Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/E4qJotSo67t9usui0o2PkHn5KTk.roa
File: E4qJotSo67t9usui0o2PkHn5KTk.roa (raw, json)
Hash identifier: i/cCQKEUCBmJ9bInvGNyWV9TqFZI5D/KsU2UeAWaHik=
Subject key identifier: 13:8A:89:A2:D4:A8:EB:BB:7D:BA:CB:A2:D2:8D:8F:90:79:F9:29:39
Certificate issuer: /CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Certificate serial: 0188302C1066B8FA2B13E4C3C6FC226AB560
Authority key identifier: E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/E4qJotSo67t9usui0o2PkHn5KTk.roa
Signing time: Thu 18 May 2023 18:42:54 +0000
ROA not before: Thu 18 May 2023 18:42:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197099
IP address blocks: 178.217.136.0/21 maxlen: 21
195.43.84.0/23 maxlen: 23
217.30.4.0/22 maxlen: 22
195.95.185.0/24 maxlen: 24
185.81.107.0/24 maxlen: 24
91.216.149.0/24 maxlen: 24
185.81.106.0/24 maxlen: 24
2a03:63e0::/29 maxlen: 29
2a03:63e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:2c:10:66:b8:fa:2b:13:e4:c3:c6:fc:22:6a:b5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Validity
Not Before: May 18 18:42:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=138a89a2d4a8ebbb7dbacba2d28d8f9079f92939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b9:19:97:08:f1:91:5a:af:09:0c:e9:62:42:
0e:02:a0:08:5a:94:e2:8f:2b:5a:6a:fd:73:4b:32:
be:bc:09:47:05:8c:76:2d:3d:e8:91:99:d8:08:44:
d8:05:04:65:be:62:d7:df:79:60:d7:d6:24:4e:aa:
4e:86:ff:a8:29:83:7a:71:22:71:b7:ef:f4:ed:bc:
b1:82:3c:dd:8e:05:fe:38:a8:de:83:c2:3f:25:94:
1f:d5:32:69:d4:55:6f:de:f5:dc:98:6b:8a:8b:49:
07:9a:84:82:00:81:58:be:28:4a:c5:cc:9c:76:e9:
2b:75:99:64:3e:80:a7:45:28:4c:3a:e1:6a:41:da:
de:43:73:3c:1f:7b:25:4e:a2:16:a8:89:82:80:27:
51:64:e3:e8:19:74:73:a2:5a:9b:ee:46:c5:3b:14:
c8:07:97:10:df:a8:1a:a7:84:54:78:6f:42:b5:e6:
83:11:9b:23:88:38:44:4a:a6:df:e5:96:da:89:bd:
63:9b:8c:70:bd:0a:cd:08:3c:ff:97:cc:b2:53:ea:
f9:4b:4f:e5:ce:2c:06:03:65:f7:83:e0:48:fc:0f:
ed:05:42:47:65:50:21:f5:50:32:45:77:84:64:dd:
df:34:6a:36:5d:f7:91:41:f2:77:61:e6:ed:60:02:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8A:89:A2:D4:A8:EB:BB:7D:BA:CB:A2:D2:8D:8F:90:79:F9:29:39
X509v3 Authority Key Identifier:
keyid:E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/E4qJotSo67t9usui0o2PkHn5KTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.149.0/24
178.217.136.0/21
185.81.106.0/23
195.43.84.0/23
195.95.185.0/24
217.30.4.0/22
IPv6:
2a03:63e0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:11:8d:3d:23:b3:d9:81:8c:5c:1c:e9:72:bf:8c:48:33:5d:
dd:02:ff:9b:bc:1c:ea:9e:1e:45:6b:c4:c4:a6:f2:75:93:6e:
05:93:04:bd:76:47:11:eb:01:68:63:19:a1:9d:67:30:5a:1b:
03:56:1d:16:e0:34:d6:04:9a:ae:55:f2:b7:19:a4:27:46:99:
0b:1b:5a:34:ae:d1:7f:f0:82:06:7a:31:98:21:0c:42:39:2d:
84:23:7a:27:5b:1d:a9:91:b8:6a:48:ff:28:c7:11:08:6f:28:
f9:e9:09:94:7b:d0:0b:53:66:c2:5b:19:4b:86:b1:8f:d9:f0:
da:2b:2b:08:c3:fc:0a:fe:e5:89:94:c5:89:82:4d:66:fa:d0:
85:a5:33:84:b6:90:62:16:05:6b:20:36:55:ce:13:3b:8f:f9:
a3:c0:10:a0:8e:91:ae:5e:73:5d:4a:69:05:9f:2e:24:df:55:
84:ad:dc:75:2d:9a:fa:fa:7d:43:56:31:bd:7f:91:05:0c:52:
b6:52:e4:11:0f:a1:5b:1a:42:39:66:87:92:b0:50:73:27:e3:
97:f3:3a:4c:2a:23:95:1a:51:ae:89:ce:6f:df:cb:31:31:4d:
93:69:a8:82:db:a3:58:9c:b0:1b:11:fb:b4:f3:79:52:eb:81:
71:d5:b1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:16 2024 by rpki-client on console-ams.rpki-client.org