Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/pLVcGB-4-8nDUgk6pBn7x5PPu0s.roa
File: pLVcGB-4-8nDUgk6pBn7x5PPu0s.roa (raw, json)
Hash identifier: qoFhs57J7EmE7P3KzwDoAwym6wxXf/5+HFQ/Qp+p378=
Subject key identifier: A4:B5:5C:18:1F:B8:FB:C9:C3:52:09:3A:A4:19:FB:C7:93:CF:BB:4B
Certificate issuer: /CN=947121580ed02eddf4f5e5a87d37e017b32df71b
Certificate serial: 018570B094BB6647D6DFF057820828E7AA8A
Authority key identifier: 94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/pLVcGB-4-8nDUgk6pBn7x5PPu0s.roa
Signing time: Mon 02 Jan 2023 04:14:58 +0000
ROA not before: Mon 02 Jan 2023 04:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60316
IP address blocks: 185.104.72.0/22 maxlen: 24
185.212.32.0/24 maxlen: 24
185.186.120.0/22 maxlen: 24
185.227.224.0/22 maxlen: 24
185.33.216.0/22 maxlen: 24
2a06:2f80::/29 maxlen: 32
2a04:5a00::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:94:bb:66:47:d6:df:f0:57:82:08:28:e7:aa:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947121580ed02eddf4f5e5a87d37e017b32df71b
Validity
Not Before: Jan 2 04:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4b55c181fb8fbc9c352093aa419fbc793cfbb4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:44:17:50:1c:dd:39:cd:ab:e7:fc:e2:9a:
7a:0e:9e:0b:45:8f:40:39:ee:9a:d7:4b:3b:91:f9:
a5:01:99:1f:ab:63:7f:f6:9b:c0:6a:ff:2b:99:4d:
98:3b:d4:e3:9f:de:a6:50:e6:da:9d:ea:f8:7e:2a:
81:2d:7a:b9:59:c2:b8:f5:f8:b7:f9:70:51:93:b6:
ad:ef:bd:43:a4:24:fb:42:61:28:31:46:b1:20:eb:
18:91:1c:fa:6b:24:13:54:7f:a9:83:72:3a:de:ed:
ff:39:46:76:dd:f4:22:22:76:b4:c6:52:7d:5d:4a:
c7:ec:04:3d:c4:0d:8a:b7:7a:29:bc:b4:18:61:e1:
05:6b:77:fe:1f:c7:be:8a:57:d4:5c:c8:2d:b9:a8:
98:d1:97:81:f9:a5:ab:42:c5:75:b9:df:9c:81:97:
1e:39:d9:e8:78:91:93:2c:40:21:67:04:9c:ca:43:
31:c3:fa:6a:6d:23:17:0f:e3:26:9e:83:dd:fa:d1:
6e:43:92:a4:4a:8e:b2:bc:22:da:d7:46:a2:77:a3:
13:f0:a0:ab:a1:41:bd:c3:bf:7c:64:39:f7:f0:fe:
43:e1:f9:4a:34:57:63:f1:30:71:df:aa:cd:73:37:
98:6b:72:f9:05:1c:de:1e:5b:a0:64:a4:ce:6d:8a:
25:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B5:5C:18:1F:B8:FB:C9:C3:52:09:3A:A4:19:FB:C7:93:CF:BB:4B
X509v3 Authority Key Identifier:
keyid:94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/pLVcGB-4-8nDUgk6pBn7x5PPu0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.216.0/22
185.104.72.0/22
185.186.120.0/22
185.212.32.0/24
185.227.224.0/22
IPv6:
2a04:5a00::/29
2a06:2f80::/29
Signature Algorithm: sha256WithRSAEncryption
11:42:93:c5:16:62:a7:f1:5a:40:ba:2f:bf:73:29:30:6e:b8:
90:e3:56:73:c6:83:2f:6f:50:a4:f6:12:9c:b2:fb:b1:d6:c3:
98:9a:36:24:e6:46:4d:11:54:2c:80:9f:a9:99:4e:6f:82:cd:
0a:7d:bf:ef:af:fc:24:c7:ba:a8:58:83:51:c1:01:5a:d9:50:
ed:01:e0:77:94:ec:95:93:ed:8f:88:3e:75:b8:46:42:f4:3f:
fc:64:5c:a3:47:12:44:18:b3:ad:7e:bc:1d:f4:ec:b2:3f:f4:
9a:45:af:6c:79:da:a0:0f:99:da:af:9f:bf:17:14:67:6b:b2:
76:fb:7a:89:db:6d:d2:0b:75:5c:3c:6d:9d:36:15:f9:a1:45:
c0:b3:f9:4f:87:57:a6:b0:10:c1:a8:94:a6:64:b1:59:55:f7:
3a:57:73:0b:a0:9f:e1:34:d8:8c:60:2a:83:9c:46:7f:44:da:
f8:d3:a8:f9:18:54:6c:4e:61:20:a4:0e:cf:0b:12:52:b0:7d:
b1:93:13:1a:a1:9f:d1:99:3e:24:a8:5f:c8:26:a8:f8:c0:d9:
19:36:08:cc:04:39:98:50:ba:43:4e:05:23:ef:67:0d:ac:4d:
69:c1:c2:ea:7a:24:e4:ec:e4:15:b7:c1:7a:8f:78:a7:16:5e:
3b:35:b2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:52 2024 by rpki-client on console-fra.rpki-client.org