:
74:82:90:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:13 2024 by rpki-client on console-ams.rpki-client.org