Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/Ah8L4j8XklH4sm0dfTnhA42Ylmo.roa
File: Ah8L4j8XklH4sm0dfTnhA42Ylmo.roa (raw, json)
Hash identifier: 0du3SdlQt5Npq9jk2hO75iusdeH9ox5GU5pcgP+Y328=
Subject key identifier: 02:1F:0B:E2:3F:17:92:51:F8:B2:6D:1D:7D:39:E1:03:8D:98:96:6A
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 01856C0126532AE1A37E483AF95AC1C5AA4C
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/Ah8L4j8XklH4sm0dfTnhA42Ylmo.roa
Signing time: Sun 01 Jan 2023 06:24:52 +0000
ROA not before: Sun 01 Jan 2023 06:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44654
IP address blocks: 185.36.124.0/22 maxlen: 24
185.36.127.0/24 maxlen: 24
109.205.8.0/21 maxlen: 24
37.252.215.0/24 maxlen: 24
37.252.211.0/24 maxlen: 24
37.252.210.0/23 maxlen: 23
37.252.210.0/24 maxlen: 24
37.252.209.0/24 maxlen: 24
37.252.208.0/24 maxlen: 24
37.252.208.0/23 maxlen: 23
37.252.213.0/24 maxlen: 24
37.252.212.0/24 maxlen: 24
37.252.212.0/23 maxlen: 23
93.93.96.0/21 maxlen: 24
2a02:d8:8::/48 maxlen: 48
2a02:d8:9::/48 maxlen: 48
2a02:d8:a::/48 maxlen: 48
2a02:d8::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 12 Jun 2023 12:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:26:53:2a:e1:a3:7e:48:3a:f9:5a:c1:c5:aa:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Jan 1 06:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=021f0be23f179251f8b26d1d7d39e1038d98966a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:a3:a7:33:c6:4f:a8:89:2d:a4:cb:0b:55:
34:35:fc:e2:da:f1:2b:84:36:16:a8:65:f9:d8:84:
f1:cd:2a:61:e2:65:b0:82:57:dd:84:84:9a:c6:0a:
be:16:2a:b4:31:21:92:c1:2b:67:9f:23:73:0c:76:
59:b6:ac:7a:79:22:68:42:d4:6d:fa:4c:e9:db:31:
b1:a6:14:01:7c:b4:fd:48:5c:e6:3c:cf:e3:d2:1d:
42:9a:81:30:d3:b5:f3:bf:92:bc:c6:40:27:6a:60:
16:bc:f1:60:49:c5:a6:dc:b4:c6:9e:f9:d3:b0:9e:
50:b1:38:ee:7a:2a:17:cf:7a:6f:d6:18:33:dc:f1:
ed:43:2f:72:80:b7:f2:90:cb:d4:5b:e0:e7:9f:44:
d2:1f:7d:7d:37:57:12:7a:3f:55:d7:b1:28:4a:4d:
80:bb:e5:48:a2:a6:85:de:de:2d:06:4e:2d:61:c8:
0e:f1:2f:79:be:5d:a3:d7:21:1d:8e:11:f8:98:38:
f6:68:d9:5d:e0:3c:ae:96:0f:17:27:fc:0b:6f:94:
d8:e5:e5:5d:af:b5:66:91:15:de:e2:5e:a2:e8:0f:
2a:5c:51:ae:76:30:44:38:7e:9d:92:71:15:9f:28:
14:89:37:66:6e:27:27:28:73:8c:e6:48:87:ae:78:
27:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1F:0B:E2:3F:17:92:51:F8:B2:6D:1D:7D:39:E1:03:8D:98:96:6A
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/Ah8L4j8XklH4sm0dfTnhA42Ylmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.208.0-37.252.213.255
37.252.215.0/24
93.93.96.0/21
109.205.8.0/21
185.36.124.0/22
IPv6:
2a02:d8::/32
Signature Algorithm: sha256WithRSAEncryption
82:f9:4e:48:6f:1f:2a:e5:71:d7:cf:18:a1:9a:6d:a4:14:98:
73:02:84:c3:fc:91:81:2c:2b:ad:47:43:9b:2f:8b:f3:c8:1a:
17:4a:22:c7:f8:2d:dc:67:5e:76:60:03:90:50:3c:7d:2e:76:
2a:e2:4f:b5:e1:4f:37:18:5b:e6:06:c3:88:fe:61:4e:13:2a:
e0:3c:64:8d:a9:a3:72:02:0f:07:b9:c6:90:e1:69:6f:bf:36:
d0:54:8c:6d:2d:68:e1:0f:48:bc:22:c3:54:c8:37:12:71:b2:
b8:3e:3b:d1:cb:5f:da:93:01:59:bd:f8:a5:90:ca:9c:cd:8e:
bf:b6:7f:0f:b9:de:e9:04:5e:e8:1f:5d:06:c8:09:16:b5:1a:
2c:50:6e:55:b4:d9:77:81:f9:3a:4b:9c:39:9f:d9:47:e7:25:
d8:f6:89:7f:9e:43:f4:45:7b:64:9a:32:e1:0b:d6:08:e7:e7:
46:09:b9:20:8d:7a:e9:21:72:d4:b4:35:a0:20:b3:7a:4a:ca:
cc:99:b5:93:b3:e3:d5:2b:fb:a0:dc:a0:1c:9a:d0:35:bc:c7:
a7:4b:36:fb:d1:f5:dc:b8:72:9e:d3:f5:80:49:71:3f:d5:ce:
90:28:55:35:a3:0e:86:f2:e2:83:6b:56:dc:cc:75:50:61:32:
b9:6f:e6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:11 2024 by rpki-client on console-fra.rpki-client.org