Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/4M0-CaxkqKOE5TildIshegrKC8M.roa
File: 4M0-CaxkqKOE5TildIshegrKC8M.roa (raw, json)
Hash identifier: M75F7yaW4VWUlsNOLf+zm52LCuOooT9ZaSouBpzONko=
Subject key identifier: E0:CD:3E:09:AC:64:A8:A3:84:E5:38:A5:74:8B:21:7A:0A:CA:0B:C3
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018E2CDDB1A9879CD3B116AF8E492A55484B
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/4M0-CaxkqKOE5TildIshegrKC8M.roa
Signing time: Mon 11 Mar 2024 09:35:10 +0000
ROA not before: Mon 11 Mar 2024 09:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
146.19.125.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 21:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2c:dd:b1:a9:87:9c:d3:b1:16:af:8e:49:2a:55:48:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 11 09:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0cd3e09ac64a8a384e538a5748b217a0aca0bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:0b:05:ca:ec:96:43:06:a4:c8:a8:c6:27:
59:2b:46:6d:11:e5:aa:f1:2c:7a:eb:76:d5:90:98:
a4:a3:0e:a0:76:c6:c5:27:70:dc:74:a6:08:27:44:
5c:85:2a:7e:a3:0c:df:bc:15:eb:c8:8e:01:74:3b:
3c:08:2d:b8:0c:29:06:9c:dd:6f:64:ad:ec:6f:df:
85:7c:49:db:51:eb:1c:4e:9e:b0:88:3a:1b:08:ce:
51:e8:68:8a:17:06:a7:49:b1:2e:a6:63:02:21:38:
29:a0:a3:51:97:b8:e8:db:e3:c9:9c:b4:0d:16:81:
5c:c3:a8:6d:7b:63:6c:55:cc:cd:e1:b7:03:bc:d2:
07:1d:1b:b7:6b:67:8e:30:e7:19:dc:6a:a4:31:a6:
dd:56:67:70:b4:56:56:f7:c9:8a:3e:da:35:70:22:
4d:69:f9:6c:7d:e1:a5:8b:37:87:5d:77:5e:c8:64:
4e:28:3a:46:e3:e8:49:5d:ef:33:b6:0f:a8:b8:da:
ed:72:0d:c7:58:3e:bb:a9:b6:77:30:fa:bb:88:b0:
32:b9:0e:0d:95:95:84:c6:ce:bf:b7:91:65:66:9d:
21:ea:08:f7:f9:92:43:c9:11:ff:45:fa:8a:0c:4c:
54:f1:40:a9:87:89:df:8e:80:0d:cd:bb:ae:09:23:
d4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CD:3E:09:AC:64:A8:A3:84:E5:38:A5:74:8B:21:7A:0A:CA:0B:C3
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/4M0-CaxkqKOE5TildIshegrKC8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
5.181.87.0/24
45.88.139.0/24
45.94.170.0/23
85.209.120.0/23
146.19.125.0/24
193.30.241.0/24
193.57.41.0/24
195.177.92.0/23
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:db:f8:02:97:c8:c8:6f:82:6a:e6:de:2b:cf:4c:28:27:f6:
be:f2:be:ef:57:26:df:22:85:c8:e4:68:1f:98:b1:82:24:63:
a8:b6:98:8b:6b:cd:76:7b:f2:a9:f5:d7:75:68:57:cb:0f:a1:
c9:2d:05:f8:6d:3e:e5:2d:b3:70:bf:8d:ce:db:72:a8:f8:42:
8c:d9:3c:19:62:33:ed:a2:f7:e9:26:a4:f8:e9:51:89:bf:49:
e1:0c:61:8a:c6:97:79:bd:03:b6:05:f4:31:a3:8d:46:3e:05:
90:1b:e0:d1:f6:65:db:b3:1b:c4:5b:83:90:ba:c0:00:05:1f:
cd:f1:2f:00:bf:72:dd:9d:99:e5:a8:26:76:7d:f8:74:6c:f3:
18:a8:2d:3b:9d:95:3d:e4:ba:c8:5b:26:b6:df:53:6c:36:cd:
59:52:c8:64:fc:75:20:80:2a:5c:42:c2:54:05:a5:1c:f0:da:
b6:e4:a7:c1:38:0d:74:c7:af:1d:11:56:6f:0e:45:68:2f:6a:
62:b6:9e:37:40:38:8b:15:a2:89:2f:ad:75:ae:37:b1:97:a0:
6c:7a:67:07:a2:a1:cb:ed:d2:5a:84:99:f5:16:d2:05:0f:8b:
52:80:9a:98:94:bc:c0:0a:2f:e1:ab:06:e0:2e:97:a5:74:b7:
76:85:02:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 23:08:38 2024 by rpki-client on console-fra.rpki-client.org