Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/6YTjuxB1vSvYFndzHkK-n-eSPpA.roa
File: 6YTjuxB1vSvYFndzHkK-n-eSPpA.roa (raw, json)
Hash identifier: lBCTE7f5+3Ddtg3eSUlg+7+rx9Hk9LlJV8R0CsVO+wk=
Subject key identifier: E9:84:E3:BB:10:75:BD:2B:D8:16:77:73:1E:42:BE:9F:E7:92:3E:90
Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial: 0193BF6C3FB6A7D36DA133C688B578C16A40
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/6YTjuxB1vSvYFndzHkK-n-eSPpA.roa
Signing time: Fri 13 Dec 2024 09:49:22 +0000
ROA not before: Fri 13 Dec 2024 09:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51747
IP address blocks: 5.133.192.0/19 maxlen: 20
45.142.64.0/22 maxlen: 24
45.146.48.0/22 maxlen: 24
45.150.72.0/22 maxlen: 24
80.248.224.0/20 maxlen: 20
95.215.168.0/22 maxlen: 24
151.248.0.0/21 maxlen: 21
151.252.24.0/21 maxlen: 21
176.74.192.0/21 maxlen: 21
185.12.148.0/22 maxlen: 22
185.12.248.0/22 maxlen: 22
185.159.184.0/22 maxlen: 24
185.159.192.0/22 maxlen: 24
193.19.80.0/23 maxlen: 24
193.247.74.0/23 maxlen: 24
193.247.126.0/23 maxlen: 24
195.88.110.0/23 maxlen: 24
195.95.184.0/24 maxlen: 24
195.189.112.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 13:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:6c:3f:b6:a7:d3:6d:a1:33:c6:88:b5:78:c1:6a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
Validity
Not Before: Dec 13 09:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e984e3bb1075bd2bd81677731e42be9fe7923e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:cc:f9:ef:ff:d8:97:0b:90:5d:a9:66:16:
13:23:e4:17:88:18:58:34:21:fd:86:fa:ee:01:38:
53:bf:64:81:d3:0c:53:51:b5:2f:58:d1:9f:ea:c0:
08:ed:02:24:02:43:f0:41:34:78:5b:36:f1:9a:10:
58:11:05:bf:1b:d6:7b:8d:1b:13:6c:7f:bf:30:8c:
ec:10:ab:00:0e:93:b4:9f:36:f4:b9:b4:58:2b:8c:
81:97:89:82:b7:0e:97:ec:d6:ad:a5:ac:bc:6f:22:
d1:f5:23:1b:05:f1:5e:cf:7c:8e:a1:ae:22:40:16:
0b:0f:2f:0d:12:aa:c3:4e:1e:88:4b:93:8b:14:15:
1f:69:cb:a9:22:03:78:e3:bf:35:a9:c0:5c:cc:52:
17:f8:42:4a:c2:55:f9:9c:8f:ee:47:d7:36:61:23:
16:b5:dd:9e:14:fd:3a:2f:f8:13:43:73:b5:5b:b6:
06:69:ae:64:d5:14:e0:63:76:c6:cd:42:d6:1a:87:
cc:dc:71:9e:1c:8f:5f:34:5d:31:8f:a5:29:ab:a1:
5c:1e:23:fe:fa:e8:3e:a0:76:7f:ec:de:fe:ca:3a:
a3:2e:8b:ce:3a:de:7e:b4:f1:23:8c:1b:2c:b4:d9:
d6:33:c2:33:c0:22:c4:49:ab:d8:4b:2e:78:fc:ba:
6f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:84:E3:BB:10:75:BD:2B:D8:16:77:73:1E:42:BE:9F:E7:92:3E:90
X509v3 Authority Key Identifier:
keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/6YTjuxB1vSvYFndzHkK-n-eSPpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.192.0/19
45.142.64.0/22
45.146.48.0/22
45.150.72.0/22
80.248.224.0/20
95.215.168.0/22
151.248.0.0/21
151.252.24.0/21
176.74.192.0/21
185.12.148.0/22
185.12.248.0/22
185.159.184.0/22
185.159.192.0/22
193.19.80.0/23
193.247.74.0/23
193.247.126.0/23
195.88.110.0/23
195.95.184.0/24
195.189.112.0/22
Signature Algorithm: sha256WithRSAEncryption
23:95:73:7f:1e:fa:24:43:01:96:f8:fa:19:d8:5c:ae:f0:a8:
25:5a:09:2a:41:82:f3:7c:04:49:cf:e3:da:2b:94:a0:a8:41:
cb:9b:ed:bc:1c:b5:42:e9:45:39:ce:ec:91:2c:b3:ec:e3:ca:
92:ab:b3:ce:ad:4a:d3:a7:5f:40:ea:d6:67:a4:a2:93:5a:ea:
f5:b1:13:58:5b:fd:5f:9d:de:08:5a:47:ba:b6:3a:63:4b:ec:
94:36:10:fb:7e:b6:1e:cc:99:72:cb:85:e0:63:f1:6f:d6:8b:
6b:ab:7a:bf:c9:a7:b9:7a:75:22:34:48:88:9f:a0:b2:9d:2c:
9d:2a:00:70:70:09:f0:7b:eb:6f:fc:3c:c3:c6:c6:dd:f4:18:
8b:d2:d7:0e:b1:ed:24:c9:a8:39:e4:9a:f8:86:42:8f:4d:8e:
78:fe:86:6e:52:fc:1d:03:b5:76:95:ab:85:36:a8:91:b7:b2:
ed:a2:dd:47:9b:7b:b5:be:ae:f3:f3:22:2a:20:6b:2b:18:c3:
36:e4:73:a6:59:c9:98:02:68:9d:4c:24:ed:31:b4:92:71:c2:
fe:cf:af:ca:d0:ab:9e:c5:7c:6a:c9:52:74:a0:20:93:42:1e:
3d:54:fc:fe:78:57:91:01:11:df:34:ab:76:6f:48:2c:b6:82:
09:97:6f:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:35 2025 by rpki-client