Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/1-AhnUhx19R3EOdwe3mS_QtpLiWk.roa
File: 1-AhnUhx19R3EOdwe3mS_QtpLiWk.roa (raw, json)
Hash identifier: rE4HD/eRRmhp+I5wWuilqzjhyPmZ6FyPjSQj+0JyZfs=
Subject key identifier: F8:08:67:52:1C:75:F5:1D:C4:39:DC:1E:DE:64:BF:42:DA:4B:89:69
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 01856EAFD141ABA52A2FAB7CE72EEBFBB08D
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/1-AhnUhx19R3EOdwe3mS_QtpLiWk.roa
Signing time: Sun 01 Jan 2023 18:54:54 +0000
ROA not before: Sun 01 Jan 2023 18:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13101
IP address blocks: 45.145.236.0/22 maxlen: 22
185.234.200.0/22 maxlen: 22
192.166.40.0/22 maxlen: 22
46.22.152.0/21 maxlen: 21
202.71.144.0/21 maxlen: 21
109.94.212.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:d1:41:ab:a5:2a:2f:ab:7c:e7:2e:eb:fb:b0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Jan 1 18:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f80867521c75f51dc439dc1ede64bf42da4b8969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b6:06:6f:2e:af:96:f2:07:12:7a:3a:1d:55:
6b:b1:2a:b6:93:2e:dc:4f:cd:dc:8e:fc:48:05:b9:
b3:84:90:8f:32:dc:30:ca:98:4f:d3:49:7e:ba:f7:
17:ee:80:a7:db:61:f2:32:67:e8:d6:0c:1a:e4:cb:
af:15:78:69:3c:f4:cb:6a:fb:51:69:b7:e4:76:86:
d5:47:c7:f1:57:ef:6b:b7:6a:1e:52:87:54:bc:2d:
ac:11:5f:e2:47:88:cb:46:c0:0a:84:90:8d:14:14:
ab:af:3c:2f:8c:74:31:5f:50:fb:cf:46:76:28:c4:
6e:29:b1:9b:b9:32:b8:a9:10:e0:c3:5a:ac:72:e4:
64:db:66:41:76:63:6c:c4:ee:52:9a:1f:7f:85:ec:
9f:de:30:d2:6b:22:a2:78:c5:bf:6a:4d:15:b5:ed:
fd:6a:64:52:51:91:ad:19:00:c3:04:14:23:a5:78:
b4:bb:33:00:43:5e:8b:ed:d8:98:c6:38:1a:b5:25:
41:70:62:de:25:c2:25:f2:56:1b:ca:f1:be:89:df:
41:1f:7e:f5:57:3c:2e:13:69:d7:25:51:2d:01:da:
bb:7c:71:16:0b:4e:2c:e4:84:75:ce:05:5d:42:ab:
9e:a0:72:ca:64:cb:42:9d:a1:6d:88:93:d6:93:f0:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:08:67:52:1C:75:F5:1D:C4:39:DC:1E:DE:64:BF:42:DA:4B:89:69
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/1-AhnUhx19R3EOdwe3mS_QtpLiWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.236.0/22
46.22.152.0/21
109.94.212.0/22
185.234.200.0/22
192.166.40.0/22
202.71.144.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:2f:8e:4d:97:45:19:54:b0:fc:b0:a1:61:92:54:6c:d9:e1:
c3:2b:e7:28:f9:cb:5a:5b:be:dc:2a:9f:92:c5:f4:9f:fd:e1:
80:5d:58:c5:e6:c1:70:de:29:3e:2d:a2:d6:2c:fa:4b:d7:b6:
ab:a6:85:3a:4f:3a:76:2a:19:58:bf:2b:22:c5:6f:c3:ec:9c:
7c:55:c6:e0:c1:f2:f6:eb:4d:06:e9:2a:d7:6f:89:cd:b1:2d:
ae:aa:ca:f7:83:b2:00:6c:70:8e:61:12:9f:c2:e5:e6:b8:fc:
83:8d:ba:dd:47:ef:27:8f:8e:f1:d5:80:5a:fb:12:7f:f6:91:
9e:a2:5b:22:ab:59:be:bf:1a:42:60:bd:6b:5f:97:76:dc:fa:
47:45:76:ba:c5:08:fc:3f:4e:3c:ab:38:50:54:4a:f8:e9:02:
ed:75:3a:17:c6:25:69:13:ef:6b:3b:15:b8:42:1c:d3:ef:94:
6b:8b:9d:26:72:e0:02:91:15:10:3d:65:c1:66:31:08:e3:da:
d7:fc:a5:ce:64:7f:fe:6f:b4:35:2d:99:17:82:2f:bd:82:ac:
0c:43:b1:52:d6:dc:9c:82:00:97:10:b8:8d:48:7f:ba:5b:3c:
9e:9c:ff:44:97:09:51:01:fd:05:76:b8:7a:d8:29:f9:1d:4b:
b1:89:0e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:32 2024 by rpki-client on console-ams.rpki-client.org