Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/2DurplO-zXr3ehg4sFgBlKeFbvc.roa
File: 2DurplO-zXr3ehg4sFgBlKeFbvc.roa (raw, json)
Hash identifier: EBTpaG1UwMxpBmYVuMbfGcS1wTD8NugvuTPWcJ+Slo0=
Subject key identifier: D8:3B:AB:A6:53:BE:CD:7A:F7:7A:18:38:B0:58:01:94:A7:85:6E:F7
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 018CC94E5D0E6DD46FBCD173D30704D37591
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/2DurplO-zXr3ehg4sFgBlKeFbvc.roa
Signing time: Tue 02 Jan 2024 08:33:25 +0000
ROA not before: Tue 02 Jan 2024 08:33:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41412
IP address blocks: 46.245.176.0/21 maxlen: 24
89.38.36.0/23 maxlen: 24
185.187.64.0/22 maxlen: 24
91.230.172.0/22 maxlen: 24
194.1.181.0/24 maxlen: 24
91.90.144.0/20 maxlen: 24
195.93.242.0/23 maxlen: 24
109.70.216.0/21 maxlen: 24
86.105.222.0/23 maxlen: 24
2a00:14e0::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 26 Apr 2024 15:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:5d:0e:6d:d4:6f:bc:d1:73:d3:07:04:d3:75:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 08:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d83baba653becd7af77a1838b0580194a7856ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1f:bf:df:d4:ec:74:d2:55:e5:7a:89:5f:b9:
0c:ef:dc:16:ca:ae:c5:ed:3b:db:7f:a4:95:86:cc:
3b:b9:30:89:32:6c:d1:dd:b5:60:db:af:c3:04:e7:
6d:47:f6:6f:64:32:57:a3:37:1a:54:75:25:71:f3:
b1:96:2d:57:be:20:ce:88:a3:f2:12:a2:3a:1f:b8:
b7:83:5b:50:26:26:c4:93:25:51:f6:29:d1:b5:c6:
48:54:2b:10:38:f4:42:2a:68:0c:3b:af:66:b6:1c:
65:47:7b:bd:3c:23:c7:7c:f7:e0:ec:fd:84:65:6e:
c0:4a:c7:19:bf:62:29:cc:aa:16:aa:77:bd:62:6f:
55:52:81:1e:79:0d:28:1d:1d:81:66:86:f5:a7:7c:
d1:42:6a:33:4f:fe:d5:c9:33:b0:8f:6c:26:cc:87:
28:b6:4d:f8:61:6c:08:7a:56:fd:77:81:6d:79:25:
4e:d1:55:5f:0a:d3:09:6d:8f:a0:8f:c0:24:82:43:
53:58:19:b2:80:67:2c:21:e7:21:32:ef:75:de:f8:
dd:78:a7:53:70:0b:f6:15:b2:a4:e5:0c:c7:d7:28:
d0:9a:9e:78:77:26:0d:9b:71:4a:51:7e:8b:96:b0:
c6:6c:b9:34:05:da:36:3e:89:c4:1c:7d:f3:41:10:
38:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3B:AB:A6:53:BE:CD:7A:F7:7A:18:38:B0:58:01:94:A7:85:6E:F7
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/2DurplO-zXr3ehg4sFgBlKeFbvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.176.0/21
86.105.222.0/23
89.38.36.0/23
91.90.144.0/20
91.230.172.0/22
109.70.216.0/21
185.187.64.0/22
194.1.181.0/24
195.93.242.0/23
IPv6:
2a00:14e0::/29
Signature Algorithm: sha256WithRSAEncryption
68:4b:c3:74:f7:96:5c:50:5a:b0:83:cf:ff:f8:04:2c:40:1d:
11:2e:02:44:c9:81:52:09:8f:70:74:bf:6b:0a:04:e4:0a:a9:
cc:c6:f8:40:f3:ac:f5:6e:cf:d2:8b:99:35:60:db:c2:56:a5:
d4:4a:7f:e9:a8:54:0c:82:ca:3f:04:c9:50:1e:21:96:a6:54:
01:cb:da:c2:3c:15:9b:ac:33:7e:02:2d:5b:df:00:bf:b7:c6:
44:ab:7f:f7:6b:fe:b8:ab:51:ea:a3:48:34:35:3b:12:21:c7:
5a:f5:4b:8f:11:06:14:0e:9c:f2:7a:eb:a8:58:4e:97:2a:3f:
a7:84:de:b7:a7:af:c1:32:9a:96:91:9b:33:8a:90:31:bc:5b:
de:09:f9:32:d7:57:fd:94:60:f6:c0:46:e7:1e:ab:1e:2f:12:
54:32:48:5d:e8:5d:f4:a7:6d:c3:2b:11:8e:2d:67:ea:95:c1:
a8:62:f6:ea:49:02:a6:73:6c:09:e9:17:ec:b0:e7:bd:4f:df:
02:4a:f5:09:c5:3d:38:fd:24:cd:e6:b0:2d:dd:5c:39:5c:11:
8c:7f:df:43:83:be:83:96:a1:07:99:c5:02:de:0b:54:e6:9a:
88:9f:51:f3:25:65:b3:95:db:20:89:1a:e5:8b:c0:05:a5:f2:
4f:1c:41:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:21 2024 by rpki-client on console-ams.rpki-client.org