Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/w8Ac0JGTVa5Qq2g-cX5Zcy8gymA.roa
File: w8Ac0JGTVa5Qq2g-cX5Zcy8gymA.roa (raw, json)
Hash identifier: siJaxtbCRFSNZfPkHrDx7j1Wlutu6T9Rfl/zLGQiLfw=
Subject key identifier: C3:C0:1C:D0:91:93:55:AE:50:AB:68:3E:71:7E:59:73:2F:20:CA:60
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 0188BBEB5A1C7C1E2B36F9605638F7EED942
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/w8Ac0JGTVa5Qq2g-cX5Zcy8gymA.roa
Signing time: Wed 14 Jun 2023 21:59:03 +0000
ROA not before: Wed 14 Jun 2023 21:59:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28716
IP address blocks: 217.19.151.0/24 maxlen: 24
217.19.156.0/24 maxlen: 24
77.95.136.0/21 maxlen: 24
77.95.136.0/24 maxlen: 24
80.94.116.0/24 maxlen: 24
80.94.112.0/20 maxlen: 24
217.19.144.0/20 maxlen: 24
78.159.216.0/21 maxlen: 24
185.61.12.0/22 maxlen: 24
45.89.180.0/22 maxlen: 24
185.41.212.0/22 maxlen: 22
78.159.192.0/21 maxlen: 24
46.243.32.0/21 maxlen: 24
46.243.38.0/24 maxlen: 24
2001:1bd0::/29 maxlen: 48
2a01:5d20::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bb:eb:5a:1c:7c:1e:2b:36:f9:60:56:38:f7:ee:d9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Jun 14 21:59:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3c01cd0919355ae50ab683e717e59732f20ca60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:05:04:17:5d:79:22:6b:ec:9c:80:01:33:
e3:b7:8f:3b:a4:fc:5b:b6:cd:04:cd:94:4d:55:b0:
79:e4:47:73:dd:82:a8:ba:7f:ef:ff:59:f9:45:0f:
66:e3:c3:27:54:65:54:44:b4:de:62:5c:45:fb:3c:
5d:4f:d6:16:86:8b:11:9a:1c:a8:2d:65:75:2a:29:
39:40:ef:33:35:47:2f:94:50:bc:e7:74:60:1f:79:
93:2c:49:38:bc:4e:97:1e:3c:c5:77:21:ad:a6:6c:
01:0c:75:e1:32:c3:3a:47:19:59:c8:98:12:77:94:
1b:2d:1f:d7:d1:ca:bc:af:34:a7:81:6e:45:f9:fb:
e3:9a:c1:e4:87:30:6c:1e:d6:13:f2:0d:d9:d8:17:
28:90:b1:28:71:1d:ee:59:5c:8f:71:92:fa:46:48:
cc:ed:b3:d6:ce:b6:a3:6f:4d:49:c4:ba:5a:7b:9c:
a1:5c:a1:37:87:b6:6f:e9:e1:78:27:f6:a1:32:9c:
5c:97:fa:64:38:03:45:53:86:3f:cb:59:d4:1b:b8:
d7:a5:1a:cc:67:94:83:9e:95:45:c4:b1:3d:f7:d1:
4e:2a:a7:32:81:97:06:3a:87:a7:c8:16:aa:0e:a2:
76:f3:cc:4b:a8:d9:f4:20:c5:3c:93:23:27:46:2f:
42:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C0:1C:D0:91:93:55:AE:50:AB:68:3E:71:7E:59:73:2F:20:CA:60
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/w8Ac0JGTVa5Qq2g-cX5Zcy8gymA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.180.0/22
46.243.32.0/21
77.95.136.0/21
78.159.192.0/21
78.159.216.0/21
80.94.112.0/20
185.41.212.0/22
185.61.12.0/22
217.19.144.0/20
IPv6:
2001:1bd0::/29
2a01:5d20::/29
Signature Algorithm: sha256WithRSAEncryption
31:54:23:6c:e6:ed:d4:43:b0:14:b6:23:0e:58:8b:1d:05:55:
59:c3:c9:32:48:9a:8d:e0:e1:4e:be:9b:d9:b3:b0:62:93:f4:
49:9e:67:11:81:64:66:0d:94:10:e2:ef:a6:f5:fa:65:d1:53:
74:cb:f3:e7:a4:9c:bd:8f:18:cd:ae:b9:1b:85:12:0c:ec:21:
b0:65:3e:e7:75:9a:e6:bd:6c:2f:5f:f1:ac:b0:32:d5:c4:32:
24:7e:1f:e9:ef:fe:68:16:31:1e:f3:82:54:67:1c:7f:16:db:
f5:fd:fa:ae:2c:1a:8b:aa:a6:e6:ae:ec:6c:65:00:2f:2d:ac:
d6:a7:cb:c2:f8:b6:d1:35:d8:c8:e5:3c:6e:a6:6e:92:1a:33:
5f:55:de:bd:8b:87:05:6c:4e:a1:58:cc:bf:a3:89:e0:94:29:
35:c8:3b:e0:bc:37:0c:91:4e:77:cc:e6:5d:21:d8:db:21:7c:
3c:52:da:6e:51:72:75:fe:78:64:b0:08:88:ef:90:b1:18:b1:
cd:8c:de:db:19:1c:64:83:bf:45:f6:58:da:13:f9:79:a1:1e:
50:79:55:9f:7c:93:92:68:3c:4f:d7:55:86:fb:56:45:2a:00:
3a:30:01:b9:b5:bb:73:ce:bc:16:21:2c:f7:43:15:14:bc:d2:
8c:27:e8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:14 2024 by rpki-client on console-fra.rpki-client.org