Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0kBAB3t5lxDAOz5DtnSFV18O4aE.roa
File: 0kBAB3t5lxDAOz5DtnSFV18O4aE.roa (raw, json)
Hash identifier: ZKMEVAfwt0UIYoBa0EGbjwABy13wBNmvC2w4lnOts8k=
Subject key identifier: D2:40:40:07:7B:79:97:10:C0:3B:3E:43:B6:74:85:57:5F:0E:E1:A1
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0192D4E6A0E10C1A825351EF0C5E04121EAA
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0kBAB3t5lxDAOz5DtnSFV18O4aE.roa
Signing time: Mon 28 Oct 2024 20:52:17 +0000
ROA not before: Mon 28 Oct 2024 20:52:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34927
IP address blocks: 45.134.88.0/24 maxlen: 24
45.134.89.0/24 maxlen: 24
45.134.91.0/24 maxlen: 24
193.37.139.0/24 maxlen: 24
193.148.248.0/24 maxlen: 24
193.148.249.0/24 maxlen: 24
193.148.250.0/24 maxlen: 24
193.148.251.0/24 maxlen: 24
2a0c:9a40:1::/48 maxlen: 48
2a0c:9a40:1000::/44 maxlen: 48
2a0c:9a40:1001::/48 maxlen: 48
2a0c:9a40:1002::/48 maxlen: 48
2a0c:9a40:1024::/48 maxlen: 48
2a0c:9a40:1030::/44 maxlen: 48
2a0c:9a40:1034::/48 maxlen: 48
2a0c:9a40:1050::/48 maxlen: 48
2a0c:9a40:1051::/48 maxlen: 48
2a0c:9a40:1054::/48 maxlen: 48
2a0c:9a40:1055::/48 maxlen: 48
2a0c:9a40:1057::/48 maxlen: 48
2a0c:9a40:1058::/48 maxlen: 48
2a0c:9a40:1059::/48 maxlen: 48
2a0c:9a40:1060::/48 maxlen: 48
2a0c:9a40:1070::/44 maxlen: 48
2a0c:9a40:1070::/48 maxlen: 48
2a0c:9a40:1072::/48 maxlen: 48
2a0c:9a40:1074::/48 maxlen: 48
2a0c:9a40:1080::/44 maxlen: 48
2a0c:9a40:1080::/48 maxlen: 48
2a0c:9a40:1090::/44 maxlen: 48
2a0c:9a40:2000::/40 maxlen: 48
2a0c:9a40:2100::/40 maxlen: 48
2a0c:9a40:2200::/40 maxlen: 48
2a0c:9a40:2300::/40 maxlen: 48
2a0c:9a40:2328::/48 maxlen: 48
2a0c:9a40:2400::/40 maxlen: 48
2a0c:9a40:2500::/40 maxlen: 48
2a0c:9a40:2600::/40 maxlen: 48
2a0c:9a40:2700::/40 maxlen: 48
2a0c:9a40:2800::/40 maxlen: 48
2a0c:9a40:2900::/48 maxlen: 48
2a0c:9a40:2a00::/40 maxlen: 40
2a0c:9a40:2b00::/40 maxlen: 48
2a0c:9a40:2c00::/40 maxlen: 48
2a0c:9a40:2d00::/40 maxlen: 48
2a0c:9a40:2e00::/40 maxlen: 48
2a0c:9a40:8a90::/48 maxlen: 48
2a0c:9a44::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 11 Nov 2024 10:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d4:e6:a0:e1:0c:1a:82:53:51:ef:0c:5e:04:12:1e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 28 20:52:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d24040077b799710c03b3e43b67485575f0ee1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:22:b9:81:37:2c:e3:e7:3e:87:5c:ef:7a:
