Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/FW45LVJMmbsjGbSFOuEkmkUHu0Q.roa
File: FW45LVJMmbsjGbSFOuEkmkUHu0Q.roa (raw, json)
Hash identifier: 9bSBwTo4vZUX9vfV+xaJSmn8ZEN3TVkCaA68nvyrc8Q=
Subject key identifier: 15:6E:39:2D:52:4C:99:BB:23:19:B4:85:3A:E1:24:9A:45:07:BB:44
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01909DE3DE14CA338696D773CE265C5BCB75
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/FW45LVJMmbsjGbSFOuEkmkUHu0Q.roa
Signing time: Wed 10 Jul 2024 18:24:34 +0000
ROA not before: Wed 10 Jul 2024 18:24:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6461
IP address blocks: 46.232.4.0/23 maxlen: 24
149.126.195.0/24 maxlen: 24
149.126.198.0/24 maxlen: 24
149.126.201.0/24 maxlen: 24
149.126.202.0/24 maxlen: 24
149.126.204.0/24 maxlen: 24
149.126.205.0/24 maxlen: 24
149.126.208.0/24 maxlen: 24
149.126.210.0/24 maxlen: 24
149.126.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jul 2024 12:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9d:e3:de:14:ca:33:86:96:d7:73:ce:26:5c:5b:cb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 10 18:24:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=156e392d524c99bb2319b4853ae1249a4507bb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:69:7c:63:38:c5:8f:90:5a:79:cf:3f:9a:
41:a3:3b:4b:77:4c:fd:15:24:1c:a2:be:c1:56:f2:
7a:ec:bf:44:4d:1b:4e:b7:3a:b8:26:bf:67:99:d9:
c3:7e:04:93:9c:37:a3:eb:cc:4f:7c:22:14:b5:6c:
b4:f7:a1:fa:a9:e4:d2:6b:b5:09:42:07:66:4c:c7:
66:59:0b:b9:b9:b5:e9:b8:8a:c8:c4:25:9a:8a:da:
d4:c1:01:39:d7:dd:61:e3:e1:64:17:2e:d6:10:b0:
b4:92:f0:58:77:46:68:8a:f4:e5:fd:b2:48:93:72:
27:75:e0:5f:b1:17:37:34:a7:53:26:b6:0b:fb:ae:
31:a4:48:84:88:19:f1:1f:4b:49:d7:77:d3:79:2f:
98:d5:e5:2a:ad:a3:d0:91:d4:cd:8b:b6:61:af:1e:
f6:f4:5c:d9:c5:b8:44:e3:23:b5:42:db:c3:f8:71:
90:4a:95:09:fe:e0:3e:34:00:10:b2:57:a1:3c:e2:
83:ac:f8:05:ab:16:da:a8:1d:68:98:d9:e1:e4:7b:
f9:45:64:9d:11:28:15:68:f3:55:e9:ce:08:69:91:
a5:c4:5d:df:38:3e:7a:8b:62:63:b1:ce:41:eb:d4:
09:8f:1b:ff:52:61:f8:98:18:77:98:2a:ff:dd:9f:
f1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6E:39:2D:52:4C:99:BB:23:19:B4:85:3A:E1:24:9A:45:07:BB:44
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/FW45LVJMmbsjGbSFOuEkmkUHu0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.4.0/23
149.126.195.0/24
149.126.198.0/24
149.126.201.0-149.126.202.255
149.126.204.0/23
149.126.208.0/24
149.126.210.0/24
149.126.225.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:9c:f7:7d:5b:c3:0e:fa:a8:2d:53:83:9c:30:f2:9e:7a:a7:
d6:9f:54:9d:c9:90:7d:09:46:cd:b4:ea:9a:ec:0c:15:7a:22:
04:13:65:2b:db:b8:65:8c:37:91:31:e2:09:bc:30:ed:a2:b8:
a1:94:68:1f:b8:6d:ea:42:45:3d:1a:93:c8:8b:17:90:e4:d9:
9a:c5:09:9f:95:3e:13:a8:5b:b3:5b:06:7a:89:92:75:14:0d:
d9:be:8b:6c:7b:a8:98:88:b5:4f:82:be:59:96:7a:e1:7e:75:
8f:cb:66:b7:9b:6e:c7:06:83:42:d9:e1:3e:80:27:d3:09:52:
2e:b7:16:68:c0:51:2d:92:59:bb:b6:a7:1d:8c:f0:9b:24:bd:
9c:ef:ca:a5:45:ca:9d:79:70:e8:7e:bf:19:d5:5c:8b:88:17:
eb:01:4e:4a:46:0f:85:f0:b4:a3:55:55:d9:b3:23:31:c8:f3:
d2:a1:2a:e7:9b:4f:ea:dd:cb:0d:04:88:1e:87:f6:98:ac:ba:
bc:9c:89:c3:d3:53:16:b1:f5:05:e9:04:24:33:3d:f7:45:ca:
62:62:ec:06:aa:e0:c8:78:5a:8e:ca:b0:6e:81:e7:f9:40:58:
81:da:c5:33:15:1b:5f:e3:d8:f2:d4:15:9c:d2:c3:6b:30:70:
87:3f:a7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:41 2025 by rpki-client