Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/7zeruOrVUZKPEUXll4on0h-i3-4.roa
File: 7zeruOrVUZKPEUXll4on0h-i3-4.roa (raw, json)
Hash identifier: jG55xZn4whpDZV1UbDBWKBdolWAx+TysMov3JG0humI=
Subject key identifier: EF:37:AB:B8:EA:D5:51:92:8F:11:45:E5:97:8A:27:D2:1F:A2:DF:EE
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018E6C762331B533F7EF6CD54EDE7CA895A3
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/7zeruOrVUZKPEUXll4on0h-i3-4.roa
Signing time: Sat 23 Mar 2024 17:57:45 +0000
ROA not before: Sat 23 Mar 2024 17:57:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208258
IP address blocks: 45.144.244.0/23 maxlen: 24
45.144.246.0/24 maxlen: 24
45.151.156.0/23 maxlen: 24
45.151.158.0/24 maxlen: 24
185.208.208.0/24 maxlen: 24
185.208.209.0/24 maxlen: 24
185.208.210.0/24 maxlen: 24
185.208.211.0/24 maxlen: 24
185.227.82.0/24 maxlen: 24
185.228.83.0/24 maxlen: 24
185.243.112.0/24 maxlen: 24
185.243.113.0/24 maxlen: 24
193.109.137.0/24 maxlen: 24
194.146.48.0/24 maxlen: 24
195.26.6.0/24 maxlen: 24
195.26.7.0/24 maxlen: 24
195.88.226.0/24 maxlen: 24
195.88.227.0/24 maxlen: 24
2a0b:3c40:1::/48 maxlen: 48
2a0b:3c40:9::/48 maxlen: 48
2a0b:3c40:11::/48 maxlen: 48
2a0b:3c40:12::/48 maxlen: 48
2a0b:3c40:15::/48 maxlen: 48
2a0b:3c40:16::/48 maxlen: 48
2a0b:3c40:17::/48 maxlen: 48
2a0b:3c40:20::/48 maxlen: 48
2a0b:3c40:21::/48 maxlen: 48
2a0b:3c40:25::/48 maxlen: 48
2a0b:3c40:fca6::/48 maxlen: 48
2a0e:5540::/48 maxlen: 48
2a0e:5540:10::/48 maxlen: 48
2a0e:5540:11::/48 maxlen: 48
2a0e:5540:12::/48 maxlen: 48
2a0e:5540:100::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 25 Mar 2024 17:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6c:76:23:31:b5:33:f7:ef:6c:d5:4e:de:7c:a8:95:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 23 17:57:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef37abb8ead551928f1145e5978a27d21fa2dfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:7d:7f:33:08:08:17:d8:fb:0a:10:e2:42:
8d:f1:98:78:80:6a:e1:c1:c1:44:20:da:6e:1c:c9:
28:cc:68:a6:e7:46:f8:98:92:bd:f7:7e:44:7c:89:
f4:70:bd:d0:45:54:e7:54:5c:f2:c4:fc:d3:36:9f:
48:e1:44:dd:bb:44:de:75:f3:6f:5c:6f:12:7d:83:
e9:0a:82:c2:d4:88:f3:5c:47:d7:75:b2:3e:d2:f8:
07:6c:69:cc:55:2f:b3:fa:a6:73:a5:71:29:37:cd:
3a:79:a6:1f:38:0e:87:b9:16:1c:1a:86:3b:fa:86:
e1:8d:29:77:01:91:b8:38:80:3d:b6:5f:a4:79:4c:
00:64:d1:3f:70:c3:77:5d:31:6b:81:6b:39:95:ca:
68:bd:c8:fc:57:d5:68:4d:b9:25:a1:80:2d:27:a7:
24:fc:e4:fd:a1:b3:e6:1d:c5:d1:cd:c1:53:14:50:
44:6a:75:8e:f7:05:01:eb:ee:98:db:9f:e6:88:0e:
ad:69:1b:ac:00:b6:f9:34:60:34:ad:f2:7d:0e:11:
70:4c:ef:df:ef:5d:f6:04:19:f5:d4:20:a6:48:4c:
12:03:99:6c:68:c3:bb:7b:09:75:ed:b2:a0:55:60:
2d:36:d5:52:f5:da:b8:2b:c2:af:29:41:56:65:84:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:37:AB:B8:EA:D5:51:92:8F:11:45:E5:97:8A:27:D2:1F:A2:DF:EE
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/7zeruOrVUZKPEUXll4on0h-i3-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.244.0-45.144.246.255
45.151.156.0-45.151.158.255
185.208.208.0/22
185.227.82.0/24
185.228.83.0/24
185.243.112.0/23
193.109.137.0/24
194.146.48.0/24
195.26.6.0/23
195.88.226.0/23
IPv6:
2a0b:3c40:1::/48
2a0b:3c40:9::/48
2a0b:3c40:11::-2a0b:3c40:12:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:15::-2a0b:3c40:17:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:20::/47
2a0b:3c40:25::/48
2a0b:3c40:fca6::/48
2a0e:5540::/48
2a0e:5540:10::-2a0e:5540:12:ffff:ffff:ffff:ffff:ffff
2a0e:5540:100::/48
Signature Algorithm: sha256WithRSAEncryption
17:ff:28:f3:7c:0d:d2:d8:2e:ae:70:6a:de:64:a4:71:5b:6b:
28:0d:e8:bf:f1:2d:55:13:89:fe:a7:1a:fe:4f:ed:c9:49:66:
9d:3e:6d:f2:e0:f6:8a:5d:4a:8e:91:23:72:cf:12:d4:c9:77:
a7:6d:25:4d:cd:7a:4e:e5:6f:b8:70:a2:5d:f0:a6:8a:c4:3a:
3d:9f:70:d9:01:0b:b0:f4:2e:65:2d:73:ce:47:20:5f:dc:71:
e4:0c:c5:be:cd:0e:3d:9e:99:4d:96:56:6e:eb:28:a1:76:f4:
7f:57:b3:58:43:71:0b:a5:73:e0:77:42:54:16:4b:b0:be:1e:
a1:85:80:75:69:6e:a0:e7:c5:96:f2:22:2d:95:3d:b2:a1:de:
2f:0a:04:bb:f8:18:05:9e:36:ce:21:ca:76:e4:47:90:a3:99:
21:66:ef:ea:08:6e:37:d4:26:b8:89:57:f1:25:e3:08:19:5c:
c1:f0:bb:45:b2:77:eb:f3:82:be:33:9d:b2:40:68:7d:68:e6:
3b:8c:38:01:ec:42:f3:48:f1:20:cc:a5:0c:b7:4c:a5:20:72:
95:73:c0:1a:03:73:61:cc:63:67:3e:24:6d:d6:fb:ac:1b:bc:
2c:fa:31:22:96:99:90:20:5b:4e:cf:d3:ca:af:8e:b3:3b:a8:
e7:75:c1:dd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org