Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AhRCZANkTnHjFwA2GIaC5g_PeZo.roa
File: AhRCZANkTnHjFwA2GIaC5g_PeZo.roa (raw, json)
Hash identifier: 9Vz2YVJfgMpx3meW9uyrWEedBo6jkPK/4QLeq0KoIz4=
Subject key identifier: 02:14:42:64:03:64:4E:71:E3:17:00:36:18:86:82:E6:0F:CF:79:9A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018F43B8D29CE4AAB737F34A81320B37EF31
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AhRCZANkTnHjFwA2GIaC5g_PeZo.roa
Signing time: Sat 04 May 2024 13:08:56 +0000
ROA not before: Sat 04 May 2024 13:08:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.146.184.0/22 maxlen: 24
45.156.157.0/24 maxlen: 24
45.156.158.0/24 maxlen: 24
89.33.84.0/24 maxlen: 24
89.35.154.0/24 maxlen: 24
89.37.62.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
91.188.204.0/24 maxlen: 24
91.188.205.0/24 maxlen: 24
91.188.206.0/24 maxlen: 24
91.188.207.0/24 maxlen: 24
93.115.254.0/23 maxlen: 24
178.239.205.0/24 maxlen: 24
185.135.140.0/24 maxlen: 24
185.135.141.0/24 maxlen: 24
185.135.143.0/24 maxlen: 24
185.238.10.0/24 maxlen: 24
185.241.210.0/23 maxlen: 24
185.255.39.0/24 maxlen: 24
188.212.133.0/24 maxlen: 24
188.212.158.0/24 maxlen: 24
188.212.159.0/24 maxlen: 24
188.214.208.0/24 maxlen: 24
188.214.209.0/24 maxlen: 24
188.240.224.0/24 maxlen: 24
188.240.225.0/24 maxlen: 24
188.240.227.0/24 maxlen: 24
188.240.232.0/24 maxlen: 24
188.241.243.0/24 maxlen: 24
193.23.128.0/24 maxlen: 24
193.23.129.0/24 maxlen: 24
213.232.92.0/24 maxlen: 24
213.232.93.0/24 maxlen: 24
213.232.94.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 May 2024 16:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:43:b8:d2:9c:e4:aa:b7:37:f3:4a:81:32:0b:37:ef:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: May 4 13:08:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0214426403644e71e3170036188682e60fcf799a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:51:30:02:3b:c6:d0:52:bb:10:46:c4:3d:bd:
84:e3:ff:9e:02:2c:e8:88:18:a1:a2:54:b3:9d:46:
4a:db:13:39:f6:2c:65:c7:ec:1d:05:93:cd:ba:6c:
2b:56:48:4c:6e:e4:76:17:78:07:3f:c7:77:28:4f:
a2:ba:e0:e6:74:2d:5e:8e:1f:9b:9c:af:fd:42:0c:
f3:45:d6:1d:7e:e0:fd:7d:9b:3c:2c:8f:24:85:c3:
e1:9e:8a:7e:ba:14:5b:ca:93:72:30:b7:ad:71:81:
47:d3:d2:71:3a:20:2c:80:a4:ca:d6:ee:02:a4:bd:
40:7c:b3:1f:0f:79:bc:b1:2f:9b:d3:f6:d9:32:a3:
13:c6:71:fe:27:ea:f3:0a:2b:04:2b:e4:ab:f0:3c:
d3:78:d3:8a:a4:c9:4b:3d:7d:6f:01:d4:58:8d:a4:
53:62:2e:5e:c6:08:44:1e:d5:66:9e:0d:dc:08:d2:
6a:bb:d1:68:75:99:aa:12:23:d6:d8:20:67:bc:45:
39:3a:c6:b9:54:82:d2:9f:c0:cf:61:58:b6:05:8b:
71:b6:91:89:0b:38:1f:6a:3b:bc:a1:14:bf:ab:47:
b3:b4:a2:1b:84:58:fd:df:78:39:f4:1c:31:e1:1c:
ff:a6:7d:6d:53:3a:89:c1:d1:4e:ae:3b:41:d1:ff:
c3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:14:42:64:03:64:4E:71:E3:17:00:36:18:86:82:E6:0F:CF:79:9A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AhRCZANkTnHjFwA2GIaC5g_PeZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.184.0/22
45.156.157.0-45.156.158.255
89.33.84.0/24
89.35.154.0/24
89.37.62.0/23
91.188.204.0/22
93.115.254.0/23
178.239.205.0/24
185.135.140.0/23
185.135.143.0/24
185.238.10.0/24
185.241.210.0/23
185.255.39.0/24
188.212.133.0/24
188.212.158.0/23
188.214.208.0/23
188.240.224.0/23
188.240.227.0/24
188.240.232.0/24
188.241.243.0/24
193.23.128.0/23
213.232.92.0/22
Signature Algorithm: sha256WithRSAEncryption
71:d3:e2:b4:3f:06:84:29:6c:69:48:36:55:53:78:54:1d:dc:
76:33:df:e0:65:b2:1c:f1:05:b8:8a:ac:2b:5f:d2:4e:8d:1a:
ac:92:9a:bc:e2:94:54:4d:74:f2:ea:4f:c7:7b:75:c6:cd:8e:
0c:4e:de:c0:e0:8b:f9:7c:0f:1f:fa:91:0b:45:26:e2:96:07:
f5:3b:6f:44:ab:d9:cd:c2:01:cd:72:6c:2a:5e:79:b5:95:83:
91:af:fd:fe:f7:34:31:d9:30:e1:48:bb:d1:cc:00:6e:58:05:
78:62:ed:19:02:70:d5:72:a1:a4:ea:d7:2c:ce:bb:cd:96:2d:
0b:fc:fd:be:c7:84:40:6c:b5:c6:29:66:e8:ff:23:41:6b:5a:
9b:01:40:4d:7f:c0:f1:3c:19:ab:f7:71:9e:8a:5d:d0:98:fd:
63:a2:c5:ad:d3:64:b4:ef:56:d4:97:7a:f8:61:b6:f2:33:67:
52:bd:71:0e:25:39:8b:15:d6:ad:4c:09:7c:51:c9:53:dd:23:
41:a1:43:d0:c6:cb:8f:08:5e:66:ed:37:19:ff:88:a1:ea:0e:
1d:e7:3d:f4:6a:40:d8:68:ae:a4:7a:d8:73:29:2a:bb:d0:93:
34:8e:98:e5:18:51:71:90:9c:30:3d:a3:de:e8:ef:f8:d6:7e:
40:3a:49:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 19:10:21 2024 by rpki-client on console-ams.rpki-client.org