7a:29:64:a4:84:9a:d2:6e:07:44:4f:eb:e7:a6:01:
87:ae:12:36:90:0a:e2:52:24:81:78:57:49:c8:9d:
7a:1a:09:af:bd:24:e0:eb:b2:16:bb:57:6a:3b:44:
11:ed:be:c2:a7:4c:e5:f3:ea:4b:96:ed:65:13:b1:
c3:75:40:2f:02:77:66:c5:39:46:fe:f2:50:50:e8:
fc:18:2f:78:9d:45:38:6d:c4:6a:7d:f2:75:c3:d0:
8c:4b:88:33:89:12:29:55:ce:ba:0f:13:c2:6e:4b:
4e:99:13:36:11:51:75:c9:da:dc:d5:fa:1e:fa:7f:
4e:e4:df:1e:5f:45:d2:8b:aa:e6:0d:44:ff:3f:c1:
30:ce:23:46:f6:30:4c:3f:59:e3:3a:03:1b:ea:ae:
0e:6f:e7:68:fe:3f:bc:41:1b:87:8d:2d:91:e2:b4:
76:f1:d8:ef:c1:7c:9a:4b:39:d6:73:60:1b:fc:71:
07:40:2b:52:89:27:cf:9d:62:ff:3e:32:9e:a8:d2:
c8:bd:1b:7b:b9:27:5d:44:fa:c6:31:7a:68:1c:d9:
e6:6f:7c:f4:a4:5c:06:ba:65:a3:9e:6d:fe:cb:e7:
6c:85:21:9d:8f:19:be:b7:f9:7d:6d:8f:58:80:2d:
d2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:40:40:07:7B:79:97:10:C0:3B:3E:43:B6:74:85:57:5F:0E:E1:A1
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0kBAB3t5lxDAOz5DtnSFV18O4aE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.88.0/23
45.134.91.0/24
193.37.139.0/24
193.148.248.0/22
IPv6:
2a0c:9a40:1::/48
2a0c:9a40:1000::/44
2a0c:9a40:1024::/48
2a0c:9a40:1030::/44
2a0c:9a40:1050::/47
2a0c:9a40:1054::/47
2a0c:9a40:1057::-2a0c:9a40:1059:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:1060::/48
2a0c:9a40:1070::-2a0c:9a40:109f:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2000::-2a0c:9a40:2900:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2a00::-2a0c:9a40:2eff:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:8a90::/48
2a0c:9a44::/48
Signature Algorithm: sha256WithRSAEncryption
b9:5a:ff:47:9e:01:6e:52:18:bd:74:3c:9a:8f:64:ab:42:37:
33:95:ea:94:5e:d5:50:82:28:92:92:53:5e:7d:49:89:be:08:
d6:82:14:39:71:74:7d:0c:a5:1e:ff:33:be:8f:cf:03:d4:20:
3e:9f:dc:31:29:fd:f4:d4:71:f5:7d:62:05:e9:fc:c1:61:ee:
ea:3a:fc:32:60:55:47:1b:47:26:ce:c9:6e:86:af:7c:f5:b3:
f5:1e:0e:1c:7c:1c:e8:49:e7:2c:1f:20:c2:85:c3:9f:7f:95:
4a:b9:59:3e:dc:d6:93:95:fd:d3:94:ed:41:bf:39:c7:c4:9c:
fd:a9:74:f4:52:05:15:36:40:1b:ff:a2:7d:d3:45:0f:f4:49:
6c:a4:d7:24:c4:4b:af:41:5d:57:e5:04:ac:8c:ed:4f:5e:90:
2b:6c:1e:d5:73:4a:92:50:9a:ce:0e:86:78:d9:f0:73:d7:ba:
7b:22:9a:24:d8:6e:84:cb:a8:24:78:71:10:fc:08:b3:aa:fd:
cf:3a:92:32:9f:41:d9:5a:e9:95:81:ed:ab:0e:19:73:5a:26:
c1:a7:38:ac:aa:b4:73:06:0e:e7:e5:c4:fb:f7:cb:e4:f3:7e:
8a:21:de:5c:a0:f1:2d:29:dc:64:de:f9:b1:54:d2:fa:98:f7:
56:15:2a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:32 2025 by rpki-client