Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/DsfJuRgmS0fN7-BqWPvCWEnk0lk.roa
File: DsfJuRgmS0fN7-BqWPvCWEnk0lk.roa (raw, json)
Hash identifier: yaPjiz3UemucOgYRyE3VF1IM/PISYB+o67QgMMi3usw=
Subject key identifier: 0E:C7:C9:B9:18:26:4B:47:CD:EF:E0:6A:58:FB:C2:58:49:E4:D2:59
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 018D2CA2ED79FD92D1A632BA6A711A055BC4
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/DsfJuRgmS0fN7-BqWPvCWEnk0lk.roa
Signing time: Sun 21 Jan 2024 15:28:11 +0000
ROA not before: Sun 21 Jan 2024 15:28:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49037
IP address blocks: 46.226.160.0/21 maxlen: 32
80.72.16.0/21 maxlen: 32
80.72.24.0/22 maxlen: 32
92.118.72.0/22 maxlen: 32
92.246.132.0/22 maxlen: 32
92.246.136.0/21 maxlen: 32
94.141.100.0/22 maxlen: 32
95.174.96.0/19 maxlen: 32
178.212.139.0/24 maxlen: 32
185.9.184.0/22 maxlen: 32
185.136.32.0/22 maxlen: 32
185.230.240.0/22 maxlen: 32
185.230.241.0/24 maxlen: 24
185.230.242.0/24 maxlen: 24
217.144.176.0/20 maxlen: 32
2a00:8740::/32 maxlen: 128
2a0b:1c40::/29 maxlen: 128
2a12:3280::/32 maxlen: 128
Validation: Failed, certificate revoked on Wed 06 Mar 2024 12:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2c:a2:ed:79:fd:92:d1:a6:32:ba:6a:71:1a:05:5b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Jan 21 15:28:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ec7c9b918264b47cdefe06a58fbc25849e4d259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:58:5c:05:be:ab:4c:20:55:86:2f:35:bb:2c:
f8:66:7b:2b:58:2b:c5:8a:2c:9c:73:dc:f0:e1:1a:
c4:b9:a7:30:14:10:ab:9f:80:b1:2e:b1:45:1e:05:
c6:1e:c3:7d:fd:74:24:7b:fa:80:ea:78:16:8f:03:
46:1e:3d:cd:45:2b:e9:85:73:5e:1d:8d:f9:50:39:
20:4a:4a:a6:2a:7a:8c:6e:10:94:73:e8:14:fd:11:
70:09:1f:bb:f9:b7:c9:d1:76:16:aa:a3:89:7a:c3:
c1:8b:78:1e:47:54:56:00:8e:8c:48:f9:19:1e:1a:
5b:68:41:6b:d3:5e:98:bd:30:7b:58:b6:ca:b0:37:
19:85:80:26:56:d1:af:91:31:81:a9:e5:59:4e:42:
10:65:82:7e:f9:8d:5f:fc:84:8b:e0:a9:49:a6:01:
5d:2e:16:6a:0f:af:c2:63:ae:c7:92:0b:d3:36:ae:
05:fb:4a:69:42:6a:1d:6b:d3:15:16:a0:bf:9e:13:
3c:5d:ca:d1:e4:63:cf:49:5e:2c:ae:86:4c:b5:56:
ea:bb:3e:4c:81:57:c9:d0:1d:ad:21:5c:8f:14:18:
96:92:34:c6:41:bb:06:c7:e4:cf:e9:7a:06:96:8c:
25:34:0d:c2:c3:9d:17:95:f8:e2:5a:47:7d:6c:bc:
94:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C7:C9:B9:18:26:4B:47:CD:EF:E0:6A:58:FB:C2:58:49:E4:D2:59
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/DsfJuRgmS0fN7-BqWPvCWEnk0lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.160.0/21
80.72.16.0-80.72.27.255
92.118.72.0/22
92.246.132.0-92.246.143.255
94.141.100.0/22
95.174.96.0/19
178.212.139.0/24
185.9.184.0/22
185.136.32.0/22
185.230.240.0/22
217.144.176.0/20
IPv6:
2a00:8740::/32
2a0b:1c40::/29
2a12:3280::/32
Signature Algorithm: sha256WithRSAEncryption
42:0f:94:99:3b:97:20:b5:d4:d5:c8:92:2b:a7:54:30:66:68:
04:79:33:68:d9:54:70:02:42:17:c1:82:e5:9a:00:b3:d4:9b:
ce:2a:d3:23:b9:de:54:4a:3a:0a:3b:1b:c4:0d:af:57:e8:38:
e5:3f:0f:30:c7:5b:d2:51:8f:12:1e:5c:3a:bc:36:da:00:e0:
a0:49:4f:49:5a:7b:92:15:38:59:b7:03:02:b1:42:3a:91:c4:
9c:23:ec:53:36:77:b7:5a:a7:63:83:a5:bb:80:95:dd:d7:90:
e0:c9:11:71:98:87:1e:48:d1:3a:e9:c8:36:7f:65:ac:9c:bf:
bf:21:88:a7:e1:e1:9c:6a:3b:bc:7a:e4:4a:5b:55:ac:2e:01:
a1:1f:69:ef:77:94:b4:ed:20:37:97:02:92:41:db:94:08:df:
65:c8:5e:77:20:d7:46:5f:a4:1a:b3:82:16:91:af:c0:8d:01:
32:1d:f0:85:da:56:18:a6:50:b2:d3:39:34:3c:22:12:ff:96:
29:60:22:9e:02:f2:3e:3d:70:d5:fa:36:d5:cd:eb:5a:fd:ef:
2a:89:2a:0f:93:da:7e:7f:8c:88:4c:9d:b8:2c:bf:67:ae:20:
fc:eb:ab:23:4f:e0:cc:04:f0:29:1c:51:87:e2:2a:9b:ee:ec:
71:db:c2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:44 2024 by rpki-client on console-fra.rpki-client.org