Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/RX2hi7p-pkmHS7Oi70i6hbq0fKo.roa
File: RX2hi7p-pkmHS7Oi70i6hbq0fKo.roa (raw, json)
Hash identifier: E/XcubN0cFqshRCOIGuIS+DRgRgcPmJD0vFiCpXWwbA=
Subject key identifier: 45:7D:A1:8B:BA:7E:A6:49:87:4B:B3:A2:EF:48:BA:85:BA:B4:7C:AA
Certificate issuer: /CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Certificate serial: 018572DF128F7052FB24C9EED63E708E8418
Authority key identifier: CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/RX2hi7p-pkmHS7Oi70i6hbq0fKo.roa
Signing time: Mon 02 Jan 2023 14:24:59 +0000
ROA not before: Mon 02 Jan 2023 14:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197589
IP address blocks: 85.204.112.0/22 maxlen: 22
89.42.0.0/21 maxlen: 21
94.177.68.0/22 maxlen: 22
185.96.20.0/22 maxlen: 22
94.176.44.0/22 maxlen: 22
46.235.136.0/21 maxlen: 21
2a04:d680::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:df:12:8f:70:52:fb:24:c9:ee:d6:3e:70:8e:84:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Validity
Not Before: Jan 2 14:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=457da18bba7ea649874bb3a2ef48ba85bab47caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:0b:f4:8a:cc:fc:23:15:7c:78:19:9c:d5:
cb:a0:36:e8:60:5f:91:d0:61:b4:79:d4:89:52:e8:
b5:3c:75:3a:25:50:d3:41:d2:6f:2c:3c:4b:ca:1b:
88:3e:fa:5f:a2:c1:a7:8d:58:7c:36:17:af:8d:15:
d2:89:c3:3a:d0:ae:38:42:76:79:82:b9:bc:4c:cc:
23:77:5d:9e:75:72:44:3a:fb:7f:b6:13:4e:62:f9:
07:e8:da:65:45:cf:27:43:36:99:5e:8c:70:80:71:
5d:b6:62:45:da:05:b0:74:73:8a:bb:97:b5:c6:9f:
d7:ce:c6:d0:15:fc:6f:0d:af:39:8d:de:50:b2:82:
58:6a:96:cd:d1:fb:ba:f4:b6:1a:b6:da:01:7a:45:
cb:77:5d:54:65:d6:61:0d:1d:65:17:91:59:c7:65:
36:ff:25:24:1e:fe:36:cc:35:2f:15:13:cd:06:05:
4a:68:90:76:c5:4c:6c:e8:e6:e7:19:d7:9e:bb:c4:
c6:2a:77:d5:51:08:a9:aa:19:bd:72:d9:65:c6:9b:
83:18:ab:16:90:51:1e:15:c2:6d:ff:92:be:73:f5:
3b:0e:af:66:a8:15:f5:9f:e5:18:0b:07:66:bc:4f:
11:26:87:8c:01:0d:50:c5:b4:22:3e:b3:ba:97:98:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7D:A1:8B:BA:7E:A6:49:87:4B:B3:A2:EF:48:BA:85:BA:B4:7C:AA
X509v3 Authority Key Identifier:
keyid:CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/RX2hi7p-pkmHS7Oi70i6hbq0fKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.136.0/21
85.204.112.0/22
89.42.0.0/21
94.176.44.0/22
94.177.68.0/22
185.96.20.0/22
IPv6:
2a04:d680::/29
Signature Algorithm: sha256WithRSAEncryption
22:2a:9a:6e:40:8d:9f:34:db:6c:4d:8c:c7:00:6d:1f:9d:71:
d5:63:36:22:cf:da:ce:d2:0b:a6:9a:e4:7f:73:9f:3c:02:79:
b2:b9:2a:63:3d:e3:c8:da:0d:f3:81:10:b4:52:63:d8:e1:e2:
68:94:e1:d5:ff:9d:ba:9e:f2:0f:25:2f:53:d3:f3:2e:1d:88:
01:0e:ea:3a:7c:f2:05:96:30:73:4e:6c:80:27:9e:4b:fb:2f:
59:27:a8:08:b6:e7:2c:4e:ac:3d:2c:c1:58:8a:4d:5e:70:66:
f7:cd:08:18:b2:65:9f:ca:59:10:df:97:2c:8a:09:25:7c:b3:
d3:e1:94:0e:5f:9a:c8:22:eb:31:2d:a5:1e:83:20:cb:6d:52:
be:ea:62:6b:32:c1:08:7a:37:98:c5:10:df:9e:2a:a7:9e:05:
07:0d:59:cc:e2:be:97:94:52:bd:dc:36:26:69:a5:fc:1d:cf:
39:7b:8a:79:a8:ca:28:ea:8e:9c:be:31:fc:b9:69:72:ea:8c:
c5:79:74:55:cb:f7:38:a5:f2:4b:4f:1b:cc:ab:dd:b6:c6:23:
92:81:6a:6c:53:70:21:f0:d0:29:16:f7:1b:e2:e3:13:90:ee:
db:c4:55:d1:6b:0e:63:50:96:b7:7f:1f:2b:ff:85:dc:bd:96:
bb:93:d2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:15 2024 by rpki-client on console-ams.rpki-client.org