Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/Jnu8JkaSgLSkbKvwFUVCby0iw9Y.roa
File: Jnu8JkaSgLSkbKvwFUVCby0iw9Y.roa (raw, json)
Hash identifier: DscpNS8JNUGC/hrSOsT+C/zfBTrSkm8yXK1q/qVQww0=
Subject key identifier: 26:7B:BC:26:46:92:80:B4:A4:6C:AB:F0:15:45:42:6F:2D:22:C3:D6
Certificate issuer: /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Certificate serial: 018DD09084108D199D2B7D3A9CCFE6183673
Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/Jnu8JkaSgLSkbKvwFUVCby0iw9Y.roa
Signing time: Thu 22 Feb 2024 11:25:48 +0000
ROA not before: Thu 22 Feb 2024 11:25:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202543
IP address blocks: 45.154.176.0/24 maxlen: 24
45.154.177.0/24 maxlen: 24
45.154.178.0/24 maxlen: 24
45.154.179.0/24 maxlen: 24
185.227.6.0/24 maxlen: 24
185.246.168.0/24 maxlen: 24
185.246.169.0/24 maxlen: 24
185.246.170.0/24 maxlen: 24
2a0f:3980::/30 maxlen: 30
2a0f:3984::/30 maxlen: 30
2a0f:c300::/30 maxlen: 30
2a0f:c304::/30 maxlen: 30
2a14:2980::/30 maxlen: 30
2a14:2984::/30 maxlen: 30
Validation: Failed, certificate revoked on Fri 11 Oct 2024 09:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d0:90:84:10:8d:19:9d:2b:7d:3a:9c:cf:e6:18:36:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Validity
Not Before: Feb 22 11:25:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=267bbc26469280b4a46cabf01545426f2d22c3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4a:69:83:e7:8e:14:dc:40:48:b3:ad:60:9c:
8a:78:f2:84:c6:2c:57:37:9e:35:61:d1:34:db:d7:
d9:66:77:02:b9:0e:c4:18:aa:ef:ac:31:1d:01:02:
27:61:6e:c5:6d:02:4a:f2:fa:66:3f:57:c7:f4:7f:
2f:2d:97:14:c8:a5:cf:3d:8e:fc:92:8a:fc:9b:89:
8e:ae:d1:b0:c0:bc:79:a2:c9:38:f3:9b:fe:75:69:
ec:b8:0c:04:9b:22:bc:86:d5:bf:8b:f9:1a:37:44:
35:89:a8:69:7a:13:98:c3:6f:ea:44:46:42:68:21:
9a:6a:b3:7f:eb:80:c4:3e:c7:0d:fa:a9:67:82:ea:
c1:a9:54:9b:51:01:bb:35:f6:09:9d:d8:70:24:7e:
19:b8:41:2c:16:ed:a9:eb:40:34:f0:cc:32:12:7b:
30:cb:b1:d6:69:ab:35:a9:7a:6c:63:76:13:80:72:
7f:0b:ea:7f:d4:37:62:01:bf:73:a7:30:11:a7:6d:
2e:16:92:2b:a3:84:23:6d:ea:48:34:21:c4:6d:10:
de:f8:be:71:5a:f8:eb:12:e0:f9:a7:69:de:93:c4:
5b:d0:33:90:c6:27:f5:d7:6b:0f:66:75:81:4b:7c:
68:d2:1f:be:b7:5b:67:f4:5e:f2:71:da:80:a0:d6:
c8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7B:BC:26:46:92:80:B4:A4:6C:AB:F0:15:45:42:6F:2D:22:C3:D6
X509v3 Authority Key Identifier:
keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/Jnu8JkaSgLSkbKvwFUVCby0iw9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.176.0/22
185.227.6.0/24
185.246.168.0-185.246.170.255
IPv6:
2a0f:3980::/29
2a0f:c300::/29
2a14:2980::/29
Signature Algorithm: sha256WithRSAEncryption
3f:4c:6b:44:e9:b2:0b:a0:3d:60:28:bc:7c:d8:30:1f:7c:db:
2f:64:a0:d3:62:31:05:11:67:64:68:1f:0f:fb:dd:bc:3a:eb:
b6:bb:54:1f:dd:70:3e:61:47:75:27:cd:10:22:0d:1e:4a:f8:
86:61:9d:60:3a:98:49:63:bf:83:bd:12:d2:1b:e9:bb:63:b9:
7d:64:ef:97:00:23:66:78:1e:db:bb:41:28:cf:63:34:fb:15:
46:15:ce:79:11:01:1f:ea:9e:a7:48:d6:41:9e:1d:ed:d6:bf:
22:a1:aa:ca:0c:eb:b6:0d:98:69:42:fb:fc:a2:63:18:87:c2:
4a:f2:0e:d4:fb:1b:38:f3:e1:ce:94:0b:71:f3:91:68:ee:8a:
a9:63:5e:49:a1:97:a1:aa:cd:ef:e4:6e:dc:72:ff:ee:dc:45:
5c:42:d6:d7:cf:31:15:62:44:66:ec:2c:d3:ea:87:52:00:78:
fa:34:03:e1:19:38:7e:bf:ef:86:8e:25:f2:92:7e:46:33:85:
23:a6:88:0f:e4:3b:1f:1d:24:f5:f5:95:ab:5a:2a:7b:a4:00:
bd:27:f4:41:91:5d:4a:98:83:b9:1c:4d:7c:8e:cf:f2:a4:45:
65:2a:b0:be:fc:0d:12:6a:5e:a8:b5:4b:15:5b:9c:78:f5:85:
68:50:de:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 10:45:22 2024 by rpki-client on console-fra.rpki-client.org