Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/84O2rkKbzVbGK_Kku0aYpf_TVfU.roa
File: 84O2rkKbzVbGK_Kku0aYpf_TVfU.roa (raw, json)
Hash identifier: s20OSPf2vhnAEdYLX7uvoHi+P+ngjITPl/8zm8uQG9w=
Subject key identifier: F3:83:B6:AE:42:9B:CD:56:C6:2B:F2:A4:BB:46:98:A5:FF:D3:55:F5
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CCFAF1949B63D5C890478BEA6B6AD4190
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/84O2rkKbzVbGK_Kku0aYpf_TVfU.roa
Signing time: Wed 03 Jan 2024 14:16:48 +0000
ROA not before: Wed 03 Jan 2024 14:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 193.30.241.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
193.57.41.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
146.19.125.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jan 2024 15:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:af:19:49:b6:3d:5c:89:04:78:be:a6:b6:ad:41:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 3 14:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f383b6ae429bcd56c62bf2a4bb4698a5ffd355f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:bf:8b:4f:ce:37:03:1b:af:19:d2:85:70:
d9:cb:c3:b4:7d:f2:cb:98:31:77:1d:12:47:f8:37:
9c:d3:cf:54:ba:d2:1c:bf:45:61:86:77:d1:e6:a5:
45:63:2f:60:8b:cc:a9:9d:3b:c2:d9:64:99:4f:a7:
ad:8f:d5:ef:3a:79:37:ff:c6:5d:c7:4a:8c:0c:c8:
74:2b:c7:31:dc:9a:82:34:05:9e:3c:6a:14:3a:37:
cf:e9:fc:5a:ce:93:1b:40:fb:6f:ab:29:32:4a:d8:
ed:0c:24:dc:26:be:73:26:3d:21:dc:ef:91:ca:c8:
d5:ff:78:43:64:ea:e8:77:44:e1:2b:6a:61:0f:bc:
c8:ca:b9:55:a7:19:c4:4b:28:a1:33:93:a7:a0:4c:
69:1b:29:ff:90:09:79:82:3a:d6:ce:62:c7:a5:94:
39:81:84:72:33:65:0b:84:ae:51:be:67:57:d5:b3:
09:9f:65:6e:3d:9a:24:b5:ba:5c:46:9d:12:26:87:
6c:c3:ca:94:a1:8f:42:c2:93:eb:21:62:fa:5a:86:
cc:ff:9c:42:3f:58:77:e8:2f:9e:9d:93:8d:60:67:
86:17:25:ba:49:ef:32:76:f8:cc:91:e0:9a:31:f5:
d1:39:e7:b2:12:7c:12:ae:58:36:a7:23:ad:fe:8f:
c1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:83:B6:AE:42:9B:CD:56:C6:2B:F2:A4:BB:46:98:A5:FF:D3:55:F5
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/84O2rkKbzVbGK_Kku0aYpf_TVfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.115.0/24
45.88.139.0/24
45.94.171.0/24
85.209.120.0/23
146.19.125.0/24
193.30.241.0/24
193.57.41.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4b:85:68:30:2a:06:c3:1c:3c:b7:b2:f6:1c:cd:d5:28:f3:
d8:c4:e5:71:6d:ca:e6:07:28:f0:be:01:f7:73:4e:96:6d:b2:
4f:cd:61:ab:fb:3d:45:5f:9e:a5:c2:d7:be:a6:23:e9:c6:8b:
27:96:54:5e:12:98:d0:6a:1d:7b:36:e4:c2:3e:64:69:6e:fd:
37:3f:f4:25:2c:33:a1:5e:c2:fe:be:d2:d6:b6:01:36:ad:5c:
a2:d3:a2:44:77:b7:43:6b:80:5b:b0:91:d1:63:2b:77:9a:54:
6a:38:0e:84:52:28:15:6a:eb:fd:37:52:b8:5c:41:b7:03:19:
5f:79:b4:34:75:27:e0:62:a4:ff:a6:6b:ca:db:d9:5e:af:37:
44:5e:f7:f8:d1:96:a8:31:7b:78:f4:a1:9b:51:94:de:ea:4a:
53:20:3e:29:ad:6d:a0:bb:2b:6c:e2:4a:96:f0:df:63:d7:8f:
35:4f:89:a6:f2:12:3d:68:87:32:31:3f:24:aa:bd:4c:83:57:
b9:c4:e3:39:77:8d:4e:e3:08:32:40:b5:e1:93:cc:03:74:21:
02:9e:d1:b2:d2:29:38:b4:ea:69:29:b2:bb:ad:7e:06:96:c8:
a2:87:7a:31:d9:3f:d0:ad:58:9c:ba:00:89:d1:e5:7d:56:24:
76:f3:f3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org