Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/4XZRLJ4asPrpB6FP2VKAgh9nXes.roa
File: 4XZRLJ4asPrpB6FP2VKAgh9nXes.roa (raw, json)
Hash identifier: nq4xz5vAaBba4FbHfdTp6jqV+fICi0EEGRWvp+sD8tQ=
Subject key identifier: E1:76:51:2C:9E:1A:B0:FA:E9:07:A1:4F:D9:52:80:82:1F:67:5D:EB
Certificate issuer: /CN=bfabf5a474afe7212331670e831e119da38f284f
Certificate serial: 0189BC4AADC6823ABE0DB2C116D74B5F3E5D
Authority key identifier: BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/4XZRLJ4asPrpB6FP2VKAgh9nXes.roa
Signing time: Thu 03 Aug 2023 16:45:58 +0000
ROA not before: Thu 03 Aug 2023 16:45:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21232
IP address blocks: 185.41.132.0/22 maxlen: 22
213.188.32.0/19 maxlen: 19
185.110.184.0/22 maxlen: 22
185.119.36.0/22 maxlen: 22
62.32.0.0/19 maxlen: 19
82.192.224.0/19 maxlen: 19
185.110.88.0/22 maxlen: 22
77.74.56.0/21 maxlen: 21
213.160.32.0/19 maxlen: 19
79.142.128.0/20 maxlen: 20
195.216.64.0/19 maxlen: 19
185.132.16.0/22 maxlen: 22
185.64.184.0/22 maxlen: 22
185.31.248.0/22 maxlen: 22
185.110.72.0/22 maxlen: 22
185.45.236.0/22 maxlen: 22
93.184.16.0/20 maxlen: 20
2a02:5c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bc:4a:ad:c6:82:3a:be:0d:b2:c1:16:d7:4b:5f:3e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfabf5a474afe7212331670e831e119da38f284f
Validity
Not Before: Aug 3 16:45:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e176512c9e1ab0fae907a14fd95280821f675deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bf:ed:48:c0:62:22:b8:3c:e9:d9:b8:ea:df:
63:d9:ac:e7:0d:62:8f:93:b7:31:37:dd:5d:49:a1:
4f:24:3f:c4:c7:53:f4:ce:4a:77:43:5a:e5:7e:e7:
82:45:84:af:aa:f5:59:dd:6c:98:a1:50:5f:c7:e7:
60:4d:2c:a0:e4:1c:55:c8:32:4c:4c:b7:67:8b:f6:
8a:a1:19:fa:47:21:fa:e8:f1:be:2d:46:32:11:8e:
03:27:c7:eb:bf:18:79:39:29:d5:d3:4c:88:2f:d5:
bc:9b:ce:f2:93:6e:8e:c0:a1:d7:72:d4:f2:cd:70:
fd:63:5d:42:81:aa:2a:05:7c:c2:92:3b:90:fb:ae:
d8:0c:52:5d:b4:62:a3:b1:52:8d:3a:d4:f6:5e:07:
07:39:42:b7:65:50:46:9c:1c:d2:0f:16:ae:a0:9e:
5f:bf:ad:c0:7b:d9:91:8c:f0:76:d6:0d:bf:64:a0:
45:2c:ed:23:24:d5:56:40:4a:fd:ea:2a:a5:86:bf:
bc:ea:52:6f:32:cf:03:a2:31:2e:10:9e:e7:50:a3:
8c:da:37:ce:e4:00:37:91:92:69:4e:8d:b4:d6:df:
37:67:4a:3f:4c:ce:d1:68:5e:fe:e4:97:34:91:0d:
54:25:32:0d:bd:af:34:17:fa:de:2a:3e:1a:2e:0e:
24:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:76:51:2C:9E:1A:B0:FA:E9:07:A1:4F:D9:52:80:82:1F:67:5D:EB
X509v3 Authority Key Identifier:
keyid:BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/4XZRLJ4asPrpB6FP2VKAgh9nXes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.32.0.0/19
77.74.56.0/21
79.142.128.0/20
82.192.224.0/19
93.184.16.0/20
185.31.248.0/22
185.41.132.0/22
185.45.236.0/22
185.64.184.0/22
185.110.72.0/22
185.110.88.0/22
185.110.184.0/22
185.119.36.0/22
185.132.16.0/22
195.216.64.0/19
213.160.32.0/19
213.188.32.0/19
IPv6:
2a02:5c0::/32
Signature Algorithm: sha256WithRSAEncryption
78:dc:b7:61:2e:f0:4a:d1:21:21:77:81:eb:4f:ff:9e:02:a6:
21:96:14:6d:aa:68:63:dd:af:94:1e:32:85:b9:13:81:86:84:
2e:48:dd:f3:42:5a:49:ff:5a:8e:be:2a:0f:99:bc:6e:25:53:
98:ef:20:cc:b4:77:e2:91:71:ef:86:20:b9:9e:d2:73:cb:a2:
1e:e1:06:81:f1:bb:aa:7e:8b:ed:37:c5:65:d1:1e:97:cd:5a:
b5:1a:75:ba:f7:07:c5:81:e4:a2:61:80:5b:75:c6:95:bb:fd:
31:e0:47:8a:2d:1c:34:a5:c7:6d:37:6a:19:e2:4a:31:e2:81:
82:f8:d7:a4:fc:7e:d9:c4:23:1f:f0:71:b7:24:2a:1d:0d:7c:
16:d0:f4:3c:37:55:35:bc:95:05:83:e2:0a:b0:75:47:e3:88:
dd:83:dd:0c:9d:58:d6:d5:57:50:ed:2f:a8:04:e2:19:eb:08:
d9:9e:9f:ab:ea:2c:b2:f9:bc:d6:e6:a9:46:30:6e:0f:5b:08:
65:84:ad:98:6b:4f:cd:d6:c6:1c:19:d9:fc:c5:26:67:dc:21:
4b:dd:ba:cd:30:03:83:15:5e:c9:9b:4d:22:9a:31:fd:2f:c7:
9a:ec:ca:47:e9:01:2b:b0:8f:9e:96:8e:b8:03:f3:12:9a:86:
0e:77:05:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org