Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/uOAAx4TY9L7V3hYulouAq3lKy48.roa
File: uOAAx4TY9L7V3hYulouAq3lKy48.roa (raw, json)
Hash identifier: qzu5ivfVY1WlRB18OfyWVTH9k7wd1xTi6c8a9IJmE+8=
Subject key identifier: B8:E0:00:C7:84:D8:F4:BE:D5:DE:16:2E:96:8B:80:AB:79:4A:CB:8F
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8D330E1AF6AA606985A1CD099A1F7
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/uOAAx4TY9L7V3hYulouAq3lKy48.roa
Signing time: Mon 01 Jan 2024 20:30:50 +0000
ROA not before: Mon 01 Jan 2024 20:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34927
IP address blocks: 45.134.88.0/24 maxlen: 24
45.134.91.0/24 maxlen: 24
45.134.89.0/24 maxlen: 24
193.148.251.0/24 maxlen: 24
193.148.250.0/24 maxlen: 24
193.148.249.0/24 maxlen: 24
193.148.248.0/24 maxlen: 24
193.37.139.0/24 maxlen: 24
2a0c:9a40:1024::/48 maxlen: 48
2a0c:9a40:1002::/48 maxlen: 48
2a0c:9a44::/48 maxlen: 48
2a0c:9a40:1000::/44 maxlen: 48
2a0c:9a40:1080::/44 maxlen: 48
2a0c:9a40:1058::/48 maxlen: 48
2a0c:9a40:1001::/48 maxlen: 48
2a0c:9a40:1::/48 maxlen: 48
2a0c:9a40:1055::/48 maxlen: 48
2a0c:9a40:1070::/48 maxlen: 48
2a0c:9a40:1050::/48 maxlen: 48
2a0c:9a40:1054::/48 maxlen: 48
2a0c:9a40:1057::/48 maxlen: 48
2a0c:9a40:1072::/48 maxlen: 48
2a0c:9a40:1070::/44 maxlen: 48
2a0c:9a40:1090::/44 maxlen: 48
2a0c:9a40:1030::/44 maxlen: 48
2a0c:9a40:2328::/48 maxlen: 48
2a0c:9a40:1051::/48 maxlen: 48
2a0c:9a40:2d00::/40 maxlen: 48
2a0c:9a40:2700::/40 maxlen: 48
2a0c:9a40:2a00::/40 maxlen: 40
2a0c:9a40:2800::/40 maxlen: 48
2a0c:9a40:2100::/40 maxlen: 48
2a0c:9a40:2b00::/40 maxlen: 48
2a0c:9a40:2c00::/40 maxlen: 48
2a0c:9a40:2200::/40 maxlen: 48
2a0c:9a40:2500::/40 maxlen: 48
2a0c:9a40:2600::/40 maxlen: 48
2a0c:9a40:2400::/40 maxlen: 40
2a0c:9a40:1080::/48 maxlen: 48
2a0c:9a40:1060::/48 maxlen: 48
2a0c:9a40:2900::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 15:48:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:d3:30:e1:af:6a:a6:06:98:5a:1c:d0:99:a1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8e000c784d8f4bed5de162e968b80ab794acb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b2:60:4b:fe:81:3a:ea:4d:2d:51:86:e9:88:
48:8d:34:60:f6:47:22:29:1f:d6:60:23:25:21:a9:
af:7b:0f:57:07:36:ac:f4:3c:83:ab:4f:66:e3:93:
20:5b:18:50:ad:eb:ce:3c:38:de:94:a6:e9:0f:a5:
c9:42:2d:4a:af:b9:26:87:19:7c:0f:74:f0:b7:80:
d8:fd:70:31:18:91:49:82:64:c6:3c:5f:5d:94:55:
c7:9d:60:1d:73:02:03:ff:40:fb:28:60:16:9c:79:
de:a3:68:ee:84:6b:e1:59:4d:68:cd:e3:43:ec:61:
c2:61:16:8e:72:48:1b:5a:b0:05:57:09:71:23:47:
dc:f3:7c:5d:b6:99:b2:88:99:87:61:99:1b:69:92:
39:0e:54:08:e2:e4:34:67:eb:8f:20:8b:96:c7:af:
c6:d4:51:10:2e:60:86:c0:4f:64:81:9f:e4:18:4a:
43:3a:3c:71:af:7c:49:cf:9a:93:5a:a0:01:69:91:
ed:eb:2a:9f:88:38:6d:d7:7a:88:c2:4b:71:42:89:
3e:5d:64:b3:ab:f9:60:c9:71:10:75:ca:07:3a:bc:
f9:49:d3:8b:c9:47:4c:5c:63:4c:c5:ba:24:ff:33:
64:57:2a:3e:65:9f:aa:ed:10:42:aa:08:8f:38:41:
28:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E0:00:C7:84:D8:F4:BE:D5:DE:16:2E:96:8B:80:AB:79:4A:CB:8F
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/uOAAx4TY9L7V3hYulouAq3lKy48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.88.0/23
45.134.91.0/24
193.37.139.0/24
193.148.248.0/22
IPv6:
2a0c:9a40:1::/48
2a0c:9a40:1000::/44
2a0c:9a40:1024::/48
2a0c:9a40:1030::/44
2a0c:9a40:1050::/47
2a0c:9a40:1054::/47
2a0c:9a40:1057::-2a0c:9a40:1058:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:1060::/48
2a0c:9a40:1070::-2a0c:9a40:109f:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2100::-2a0c:9a40:22ff:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2328::/48
2a0c:9a40:2400::-2a0c:9a40:2900:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2a00::-2a0c:9a40:2dff:ffff:ffff:ffff:ffff:ffff
2a0c:9a44::/48
Signature Algorithm: sha256WithRSAEncryption
7f:cb:19:4e:ac:56:1b:27:14:cf:5b:0b:20:73:55:96:a2:d3:
7a:b8:24:a0:86:34:dc:57:c5:36:02:55:6e:3c:cd:66:36:53:
f0:fa:d8:1a:e0:7a:0d:22:f2:0d:8f:a8:69:51:6f:15:04:b0:
21:52:2d:ac:7a:1a:2f:6a:56:88:b6:02:33:c6:56:9d:d5:cf:
f0:e4:99:02:ec:0d:7c:4e:d5:06:5d:4b:34:8d:2e:2d:18:b9:
db:28:f7:b7:3c:76:c9:ed:9c:6b:9a:3d:c4:be:ca:4d:59:f9:
0c:23:37:72:45:f7:dd:4a:67:1c:54:8d:39:ab:cb:e4:95:67:
2d:ef:56:18:5d:d7:b2:78:e5:bc:16:c9:28:58:34:14:b3:11:
53:a3:18:88:63:c8:5c:09:32:52:8d:cb:d5:d7:72:fd:cf:fb:
61:44:bd:31:86:dd:a9:28:c6:23:d4:f7:34:40:46:d0:42:a3:
21:f1:75:0a:96:33:d4:f1:2f:20:37:53:19:31:e9:99:4f:a2:
fc:07:d2:84:b4:1d:f1:14:e0:04:6b:2d:62:99:71:52:04:50:
c9:4e:10:ab:46:16:de:a4:00:1b:ee:77:fa:31:3a:22:62:d3:
27:aa:4b:fd:13:65:ce:28:32:c0:14:59:f1:fa:e0:f7:2e:65:
8f:c8:4c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:45 2025 by rpki-client