Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/HN4rXG2CWOCKeY6lt7xNizhICwo.roa
File: HN4rXG2CWOCKeY6lt7xNizhICwo.roa (raw, json)
Hash identifier: nnhtgniSbgzIhPKtMDBAjqQ0dfRxfMe5+o1lI4FnIsc=
Subject key identifier: 1C:DE:2B:5C:6D:82:58:E0:8A:79:8E:A5:B7:BC:4D:8B:38:48:0B:0A
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018EBEC9635EA43A20EF7D52A9F917570D7A
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/HN4rXG2CWOCKeY6lt7xNizhICwo.roa
Signing time: Mon 08 Apr 2024 17:37:32 +0000
ROA not before: Mon 08 Apr 2024 17:37:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 147.45.49.0/24 maxlen: 24
147.45.50.0/24 maxlen: 24
147.45.51.0/24 maxlen: 24
147.45.84.0/24 maxlen: 24
147.45.85.0/24 maxlen: 24
147.45.86.0/24 maxlen: 24
147.45.87.0/24 maxlen: 24
147.45.116.0/24 maxlen: 24
147.45.177.0/24 maxlen: 24
147.45.178.0/24 maxlen: 24
147.45.179.0/24 maxlen: 24
147.45.200.0/23 maxlen: 23
147.45.202.0/23 maxlen: 23
147.45.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 15:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:be:c9:63:5e:a4:3a:20:ef:7d:52:a9:f9:17:57:0d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Apr 8 17:37:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cde2b5c6d8258e08a798ea5b7bc4d8b38480b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a9:2b:e9:9a:c9:bd:19:b5:19:cf:fd:76:fd:
ba:87:72:17:c1:79:d5:74:e8:78:07:99:31:20:85:
c7:58:d6:6d:9a:da:e9:91:9c:24:19:e4:0d:15:c7:
47:79:dd:88:e0:75:c7:71:61:87:cf:1f:b8:1c:f1:
f1:03:47:4b:69:d4:3d:ae:e3:cc:65:bd:ae:b1:af:
b1:c8:4c:10:2d:dd:5e:17:f5:65:47:7f:03:5a:f5:
5b:11:aa:1b:8a:1a:30:59:e9:be:5e:5b:79:e9:5c:
b3:c0:c1:91:11:39:8d:4f:ff:08:bf:e7:4f:8c:12:
d6:2e:98:c1:9f:90:f3:2d:aa:6d:1b:07:22:89:a0:
4a:d3:d4:ea:d3:50:83:a2:d5:9d:c7:61:b4:e9:7c:
95:1b:aa:61:d4:26:b0:ce:50:38:44:92:94:0c:1e:
bf:4e:5d:93:ba:13:23:2a:b2:3e:f6:bf:65:64:43:
a5:97:3b:8f:2e:9c:d7:4c:bb:c7:9a:b9:05:04:5c:
54:f9:5f:5e:be:97:03:67:5a:fd:88:f9:91:60:9c:
36:c9:3e:64:db:e3:92:b3:85:2a:94:8e:b3:4e:1f:
61:96:3e:d1:22:b4:4b:04:6d:f2:61:9d:83:96:29:
5a:23:bd:a6:3d:3b:1a:ee:68:fa:01:95:73:aa:3a:
f4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DE:2B:5C:6D:82:58:E0:8A:79:8E:A5:B7:BC:4D:8B:38:48:0B:0A
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/HN4rXG2CWOCKeY6lt7xNizhICwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.49.0-147.45.51.255
147.45.84.0/22
147.45.116.0/24
147.45.177.0-147.45.179.255
147.45.200.0-147.45.204.255
Signature Algorithm: sha256WithRSAEncryption
3c:87:f7:f2:1b:07:0d:81:f5:a1:37:1e:b4:92:e2:e7:af:f1:
52:c1:5f:41:29:a7:7c:d4:01:c3:2e:14:7a:3b:28:b4:d5:96:
b8:36:d0:69:79:ad:d8:2b:f0:2a:f6:0f:d2:fc:cc:f1:49:67:
19:58:61:7d:17:22:f3:45:df:ff:64:c7:e9:50:8a:1a:a4:43:
b9:58:ef:52:b3:4e:66:0b:89:ec:da:30:56:42:d8:a0:f8:bd:
39:0d:ff:b0:58:ad:0e:f4:1d:06:72:20:09:87:8c:76:e7:81:
52:a9:9a:53:19:bb:2d:64:d6:ad:e5:1b:61:54:cf:1e:15:64:
05:db:c9:0a:3e:fd:79:d8:2d:f5:9c:9b:d8:11:3c:a3:3d:3a:
3d:ed:e8:22:df:1f:6f:5c:58:7a:07:32:9c:a3:35:89:7b:1e:
41:09:6d:87:aa:92:00:b6:4d:75:be:cf:16:ee:f2:87:28:96:
3d:9a:dc:e6:32:21:d8:34:4e:f8:74:7e:e3:e5:b0:87:5e:6b:
7a:4a:f1:d3:28:11:96:59:47:58:a3:a1:55:37:d0:a5:32:ee:
16:41:14:c9:63:ac:23:29:10:12:01:45:46:88:f5:92:93:be:
ac:97:c4:91:7d:91:46:f3:66:b6:cb:ce:43:57:d1:93:28:8b:
d2:47:53:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 18:36:08 2024 by rpki-client on console-fra.rpki-client.org