Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/_UmWz0HeR76pFtEWh7GyyplksWw.roa
File: _UmWz0HeR76pFtEWh7GyyplksWw.roa (raw, json)
Hash identifier: 930RWW/of81f4EcwlhhnykNWcEAlli0BqoWk2D3Kczs=
Subject key identifier: FD:49:96:CF:41:DE:47:BE:A9:16:D1:16:87:B1:B2:CA:99:64:B1:6C
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018B6CEB35DF7B949A2D87A667F7BADE92E8
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/_UmWz0HeR76pFtEWh7GyyplksWw.roa
Signing time: Thu 26 Oct 2023 16:57:15 +0000
ROA not before: Thu 26 Oct 2023 16:57:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203446
IP address blocks: 45.90.97.0/24 maxlen: 24
45.90.96.0/24 maxlen: 24
45.134.39.0/24 maxlen: 24
45.131.65.0/24 maxlen: 24
185.117.0.0/24 maxlen: 24
45.13.226.0/24 maxlen: 24
204.11.1.0/24 maxlen: 24
2.56.246.0/24 maxlen: 24
45.67.139.0/24 maxlen: 24
45.145.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Nov 2023 10:23:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6c:eb:35:df:7b:94:9a:2d:87:a6:67:f7:ba:de:92:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Oct 26 16:57:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd4996cf41de47bea916d11687b1b2ca9964b16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:af:c5:d1:32:78:f9:8d:5e:e3:b0:4f:06:
2e:5b:aa:75:1f:85:65:4f:7a:06:84:83:b2:71:63:
da:a7:ef:b5:13:ca:16:7d:bd:9a:84:12:c6:7e:04:
a4:b3:d8:57:67:94:9d:d3:66:67:b8:e6:f6:3c:64:
9d:7e:85:18:21:94:3e:e5:59:49:c1:f6:7f:65:90:
3e:be:08:70:fe:1f:c6:19:c4:dc:b5:bf:e5:42:4f:
85:7c:f5:1e:4a:b6:16:16:74:e7:30:0e:0a:14:ca:
9a:61:94:d9:07:12:01:78:67:92:05:a4:16:51:07:
88:b9:96:60:af:6a:8b:ae:e9:ad:38:51:d1:c7:00:
c3:e9:3a:aa:88:9c:ed:6d:ff:ca:42:0b:3d:8b:97:
70:c5:24:f7:65:d3:2a:ff:ae:a0:e9:be:0a:ec:78:
74:b9:dd:41:2b:35:b4:25:60:ac:b1:52:28:5c:10:
f9:0b:11:22:85:45:b2:01:3e:e0:a5:3f:a3:0c:83:
27:e6:06:2c:6a:52:41:af:8e:f1:d3:39:c4:b6:a1:
81:47:57:93:2d:cc:c0:54:be:f0:6c:f8:b0:d4:5a:
f6:b3:1f:38:a1:e1:6f:b2:a3:53:6b:09:4e:ae:98:
ae:2c:25:cc:42:9c:ab:2f:e9:f9:67:c0:56:88:62:
fc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:49:96:CF:41:DE:47:BE:A9:16:D1:16:87:B1:B2:CA:99:64:B1:6C
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/_UmWz0HeR76pFtEWh7GyyplksWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.246.0/24
45.13.226.0/24
45.67.139.0/24
45.90.96.0/23
45.131.65.0/24
45.134.39.0/24
45.145.226.0/24
185.117.0.0/24
204.11.1.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:73:52:e5:8a:47:d6:b9:5a:62:58:7e:97:66:28:3e:39:bf:
54:6e:83:7f:50:ec:b5:df:39:84:bc:b8:8f:e7:bb:57:9c:a0:
ff:08:ac:d1:e1:25:7c:62:05:0d:4e:d0:b2:b0:04:db:70:7a:
30:84:bf:73:73:35:ae:a1:04:c8:6d:1f:bb:37:9c:71:e0:5b:
4f:cd:4e:94:33:6c:99:a8:b8:41:90:32:ed:4c:ba:23:7c:29:
fd:16:81:c2:82:17:ed:d8:83:b0:02:04:49:52:10:af:b5:68:
8e:a6:08:59:00:aa:09:57:65:a1:20:ef:e2:60:ab:c0:ac:99:
c2:96:9b:89:7f:64:7d:93:c2:8c:bf:65:cf:44:47:73:f1:96:
69:f5:13:e0:52:89:42:06:27:0b:cb:0e:04:f8:47:4a:93:43:
99:fd:c4:05:c3:8c:ea:8d:1a:75:f5:f1:c4:0d:ad:dc:1f:3d:
45:61:bd:21:05:c7:c4:ce:44:c4:75:5c:65:fc:e7:48:40:d8:
18:3c:b8:3b:bd:39:78:ea:4b:47:c0:9f:dc:a6:b6:85:80:2c:
cc:1e:9d:49:5b:9d:36:c9:9a:e4:53:10:50:f5:f5:9e:3f:19:
29:e7:34:22:5f:37:3e:11:41:ec:73:5c:62:e8:e1:3c:20:98:
4d:53:be:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org