Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/p1Y2Uq9gExMcTla2zPzNvMAQ3TM.roa
File: p1Y2Uq9gExMcTla2zPzNvMAQ3TM.roa (raw, json)
Hash identifier: xD+A65BHQsPjuExy0W8nufX3qwf44LgjfU+ppMF6NdU=
Subject key identifier: A7:56:36:52:AF:60:13:13:1C:4E:56:B6:CC:FC:CD:BC:C0:10:DD:33
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018ECCDB975FFE3532BDE29D877FBA3624DF
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/p1Y2Uq9gExMcTla2zPzNvMAQ3TM.roa
Signing time: Thu 11 Apr 2024 11:12:06 +0000
ROA not before: Thu 11 Apr 2024 11:12:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.9.28.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
146.19.125.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Apr 2024 09:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:db:97:5f:fe:35:32:bd:e2:9d:87:7f:ba:36:24:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 11 11:12:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7563652af6013131c4e56b6ccfccdbcc010dd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:e3:81:a7:46:3f:2f:0a:40:5e:27:cb:b6:
a2:dd:26:73:cd:74:af:40:4c:dd:01:0c:b3:18:94:
fd:66:b7:c0:47:d1:2b:a3:a3:ea:2b:27:02:e3:a4:
35:2c:01:20:08:53:fa:42:66:79:dc:48:f6:39:ec:
81:fc:ad:a2:47:f1:6c:b5:b2:01:c1:de:0f:0c:15:
83:0d:74:ed:9e:b1:57:aa:aa:fb:13:b9:96:c3:79:
c4:b1:e2:b4:22:d6:d5:99:8a:94:d2:ce:2e:7c:0d:
84:58:2c:fa:f2:6c:65:8c:81:69:b5:fd:31:b7:dd:
47:26:52:82:26:41:6d:ed:07:dc:50:29:c9:41:c4:
8b:45:5b:9f:60:e0:40:cc:55:03:3e:c4:d9:15:97:
db:8a:32:3c:b4:66:8b:06:2c:e2:a3:0e:1d:ad:f6:
29:af:c9:a7:6d:bf:ff:d1:f8:87:a3:7d:10:a4:5b:
f6:dd:55:95:a0:ba:62:de:f5:2a:78:89:e8:05:ef:
b6:4b:f0:c6:dc:01:17:7f:86:ce:43:9c:fc:66:a4:
bd:45:0a:a9:25:ef:77:45:b5:d7:2a:ca:32:a5:8e:
3f:2f:58:53:f1:87:83:a2:09:fa:59:ec:85:d7:17:
a2:42:d3:5c:db:2c:56:49:b4:e2:0b:eb:5c:14:a5:
6d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:56:36:52:AF:60:13:13:1C:4E:56:B6:CC:FC:CD:BC:C0:10:DD:33
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/p1Y2Uq9gExMcTla2zPzNvMAQ3TM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
5.181.87.0/24
45.9.28.0/24
45.94.170.0/24
85.209.120.0/23
146.19.125.0/24
193.30.241.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
69:5d:14:38:77:15:ee:b0:a8:a3:5a:90:1e:e8:bc:a6:d0:8b:
2e:61:f9:91:1c:33:9f:3c:2f:b9:ab:73:93:16:31:91:76:22:
15:36:19:db:df:40:0d:d8:a9:8d:1a:3c:da:99:11:3d:40:26:
c5:17:16:80:2f:4e:a8:26:9d:ca:f4:12:60:0f:a7:49:78:78:
4c:d5:d1:3f:58:f8:9b:24:c5:7b:23:e5:7a:0b:e4:80:d0:f6:
50:73:c1:4e:e4:3e:98:87:e1:16:18:fc:a9:73:ca:33:72:d9:
ab:cb:63:2a:58:58:e3:fe:ce:58:bd:ba:f5:c0:66:fe:64:3b:
05:2c:d5:1f:97:cc:32:29:6c:e2:70:ec:3a:a5:cd:c4:1a:13:
06:23:8e:e2:07:57:05:79:d0:c7:1c:95:01:66:93:9c:23:77:
2f:eb:94:8e:3a:bd:bc:26:98:81:67:32:78:a4:81:ef:33:c9:
95:e3:fc:57:42:bf:13:59:f2:f3:8d:de:1a:f4:54:d3:1d:e3:
8c:85:37:87:ab:17:b9:17:a7:26:98:51:d7:83:43:60:60:2e:
8a:d9:9b:4d:68:8e:ed:e2:24:b4:f1:ba:a5:89:cc:f8:4e:87:
2a:7b:14:37:bd:b0:49:c2:10:0d:fb:c4:0a:5a:c9:ce:85:87:
44:2c:bf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org