Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/1-s8nkqA92LVwUur9Ja6sFNuJIsY.roa
File: 1-s8nkqA92LVwUur9Ja6sFNuJIsY.roa (raw, json)
Hash identifier: fzPPpLYFfcZnjuwlb57beqCVAL+nbA2LiwycK+KRLyA=
Subject key identifier: FA:CF:27:92:A0:3D:D8:B5:70:52:EA:FD:25:AE:AC:14:DB:89:22:C6
Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial: 018CC4923BB05F243AB54B29EAF6600A952A
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/1-s8nkqA92LVwUur9Ja6sFNuJIsY.roa
Signing time: Mon 01 Jan 2024 10:29:27 +0000
ROA not before: Mon 01 Jan 2024 10:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206892
IP address blocks: 95.140.32.0/24 maxlen: 24
185.199.28.0/22 maxlen: 24
95.140.38.0/23 maxlen: 24
45.95.44.0/22 maxlen: 24
194.39.44.0/22 maxlen: 24
185.161.72.0/22 maxlen: 24
94.199.179.0/24 maxlen: 24
185.234.181.0/24 maxlen: 24
185.234.182.0/23 maxlen: 24
2a07:c280::/32 maxlen: 33
Validation: Failed, certificate revoked on Wed 31 Jan 2024 17:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:3b:b0:5f:24:3a:b5:4b:29:ea:f6:60:0a:95:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Validity
Not Before: Jan 1 10:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=facf2792a03dd8b57052eafd25aeac14db8922c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9f:43:e6:a8:de:4a:09:3e:bf:32:1c:fc:d7:
f1:53:bb:f7:0f:3d:b9:f9:2e:66:95:cc:c7:6b:bd:
60:a8:95:d8:56:30:46:a2:14:5a:6d:3b:d5:50:ac:
23:38:7d:50:03:49:90:90:eb:f1:1e:88:d7:e4:df:
fa:30:9d:07:46:22:77:6a:5e:9b:ef:28:c2:66:a0:
c6:39:ba:7b:b0:b9:7b:0f:aa:a4:e3:1b:c6:47:15:
70:4c:0c:2f:f4:bd:da:a4:58:d0:93:d2:42:5e:ab:
d2:28:8f:9d:a7:70:39:5b:e1:5a:05:e4:39:d4:ef:
d7:8a:69:59:20:f2:91:65:40:a2:85:0f:b9:2d:1c:
8a:47:1f:d3:32:ca:c3:ff:7b:25:32:22:37:e6:2c:
4f:d3:20:02:a1:f3:77:61:07:c6:20:45:4d:30:b8:
b7:99:9e:67:00:4b:56:65:b2:14:8a:02:13:8d:56:
e6:56:5e:40:c3:00:43:0c:c6:bb:61:c6:5c:03:e3:
33:af:dd:25:44:08:22:fb:47:d8:cc:de:33:29:cc:
c0:1d:c2:26:1d:bd:f9:76:4e:73:06:ae:20:d9:38:
cb:a7:7c:07:3d:8a:f5:0e:52:d3:e7:1a:68:83:9c:
5e:64:28:fe:f6:84:21:06:1e:f2:6c:a9:0d:ef:07:
24:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CF:27:92:A0:3D:D8:B5:70:52:EA:FD:25:AE:AC:14:DB:89:22:C6
X509v3 Authority Key Identifier:
keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/1-s8nkqA92LVwUur9Ja6sFNuJIsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.44.0/22
94.199.179.0/24
95.140.32.0/24
95.140.38.0/23
185.161.72.0/22
185.199.28.0/22
185.234.181.0-185.234.183.255
194.39.44.0/22
IPv6:
2a07:c280::/32
Signature Algorithm: sha256WithRSAEncryption
a6:76:fa:dd:b1:7f:49:5d:1c:09:c8:85:57:b8:73:2b:79:91:
23:88:60:e1:ad:27:ea:56:36:7c:88:1e:2e:e6:47:4a:84:23:
c6:9a:1c:08:a2:13:18:0f:bc:15:85:35:24:b0:27:a0:81:bd:
94:f4:ce:29:e6:78:6b:f3:de:18:aa:4d:4e:bf:88:96:32:8f:
af:77:47:65:dc:f5:cb:b6:8d:83:05:b0:fe:23:8e:f3:05:d2:
7b:12:9f:78:44:e6:17:57:cb:32:02:64:d0:95:f9:42:c1:db:
4d:4c:2d:c9:82:4f:fa:da:10:a0:95:3e:f7:19:73:8b:09:70:
be:da:5b:40:f2:62:de:a9:03:4a:f8:3d:fb:58:02:7f:89:7c:
84:53:10:0e:f5:4d:b1:65:6d:64:f2:31:f7:d0:17:8f:68:94:
e4:95:b7:f6:e9:bc:d8:b2:77:3a:5a:25:1c:58:b8:41:b6:16:
99:7a:3b:4d:bd:30:ef:df:68:47:8b:e8:35:56:da:ab:79:c3:
63:eb:33:47:ce:8c:3f:04:5f:09:b4:f9:cb:bd:50:ab:30:5a:
97:2c:05:1a:44:19:bb:0d:2a:0c:1d:6d:87:f8:a0:2d:79:18:
bd:1c:c4:6f:a3:64:6f:de:7e:7b:3a:0e:c3:12:bd:3d:ba:d3:
96:fe:a4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:22 2024 by rpki-client on console-ams.rpki-client.org