Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/2ORkov7OjabzpPw4SDbVskZPMBQ.roa
File: 2ORkov7OjabzpPw4SDbVskZPMBQ.roa (raw, json)
Hash identifier: 8cJwvyxDAZz/tfJPKHQhj3qgYPeoth59uPBQ6mK7TwE=
Subject key identifier: D8:E4:64:A2:FE:CE:8D:A6:F3:A4:FC:38:48:36:D5:B2:46:4F:30:14
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018E560B9D06F99B54C6BBC38C38D587C74F
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/2ORkov7OjabzpPw4SDbVskZPMBQ.roa
Signing time: Tue 19 Mar 2024 09:29:45 +0000
ROA not before: Tue 19 Mar 2024 09:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 147.45.49.0/24 maxlen: 24
147.45.50.0/24 maxlen: 24
147.45.51.0/24 maxlen: 24
147.45.84.0/24 maxlen: 24
147.45.85.0/24 maxlen: 24
147.45.86.0/24 maxlen: 24
147.45.87.0/24 maxlen: 24
147.45.116.0/24 maxlen: 24
147.45.200.0/23 maxlen: 23
147.45.202.0/23 maxlen: 23
147.45.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 17:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:56:0b:9d:06:f9:9b:54:c6:bb:c3:8c:38:d5:87:c7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Mar 19 09:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8e464a2fece8da6f3a4fc384836d5b2464f3014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:cf:d9:e8:34:90:98:50:88:76:42:30:2a:
09:bb:28:68:65:9e:5f:3a:88:5e:fc:96:82:b5:65:
1c:f7:67:a6:01:b3:c5:9e:dc:ea:ff:71:54:95:e1:
f9:88:3c:43:63:57:f3:c5:a2:fc:2b:5f:da:31:14:
df:0d:6f:ff:3e:6a:48:96:5d:a8:dd:8b:e1:05:cc:
ef:f2:c8:9a:00:bb:f8:64:ab:43:47:39:f8:6a:41:
0b:bc:3d:0f:af:a6:35:c5:45:b7:66:f2:df:25:c2:
ff:30:29:af:aa:ea:1e:ba:81:80:b9:8e:1c:a3:9b:
ff:ec:f2:5c:fe:07:dd:57:22:2c:43:83:f4:77:e1:
63:de:e8:93:f7:4c:84:6f:e6:ba:b1:03:12:2b:09:
82:fc:c0:38:b2:3b:b4:cc:21:11:b1:b8:e2:9b:8c:
77:5d:55:53:3a:d1:49:e7:fe:d8:25:b2:f8:78:ec:
d4:7f:1e:d2:59:7e:e1:1a:aa:bd:af:02:af:b6:24:
1e:c0:c2:06:b8:8d:f3:f6:8a:36:99:a4:b7:91:a0:
0c:ff:bc:25:1c:96:69:ca:b8:49:19:ca:c9:94:50:
aa:e2:21:52:20:4c:b4:2e:2d:a2:d8:c7:cd:2e:ac:
cc:bf:7d:2d:3c:0f:df:6f:17:7b:56:e9:3e:de:d2:
21:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E4:64:A2:FE:CE:8D:A6:F3:A4:FC:38:48:36:D5:B2:46:4F:30:14
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/2ORkov7OjabzpPw4SDbVskZPMBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.49.0-147.45.51.255
147.45.84.0/22
147.45.116.0/24
147.45.200.0-147.45.204.255
Signature Algorithm: sha256WithRSAEncryption
2c:9b:93:7c:d5:d5:4e:d5:c8:80:38:f4:8c:bf:e2:24:66:f2:
68:ee:78:31:4c:99:81:c0:eb:db:41:b7:22:0c:b0:ed:8a:6c:
02:a0:ac:4c:69:56:a1:28:21:d2:35:c0:a9:64:a8:af:53:fb:
b9:fa:86:51:11:ab:b6:61:94:05:9c:eb:57:e9:1b:ea:cf:7a:
6f:d0:6f:d7:ba:c3:c5:cd:7e:fc:7f:77:59:6b:61:d7:1e:88:
42:7a:ec:2c:66:57:a6:82:bd:9b:6c:9b:ca:d4:61:5e:c3:49:
1e:07:01:cd:e7:32:61:7f:83:dd:97:fc:30:97:44:cc:a4:20:
46:a7:d4:d9:6c:1a:9e:07:2f:30:fe:dd:d9:b2:b0:bf:c3:f7:
41:32:a4:b4:60:30:b5:94:f7:71:c7:d2:8d:6c:d8:7f:5a:14:
c4:45:0c:a4:ec:34:c5:7d:09:cb:93:fb:fa:48:7d:ed:55:ee:
b6:eb:c7:6c:34:75:64:8f:3a:11:41:02:46:49:4b:61:be:95:
a7:ff:ab:c9:b5:e5:3c:c0:cc:86:20:a3:2e:10:89:99:07:28:
18:73:f5:92:57:49:b4:2f:47:b2:4a:e7:8e:00:9d:d5:8b:34:
03:e2:04:88:08:c5:82:3e:0a:55:a6:51:2c:72:17:71:58:27:
8b:1a:1d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 22:09:09 2024 by rpki-client on console-ams.rpki-client.org