Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/RYhwYmRN9Vd6SuB_iZf5QUDrKkY.roa
File: RYhwYmRN9Vd6SuB_iZf5QUDrKkY.roa (raw, json)
Hash identifier: sMcbI0tIDIStZuddFMm3hkR6bhQUpsskCsjKYKMvIZc=
Subject key identifier: 45:88:70:62:64:4D:F5:57:7A:4A:E0:7F:89:97:F9:41:40:EB:2A:46
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0191D2F2A4BF87D6EB25BEFC0743C28E4F9C
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/RYhwYmRN9Vd6SuB_iZf5QUDrKkY.roa
Signing time: Sun 08 Sep 2024 18:43:22 +0000
ROA not before: Sun 08 Sep 2024 18:43:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202592
IP address blocks: 43.240.148.0/22 maxlen: 24
45.12.100.0/22 maxlen: 24
147.185.196.0/23 maxlen: 24
147.185.206.0/23 maxlen: 24
185.96.56.0/22 maxlen: 24
185.136.16.0/22 maxlen: 24
193.168.200.0/22 maxlen: 24
194.38.48.0/22 maxlen: 24
2a05:ff00::/29 maxlen: 48
2a07:5b40::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 09 Sep 2024 14:08:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d2:f2:a4:bf:87:d6:eb:25:be:fc:07:43:c2:8e:4f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 8 18:43:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45887062644df5577a4ae07f8997f94140eb2a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:01:92:8a:75:4a:f4:e5:63:a2:f6:c0:3f:12:
34:9d:7e:17:c6:7d:7b:c4:da:2c:b8:b7:8c:4e:6f:
6a:30:49:e4:02:63:d8:0b:56:39:12:b3:10:ba:27:
af:41:bc:c2:51:f7:36:bd:f0:d3:cd:bd:ae:01:0b:
b0:b7:0d:2a:5e:f3:8f:b7:03:56:5e:c7:72:cb:90:
92:91:ad:03:33:4c:0c:32:e3:7f:d8:58:09:9a:77:
5d:e2:4d:e4:db:33:f4:97:2e:f4:93:43:3a:2a:88:
36:02:b5:d4:e1:e4:c9:cd:e9:83:5d:67:eb:e9:e0:
40:9a:3a:3b:c5:e9:a3:4f:b7:f1:46:56:8f:b6:b6:
d5:f6:15:62:e5:28:79:09:40:82:d3:d5:b4:f2:04:
46:54:3d:f6:ed:4d:5f:b3:5f:ec:d5:3e:7e:24:b0:
5a:fb:85:3b:db:cc:bf:13:fa:84:4f:19:f3:93:5f:
83:8d:6e:24:08:81:cf:b7:94:f2:f2:ae:b4:20:b5:
6c:fc:77:22:0e:7c:01:4d:a6:0f:34:af:ec:83:54:
43:31:fb:98:0b:fa:62:bb:54:5e:b8:9e:4a:b5:4c:
a7:f5:80:e3:7b:4c:c5:04:43:02:ca:54:d3:ea:50:
71:f4:ee:b6:6f:ea:8c:3b:6b:42:6f:ce:89:86:b5:
19:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:88:70:62:64:4D:F5:57:7A:4A:E0:7F:89:97:F9:41:40:EB:2A:46
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/RYhwYmRN9Vd6SuB_iZf5QUDrKkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.148.0/22
45.12.100.0/22
147.185.196.0/23
147.185.206.0/23
185.96.56.0/22
185.136.16.0/22
193.168.200.0/22
194.38.48.0/22
IPv6:
2a05:ff00::/29
2a07:5b40::/29
Signature Algorithm: sha256WithRSAEncryption
35:6f:50:a9:45:13:47:d7:51:4f:c4:f0:f3:70:0f:7e:2b:fe:
79:13:11:2f:c4:82:e2:61:54:77:62:79:95:c0:b1:ce:a5:b2:
52:86:69:36:c9:6f:0c:2c:97:a3:46:84:dd:e8:24:e5:fc:5c:
45:2d:88:f3:06:24:51:c1:f2:a3:d3:0d:c1:60:75:2c:43:f0:
d8:52:9b:f4:2a:77:ef:31:8f:80:fc:cd:03:ab:4a:6b:dc:99:
43:60:0b:8f:5d:fe:0c:61:40:04:2c:18:e1:25:b7:47:c6:c6:
6b:2a:51:0c:af:97:58:d2:e2:28:84:e2:ac:7c:0b:15:73:ab:
cc:ec:00:86:ca:a4:f6:76:fc:79:d0:ca:a3:8e:f3:a0:1f:21:
3f:e1:39:cf:17:dc:f6:f0:86:f6:c0:e1:71:0b:39:11:a3:20:
17:e2:85:72:bb:ac:28:80:14:ea:69:aa:21:2f:46:e5:db:71:
f3:86:7d:38:7f:9d:3d:1e:0c:77:d2:84:03:33:40:ed:d6:5b:
7e:3b:dd:7c:77:68:63:20:79:44:f9:61:33:fe:1f:86:39:bd:
32:d1:cd:8c:c0:80:ae:3d:16:1f:0c:40:d6:1b:e9:f0:a0:1d:
ce:6b:66:7c:eb:5a:86:cc:b7:ad:ed:ec:96:0d:1f:c4:5b:6f:
28:8c:7a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 16:31:38 2024 by rpki-client on console-fra.rpki-client.org