Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/l2aYo159AsC-8ENo5XVQ20gYTM4.roa
File: l2aYo159AsC-8ENo5XVQ20gYTM4.roa (raw, json)
Hash identifier: oXCnqQiFEJB72rx8P1jllOSH5l7AIZrvMkdtbrr0Q2w=
Subject key identifier: 97:66:98:A3:5E:7D:02:C0:BE:F0:43:68:E5:75:50:DB:48:18:4C:CE
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0191C53444CA8813CA71A636089722E3E60E
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/l2aYo159AsC-8ENo5XVQ20gYTM4.roa
Signing time: Fri 06 Sep 2024 02:40:22 +0000
ROA not before: Fri 06 Sep 2024 02:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 46.249.110.0/24 maxlen: 24
82.115.9.0/24 maxlen: 24
82.115.28.0/23 maxlen: 24
89.251.10.0/24 maxlen: 24
91.132.57.0/24 maxlen: 24
159.255.32.0/22 maxlen: 22
159.255.36.0/22 maxlen: 22
185.231.172.0/22 maxlen: 24
188.214.236.0/22 maxlen: 22
188.253.8.0/21 maxlen: 24
202.133.90.0/23 maxlen: 24
213.173.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 03:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c5:34:44:ca:88:13:ca:71:a6:36:08:97:22:e3:e6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 6 02:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=976698a35e7d02c0bef04368e57550db48184cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:38:e9:a5:c9:98:c6:87:1c:7a:7b:c3:40:c4:
79:1c:16:5a:17:37:a3:2e:53:65:41:52:41:b2:69:
2d:89:94:40:ae:3b:a9:6b:15:e7:8b:88:76:53:2d:
af:09:ef:3e:a8:be:2e:96:41:cc:02:93:f0:26:10:
d9:47:88:de:73:5e:fe:11:c5:68:bd:41:a4:29:19:
39:62:50:03:33:20:1d:80:5b:86:48:74:78:40:9a:
21:af:4d:98:b9:d2:65:00:55:d0:ce:18:f3:7a:f6:
b2:a9:7e:af:eb:33:51:cf:95:8f:9f:99:9a:6b:0c:
5a:75:2c:6f:44:53:82:6d:ee:1f:8a:5e:c2:88:fb:
69:ee:1c:a6:13:e6:18:62:9d:6f:b5:da:11:55:be:
b0:a8:b8:d9:4b:e5:b2:1c:d2:05:af:0e:3f:5a:8e:
ec:4b:e1:c6:01:22:0d:eb:30:b7:3e:44:5b:10:28:
7a:4c:10:10:e3:7c:42:cd:40:8f:09:ba:22:9b:83:
89:a4:9d:d1:64:db:5e:8c:f2:1b:a0:63:96:c0:7f:
0f:a7:27:25:da:d8:cf:53:24:a0:9f:67:5c:2d:25:
b6:04:f9:be:d7:84:73:1e:9c:bd:db:01:12:30:e4:
c1:51:8f:89:b4:70:8e:c8:e9:30:31:87:9f:6c:73:
45:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:66:98:A3:5E:7D:02:C0:BE:F0:43:68:E5:75:50:DB:48:18:4C:CE
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/l2aYo159AsC-8ENo5XVQ20gYTM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.110.0/24
82.115.9.0/24
82.115.28.0/23
89.251.10.0/24
91.132.57.0/24
159.255.32.0/21
185.231.172.0/22
188.214.236.0/22
188.253.8.0/21
202.133.90.0/23
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
45:52:ef:4c:29:9c:ec:ca:57:66:76:ce:25:ac:06:36:41:14:
74:b3:30:4e:7c:8c:ac:a0:73:89:a1:97:e4:ce:c0:b1:36:aa:
a6:72:0d:94:61:2c:63:58:83:7c:01:cb:b6:78:61:3f:6d:fd:
3f:d8:26:8b:b6:9b:71:98:f1:ef:d5:4c:fa:5d:22:e3:ce:23:
7f:c5:d3:30:26:98:57:4c:ba:3e:93:60:d6:f8:42:09:7c:57:
f0:f0:51:69:fe:62:d3:9e:c7:d4:1a:4d:46:fb:64:a1:0d:ef:
cb:2a:b5:20:6f:ca:c6:65:93:95:c9:6c:cf:cc:2e:61:7a:f8:
04:8f:0c:79:32:2a:c5:e2:e2:07:2d:1c:3d:a1:a7:b5:18:33:
9a:c4:ab:bd:a9:39:f2:a4:40:02:49:61:6b:ef:0e:dc:93:49:
ef:95:65:48:dc:e7:c4:51:53:47:22:46:b0:51:6c:0f:db:61:
70:75:b5:da:8b:88:fd:a1:6d:ec:6b:64:e4:dd:82:b2:4f:12:
f4:50:70:31:18:eb:9b:c2:a5:6a:80:47:3c:3d:c4:98:f8:f4:
e6:c7:7f:93:4d:61:dc:1e:bd:4b:1b:20:41:b1:0f:f9:b9:21:
b0:ba:58:59:c8:f0:71:23:23:52:65:f6:57:92:37:3c:44:5b:
00:bc:80:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 04:08:45 2024 by rpki-client on console-ams.rpki-client.org