Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/4k5FXjQcflm3SbKF_nLTA9wka9g.roa
File: 4k5FXjQcflm3SbKF_nLTA9wka9g.roa (raw, json)
Hash identifier: p8bIUalVQh21P0tW8TQ/AtXK/s2eFHGPe61ntsujhrU=
Subject key identifier: E2:4E:45:5E:34:1C:7E:59:B7:49:B2:85:FE:72:D3:03:DC:24:6B:D8
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018EA386824F2C6DEF79B90B4F3CD1E6B3A1
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/4k5FXjQcflm3SbKF_nLTA9wka9g.roa
Signing time: Wed 03 Apr 2024 10:34:45 +0000
ROA not before: Wed 03 Apr 2024 10:34:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 147.45.101.0/24 maxlen: 24
147.45.102.0/24 maxlen: 24
147.45.103.0/24 maxlen: 24
147.45.104.0/24 maxlen: 24
147.45.105.0/24 maxlen: 24
147.45.106.0/24 maxlen: 24
147.45.107.0/24 maxlen: 24
147.45.108.0/24 maxlen: 24
147.45.109.0/24 maxlen: 24
147.45.110.0/24 maxlen: 24
147.45.111.0/24 maxlen: 24
147.45.132.0/24 maxlen: 24
147.45.133.0/24 maxlen: 24
147.45.134.0/24 maxlen: 24
147.45.135.0/24 maxlen: 24
147.45.136.0/24 maxlen: 24
147.45.137.0/24 maxlen: 24
147.45.138.0/24 maxlen: 24
147.45.139.0/24 maxlen: 24
147.45.140.0/24 maxlen: 24
147.45.141.0/24 maxlen: 24
147.45.142.0/24 maxlen: 24
147.45.143.0/24 maxlen: 24
147.45.144.0/20 maxlen: 24
147.45.184.0/24 maxlen: 24
147.45.185.0/24 maxlen: 24
147.45.186.0/24 maxlen: 24
147.45.187.0/24 maxlen: 24
147.45.189.0/24 maxlen: 24
147.45.190.0/24 maxlen: 24
147.45.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 17:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a3:86:82:4f:2c:6d:ef:79:b9:0b:4f:3c:d1:e6:b3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Apr 3 10:34:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e24e455e341c7e59b749b285fe72d303dc246bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:2b:4d:0c:6f:a6:af:99:b6:57:93:0a:be:
be:13:82:3c:2c:ff:21:b9:93:14:7e:5c:9b:8b:d7:
12:59:a6:1c:81:be:a0:ee:00:26:97:8c:1f:7b:74:
06:a9:c0:7a:8d:6c:2c:87:41:91:62:69:92:b6:55:
9b:77:d7:00:f8:0d:75:01:f6:c3:0e:2b:56:1f:b3:
64:43:15:97:a3:1d:40:d6:76:85:de:7e:5c:35:e3:
02:7a:c8:fe:8c:da:2f:1b:42:c0:f2:08:26:44:8d:
cf:e1:e7:56:43:ed:fd:79:15:38:97:5c:28:b3:0d:
c5:e1:39:4b:89:a5:34:bd:dc:94:31:66:39:6a:6c:
2a:6e:a8:8e:75:a0:0d:55:26:c7:50:33:3c:7c:69:
5a:89:39:9a:6d:1a:55:6a:33:5d:d7:b7:9e:99:4d:
14:5a:d9:c1:eb:bc:cd:2c:92:8c:57:70:76:f3:32:
18:b7:94:a1:ef:f7:d1:f1:f7:36:1e:e4:91:67:20:
a7:68:94:29:b2:a6:74:57:87:c5:00:34:8b:be:d8:
17:36:77:e0:5e:28:aa:cf:cd:d2:a8:3a:b4:a8:c1:
42:e3:02:73:4a:f3:7a:ef:cb:4e:2f:11:b7:36:d6:
40:b6:6d:b3:77:db:3a:96:d9:2d:e1:c1:fc:aa:52:
79:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4E:45:5E:34:1C:7E:59:B7:49:B2:85:FE:72:D3:03:DC:24:6B:D8
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/4k5FXjQcflm3SbKF_nLTA9wka9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.101.0-147.45.111.255
147.45.132.0-147.45.159.255
147.45.184.0/22
147.45.189.0-147.45.191.255
Signature Algorithm: sha256WithRSAEncryption
59:04:29:53:21:e2:95:75:9a:06:59:16:fc:31:35:87:0a:49:
3c:a1:22:07:0a:2a:2f:e5:ab:a0:e3:d4:89:33:cd:60:f6:82:
be:29:0b:ab:49:83:85:39:d6:86:a2:74:ea:dc:5f:f2:09:e4:
da:f8:f8:32:a8:12:23:e2:06:6a:80:31:f4:75:9e:e7:a9:29:
99:fa:d3:9c:32:08:ab:22:a5:c6:7a:83:28:f7:9f:e2:b0:94:
b8:5d:c8:17:7f:de:3e:be:4b:04:4d:85:eb:a9:2a:04:d2:a6:
39:6f:4c:2c:42:10:98:72:a1:09:a9:7d:53:bd:a3:ba:ee:2f:
02:d6:65:74:5c:dd:e9:a0:46:80:4e:ad:a6:b0:e2:d6:a0:86:
06:1b:1f:a4:51:73:a8:a6:9b:a5:15:7d:36:b3:e0:ff:d7:3e:
4d:3c:61:cc:58:5e:e5:67:7a:5c:99:05:5b:3f:a0:ba:8b:a0:
8e:64:16:66:15:83:b0:91:c0:35:69:74:f2:17:7e:c3:1c:27:
7e:09:36:dd:84:7e:61:a3:fc:ea:27:c6:52:35:23:7d:2e:b7:
8c:25:84:8f:cf:b0:5d:4c:72:3f:db:fd:ab:17:4c:b1:19:f4:
32:11:7f:38:c6:1b:93:50:07:06:16:2a:52:e8:d3:a6:a6:7c:
67:1d:6a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 21:38:24 2024 by rpki-client on console-ams.rpki-client.org