Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/uzdI2CHgNSoWtM_N-xJfCGw0a0Q.roa
File: uzdI2CHgNSoWtM_N-xJfCGw0a0Q.roa (raw, json)
Hash identifier: Q+vt1gx9uXbxHOpZZ3kqVqYXjqwhiJ8bFXT9W1x2kJI=
Subject key identifier: BB:37:48:D8:21:E0:35:2A:16:B4:CF:CD:FB:12:5F:08:6C:34:6B:44
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 018E9E15FDF2E9B05FEA00895929F20B0E73
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/uzdI2CHgNSoWtM_N-xJfCGw0a0Q.roa
Signing time: Tue 02 Apr 2024 09:13:45 +0000
ROA not before: Tue 02 Apr 2024 09:13:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39521
IP address blocks: 45.10.16.0/23 maxlen: 23
45.10.18.0/24 maxlen: 24
45.88.5.0/24 maxlen: 24
45.88.6.0/24 maxlen: 24
45.88.7.0/24 maxlen: 24
45.95.40.0/22 maxlen: 22
45.130.100.0/22 maxlen: 22
83.229.23.0/24 maxlen: 24
83.229.34.0/24 maxlen: 24
95.178.107.0/24 maxlen: 24
185.90.223.0/24 maxlen: 24
185.144.56.0/22 maxlen: 24
188.191.48.0/22 maxlen: 22
217.194.153.0/24 maxlen: 24
2a05:e4c0::/29 maxlen: 32
Validation: Failed, certificate revoked on Sun 21 Apr 2024 21:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:15:fd:f2:e9:b0:5f:ea:00:89:59:29:f2:0b:0e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Apr 2 09:13:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb3748d821e0352a16b4cfcdfb125f086c346b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:f2:4d:cb:5e:b1:48:91:c6:6b:b1:d3:16:
8d:7c:63:12:41:05:44:ae:e0:f9:81:de:ec:29:83:
74:2d:1d:b7:f7:7d:79:38:8d:0b:6c:57:e6:7a:e0:
23:3c:c7:44:ae:4e:cf:5d:fa:30:24:79:30:90:d7:
48:5c:d4:76:ef:55:7d:c6:6b:f3:ef:3e:47:0e:a3:
89:c0:bb:5a:ae:e7:c7:49:a9:1d:9b:57:d5:ea:db:
fc:ad:21:96:5b:47:a4:97:6c:1b:6c:34:de:2f:77:
7e:66:ea:ab:85:cb:55:17:b8:23:05:c7:15:b1:2e:
7c:77:5f:11:19:64:23:6b:2c:9b:e8:8d:2d:ac:44:
65:70:e7:47:e2:c2:75:88:9a:c5:85:dc:2b:f8:8d:
05:dc:48:31:6b:0d:87:2c:b7:a3:12:49:b8:ce:e4:
46:c8:1c:e0:78:a3:58:7d:fd:96:66:b5:89:b5:a0:
de:6d:36:be:18:a2:23:92:19:54:ef:1a:5b:e1:2f:
17:17:b9:52:3f:9a:19:db:b6:a5:ec:78:54:dc:2c:
f0:c5:6d:5d:97:dc:66:72:fa:60:39:7a:d2:3e:da:
b5:08:42:95:ff:b7:85:23:36:c8:78:b0:00:a8:db:
d1:08:34:b6:9e:85:2b:e4:65:6b:05:f9:b8:0f:88:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:37:48:D8:21:E0:35:2A:16:B4:CF:CD:FB:12:5F:08:6C:34:6B:44
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/uzdI2CHgNSoWtM_N-xJfCGw0a0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.16.0-45.10.18.255
45.88.5.0-45.88.7.255
45.95.40.0/22
45.130.100.0/22
83.229.23.0/24
83.229.34.0/24
95.178.107.0/24
185.90.223.0/24
185.144.56.0/22
188.191.48.0/22
217.194.153.0/24
IPv6:
2a05:e4c0::/29
Signature Algorithm: sha256WithRSAEncryption
2a:fb:63:91:f9:cb:ff:01:76:99:cb:9d:18:e8:c7:78:0a:3c:
6e:e1:ee:b4:09:1b:1c:3e:60:03:d5:24:75:e4:2f:9c:0c:3c:
a0:54:48:ac:c9:27:55:25:40:b6:dc:79:db:09:6c:c2:c3:5a:
dc:a7:86:f2:c7:a7:9d:d1:2f:eb:54:15:43:05:2e:d4:13:7a:
13:9e:5c:f7:49:12:95:63:ea:3a:fd:62:54:95:31:ef:94:2d:
a2:ff:22:67:58:e3:bb:4a:7e:c5:16:8c:ec:d7:d4:66:38:2b:
74:2b:35:14:59:87:2e:91:08:92:28:f5:2d:22:73:12:c0:de:
13:d3:55:ff:13:cc:ad:11:1b:09:a2:b4:a9:fa:04:45:bc:c6:
3f:7a:aa:16:2b:03:93:e3:4f:f5:c2:13:9b:85:64:a8:8c:2d:
76:cf:5e:b1:37:7f:ae:60:a4:96:c3:a0:64:2e:fa:a5:50:67:
03:be:dd:12:50:72:08:e7:40:38:09:01:8e:e5:f8:c3:f0:1f:
78:ec:ce:3d:d0:d5:f8:ef:de:54:95:5a:f8:8b:eb:b0:46:86:
97:a0:66:e6:a4:1a:e1:5b:4f:fa:4e:0b:33:3d:c1:a3:cd:1b:
cb:22:4d:68:69:33:cb:1c:c2:ec:ca:f2:c6:5e:8d:91:3c:00:
72:0d:bb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org