Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jwHQ_8q8GG4TfKDirOWoEhiknUo.roa
File: jwHQ_8q8GG4TfKDirOWoEhiknUo.roa (raw, json)
Hash identifier: eyys6cXee1UfWEgWos8WM8vCBA10dEiSunsyfGvpCPM=
Subject key identifier: 8F:01:D0:FF:CA:BC:18:6E:13:7C:A0:E2:AC:E5:A8:12:18:A4:9D:4A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018E1A0CF7512227ABC606E7A225B6A092D4
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jwHQ_8q8GG4TfKDirOWoEhiknUo.roa
Signing time: Thu 07 Mar 2024 17:54:01 +0000
ROA not before: Thu 07 Mar 2024 17:54:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 45.88.139.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
146.19.125.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Mar 2024 11:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1a:0c:f7:51:22:27:ab:c6:06:e7:a2:25:b6:a0:92:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 7 17:54:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f01d0ffcabc186e137ca0e2ace5a81218a49d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:af:10:28:fa:1e:b1:06:25:7f:a4:c8:0c:
15:c9:17:41:07:f2:eb:54:8e:27:b4:68:88:20:2c:
69:f2:06:61:a3:04:4e:3b:01:7f:88:24:dd:a1:9d:
dc:b7:4a:07:4c:36:4a:a4:cb:e8:da:61:b8:73:48:
5b:e6:34:79:be:20:3f:15:7c:01:c0:8c:1e:f0:25:
cd:65:c0:ba:8e:8c:25:f5:31:4e:fc:64:9f:53:8c:
55:1a:31:72:77:e7:73:1e:38:7c:ab:ef:2e:65:bd:
57:57:f1:ad:57:e4:0d:03:d0:2f:be:fc:c5:6d:75:
67:d0:ca:2f:df:18:b9:b6:c6:bc:4e:cc:1b:02:73:
71:1f:34:93:71:e9:06:d6:e9:f0:eb:e1:32:64:50:
e9:08:11:d9:91:36:5b:da:d8:22:04:aa:8d:6a:8f:
ed:9d:3a:f7:41:5a:99:94:2c:e1:25:06:b1:81:b0:
60:15:27:a6:f4:4a:cd:4a:68:ed:68:d4:b3:ff:ba:
0f:14:fd:58:7d:1f:9c:d2:09:15:50:41:da:e8:f3:
4a:80:3d:23:e8:0c:48:8d:5b:ce:72:f8:20:32:4b:
9a:09:62:49:e6:36:ec:a0:33:b7:4b:20:e7:d9:72:
8d:eb:1a:b0:96:04:b8:a4:b7:97:50:a2:2e:3a:82:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:01:D0:FF:CA:BC:18:6E:13:7C:A0:E2:AC:E5:A8:12:18:A4:9D:4A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jwHQ_8q8GG4TfKDirOWoEhiknUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.139.0/24
45.94.170.0/23
85.209.120.0/23
146.19.125.0/24
193.30.241.0/24
193.57.41.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:48:50:fe:6f:e3:a0:a8:f7:b8:29:f9:46:56:5e:8b:c7:b0:
55:4d:84:3e:1a:bb:44:2e:66:9b:54:f4:33:d2:f9:b5:57:9b:
74:30:41:c1:28:bb:4d:b5:3e:1e:60:36:cb:4c:01:05:a2:b2:
25:a3:53:59:d0:77:c8:61:36:5a:e5:9b:92:2f:ff:33:89:56:
23:a2:78:0e:4e:3b:7e:2c:e8:73:9d:e9:95:b0:13:36:d2:58:
d4:cd:8d:99:d6:ec:34:cb:07:bc:0c:42:05:1f:fc:a3:ee:6d:
7c:c9:a9:1e:c4:62:56:86:a5:87:33:34:b9:e7:30:84:de:85:
80:9d:f1:c0:dc:52:d9:d6:ad:37:08:01:7c:4b:65:6d:0b:f5:
db:ca:ff:2c:50:95:a6:30:b2:ae:2e:84:7b:d8:51:0f:35:86:
bd:8b:8d:95:e9:43:09:99:f9:c7:e7:a3:e8:2b:5e:df:b3:ab:
62:39:0c:ba:bb:4e:31:ec:0a:92:3f:f9:87:c7:0e:d1:37:9a:
bf:ab:28:28:db:9d:07:68:ac:87:28:55:e5:94:22:e2:df:0c:
dd:28:8e:28:10:21:46:cc:7f:84:b1:d4:39:70:10:a2:64:c4:
00:8d:4d:ac:98:86:58:c7:9d:0f:47:f2:9e:18:52:74:7a:2a:
f1:bc:fa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org