Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/nILHnfzk_fsiVgfNXT4V-_yqcvY.roa
File: nILHnfzk_fsiVgfNXT4V-_yqcvY.roa (raw, json)
Hash identifier: WrW0WVuKoQ5+xZB7J19QpTt4jtuteQlvIQkZZs7n8fg=
Subject key identifier: 9C:82:C7:9D:FC:E4:FD:FB:22:56:07:CD:5D:3E:15:FB:FC:AA:72:F6
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018E79FE7CEF3509D539447B35F478B1BB26
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/nILHnfzk_fsiVgfNXT4V-_yqcvY.roa
Signing time: Tue 26 Mar 2024 09:01:45 +0000
ROA not before: Tue 26 Mar 2024 09:01:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208258
IP address blocks: 45.144.244.0/23 maxlen: 24
45.144.246.0/24 maxlen: 24
45.151.156.0/23 maxlen: 24
45.151.158.0/24 maxlen: 24
185.208.208.0/24 maxlen: 24
185.208.209.0/24 maxlen: 24
185.208.210.0/24 maxlen: 24
185.208.211.0/24 maxlen: 24
185.227.82.0/24 maxlen: 24
185.228.83.0/24 maxlen: 24
185.243.112.0/24 maxlen: 24
185.243.113.0/24 maxlen: 24
193.109.137.0/24 maxlen: 24
194.146.48.0/24 maxlen: 24
195.26.6.0/24 maxlen: 24
195.26.7.0/24 maxlen: 24
195.88.226.0/24 maxlen: 24
195.88.227.0/24 maxlen: 24
2a0b:3c40:1::/48 maxlen: 48
2a0b:3c40:9::/48 maxlen: 48
2a0b:3c40:11::/48 maxlen: 48
2a0b:3c40:12::/48 maxlen: 48
2a0b:3c40:15::/48 maxlen: 48
2a0b:3c40:16::/48 maxlen: 48
2a0b:3c40:17::/48 maxlen: 48
2a0b:3c40:20::/48 maxlen: 48
2a0b:3c40:21::/48 maxlen: 48
2a0b:3c40:25::/48 maxlen: 48
2a0b:3c40:fca6::/48 maxlen: 48
2a0e:5540::/48 maxlen: 48
2a0e:5540:10::/48 maxlen: 48
2a0e:5540:11::/48 maxlen: 48
2a0e:5540:12::/48 maxlen: 48
2a0e:5540:100::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Apr 2024 14:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:79:fe:7c:ef:35:09:d5:39:44:7b:35:f4:78:b1:bb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 26 09:01:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c82c79dfce4fdfb225607cd5d3e15fbfcaa72f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:b3:48:4f:13:98:10:74:dd:87:7a:75:e3:
3a:8a:42:02:cc:df:1d:e8:6b:13:e4:a0:ff:6c:54:
7c:89:df:02:2c:ee:c1:a9:31:15:65:25:a4:91:f0:
f7:b5:31:86:7e:81:7d:4e:50:5e:78:69:8d:7f:7b:
9a:88:51:7c:06:1f:ba:d9:ec:1a:d4:97:b9:73:02:
f4:c4:82:d6:30:15:7d:44:9a:48:1a:19:f2:fd:07:
45:a9:fd:46:fd:5f:15:15:58:70:20:2b:a2:33:89:
ec:80:11:34:8f:ea:2f:d7:9c:f1:be:5f:18:32:db:
14:7e:f3:ef:20:ba:f6:bb:8f:dc:94:18:0e:8a:0d:
ec:47:38:4a:93:c0:e3:b1:70:50:0e:ba:ee:66:fe:
50:14:77:4a:4b:e2:b6:26:46:8e:67:b2:7f:bd:09:
4d:89:ba:43:5d:f3:3a:79:d1:bb:b7:40:95:ef:48:
fe:91:a1:9d:b8:d3:9b:79:ed:ec:3a:e9:8d:74:d6:
cf:e5:41:3f:ce:17:4d:4e:56:c6:c4:79:cd:81:75:
de:a9:c4:51:eb:a9:d5:73:8a:e0:0d:a8:01:f3:7d:
d0:ca:99:59:98:6a:68:23:61:33:32:47:b4:92:2e:
31:52:58:35:3c:00:60:cd:44:ad:e1:52:aa:ed:fa:
f9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:82:C7:9D:FC:E4:FD:FB:22:56:07:CD:5D:3E:15:FB:FC:AA:72:F6
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/nILHnfzk_fsiVgfNXT4V-_yqcvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.244.0-45.144.246.255
45.151.156.0-45.151.158.255
185.208.208.0/22
185.227.82.0/24
185.228.83.0/24
185.243.112.0/23
193.109.137.0/24
194.146.48.0/24
195.26.6.0/23
195.88.226.0/23
IPv6:
2a0b:3c40:1::/48
2a0b:3c40:9::/48
2a0b:3c40:11::-2a0b:3c40:12:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:15::-2a0b:3c40:17:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:20::/47
2a0b:3c40:25::/48
2a0b:3c40:fca6::/48
2a0e:5540::/48
2a0e:5540:10::-2a0e:5540:12:ffff:ffff:ffff:ffff:ffff
2a0e:5540:100::/48
Signature Algorithm: sha256WithRSAEncryption
69:c5:7e:f1:83:b1:28:2c:66:b4:9a:1c:53:f3:d4:70:de:f2:
d0:d0:a9:fe:27:76:3b:ad:6a:47:22:b0:61:45:6a:41:19:32:
10:e7:33:45:ab:4c:ff:2c:3a:0e:b3:50:28:d9:26:b6:77:38:
43:58:e6:4c:50:0b:c2:c8:d1:01:d3:64:be:d5:45:86:c2:77:
a6:3b:5c:b3:5f:84:5e:28:5b:22:9f:40:c5:69:1d:58:49:87:
a3:b2:8c:d6:33:21:c8:0c:1a:a3:8d:aa:a7:92:0c:7e:e5:68:
bc:85:ff:60:c4:71:d0:ae:09:ff:f4:c7:50:77:cc:bc:82:98:
20:f0:18:52:be:43:12:72:2a:96:99:9c:47:e0:98:ab:84:1a:
ea:4d:b4:21:e9:d4:ff:a6:de:8d:ad:71:97:75:f2:9b:4a:19:
a1:3b:5f:b1:23:cb:f8:48:f8:de:fc:60:79:e5:53:06:07:bd:
31:01:d8:67:fa:1b:b5:46:93:1a:f5:01:71:0f:d8:5c:86:ad:
49:b9:bb:8b:67:92:8d:87:58:b0:ef:47:b2:c7:c3:54:b8:de:
5a:e6:77:fb:12:3d:81:dd:95:56:ce:af:9a:d2:e2:db:e1:07:
d8:fc:0e:88:c7:e2:05:77:b9:d5:1a:44:71:08:ff:a7:05:c6:
8d:fb:9f:5b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org