Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/K4GfHYNhGErNIZftxIk7WPP-9EE.roa
File: K4GfHYNhGErNIZftxIk7WPP-9EE.roa (raw, json)
Hash identifier: orrN3UR7QCorYlgejuW+mF6z6YL+rpDNEwkjY4PXOPA=
Subject key identifier: 2B:81:9F:1D:83:61:18:4A:CD:21:97:ED:C4:89:3B:58:F3:FE:F4:41
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018DB44CB31AE78963B14E9F3EAA2FC16783
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/K4GfHYNhGErNIZftxIk7WPP-9EE.roa
Signing time: Fri 16 Feb 2024 23:42:21 +0000
ROA not before: Fri 16 Feb 2024 23:42:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 45.88.139.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
146.19.125.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 15:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b4:4c:b3:1a:e7:89:63:b1:4e:9f:3e:aa:2f:c1:67:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 16 23:42:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b819f1d8361184acd2197edc4893b58f3fef441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:d7:d5:3d:44:7b:68:42:36:4a:cb:a6:6d:
28:e0:9b:7e:7b:72:cd:12:c5:b9:ae:14:87:d2:1a:
bf:ef:a3:bc:cf:90:86:aa:dc:e7:78:5a:75:53:3a:
ff:cc:cf:bc:a8:0e:13:b7:c3:62:34:79:cd:0c:fe:
bf:ab:e3:7b:32:92:c9:f1:f3:d4:53:e8:a0:22:b3:
27:18:dc:fc:6b:a1:05:f6:13:bb:d1:11:b3:05:1b:
79:4e:c3:19:71:56:70:9e:53:8a:1e:61:77:9a:9d:
a1:9a:4e:56:37:2e:a4:07:5e:6b:3d:58:99:de:3a:
e9:f6:51:7e:a5:3b:37:10:21:19:f9:cd:4a:72:d6:
bd:2a:0d:da:d8:c5:27:ad:ba:b3:06:3c:e9:11:4e:
1a:4b:b0:4f:b9:24:5e:be:b4:0e:0e:66:9f:bf:ed:
fd:6e:46:39:1a:30:93:2e:db:b2:76:a3:a5:a4:6a:
94:19:42:d1:3a:75:ac:0d:81:07:34:01:c9:e2:07:
e0:a4:6c:b7:5f:79:bb:fb:eb:e7:36:81:c7:d3:ca:
b8:7f:2b:95:43:fa:49:9d:73:e2:a4:ba:d5:bc:fd:
68:94:9d:96:08:28:4c:28:f9:f1:2c:e4:e6:cd:c3:
e1:a2:d0:9d:15:71:5a:26:82:24:7f:9f:a1:98:33:
ac:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:81:9F:1D:83:61:18:4A:CD:21:97:ED:C4:89:3B:58:F3:FE:F4:41
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/K4GfHYNhGErNIZftxIk7WPP-9EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.139.0/24
45.94.170.0/23
85.209.120.0/23
146.19.125.0/24
193.30.241.0/24
193.57.41.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
30:45:fe:aa:cd:65:15:e6:7b:d7:41:7f:80:ec:f5:d6:52:13:
a2:5b:cd:f8:52:2a:e6:9e:aa:21:c7:b4:c6:fc:cc:f7:90:b4:
05:2d:bf:0c:c8:b8:c4:6c:f8:7f:1e:52:81:f4:eb:24:7e:d4:
d3:e2:1d:d9:02:b6:d8:1a:37:31:d5:32:e1:46:6a:d6:c4:49:
a7:df:fd:4d:fd:a2:1c:99:b5:bb:fc:92:a1:02:ee:93:91:19:
78:69:c5:a0:c2:1f:69:57:e6:75:f5:c3:6e:d7:74:ba:e5:ef:
74:2c:4b:3b:29:3a:7f:64:4d:fd:d7:8f:ff:26:e2:70:f1:06:
3c:60:69:9d:84:73:d0:33:3b:1a:40:31:83:82:02:85:b0:2d:
83:b3:5d:7e:ea:3f:fb:e9:e6:a2:9a:43:14:50:14:ad:6c:a0:
79:39:5b:b8:34:b2:34:54:86:45:3f:4e:3a:1d:fc:75:53:e7:
12:b4:39:83:a0:37:2b:da:aa:7c:79:3f:43:67:f7:23:5a:6a:
0f:2d:c4:e2:55:37:95:d3:9f:29:72:68:0c:65:79:75:73:6b:
a8:3d:9f:10:26:53:7f:93:af:68:67:37:d7:51:58:59:9b:43:
4e:ed:0f:c5:86:73:26:42:b2:a0:30:f5:a2:15:ca:36:6b:57:
52:b0:8a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 21 19:06:51 2024 by rpki-client on console-ams.rpki-client.org