Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/fUiSLezBwM4y5gjDnJV7Hr1BCBM.roa
File: fUiSLezBwM4y5gjDnJV7Hr1BCBM.roa (raw, json)
Hash identifier: pw2Vz1EvFqab5uRDfy36dNxCUk/MZkSp5exsXbzFzIY=
Subject key identifier: 7D:48:92:2D:EC:C1:C0:CE:32:E6:08:C3:9C:95:7B:1E:BD:41:08:13
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 0187BEB5DA51EC5BF0D0D0CDDD725B214BFD
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/fUiSLezBwM4y5gjDnJV7Hr1BCBM.roa
Signing time: Wed 26 Apr 2023 17:56:41 +0000
ROA not before: Wed 26 Apr 2023 17:56:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199636
IP address blocks: 185.146.220.0/22 maxlen: 24
141.255.128.0/21 maxlen: 24
212.114.16.0/20 maxlen: 24
88.212.152.0/22 maxlen: 24
45.80.8.0/22 maxlen: 24
185.91.220.0/22 maxlen: 24
45.80.24.0/22 maxlen: 24
45.80.20.0/22 maxlen: 24
45.80.32.0/22 maxlen: 24
95.178.88.0/22 maxlen: 24
88.202.236.0/22 maxlen: 24
91.203.92.0/22 maxlen: 24
185.44.88.0/22 maxlen: 24
130.180.208.0/20 maxlen: 24
2a05:6e00::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 18 Sep 2023 09:53:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:be:b5:da:51:ec:5b:f0:d0:d0:cd:dd:72:5b:21:4b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Apr 26 17:56:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d48922decc1c0ce32e608c39c957b1ebd410813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:8a:2b:26:ec:00:b7:2f:2c:9f:ba:28:00:
28:02:26:a9:25:10:79:d6:d5:a7:3e:39:b4:6e:34:
db:69:5b:c0:d7:1f:72:1e:67:32:23:a6:25:0e:df:
d6:b1:3c:94:00:c4:9e:2f:3b:70:a9:66:c5:35:8f:
d1:83:23:cd:d1:98:3a:d4:0f:51:09:d8:35:7e:44:
9f:4d:63:29:01:39:db:f2:26:1f:2c:10:3f:f3:1d:
a1:39:34:0a:ad:af:89:67:e1:80:1b:75:44:09:99:
38:60:2c:81:1d:4c:57:c6:7e:1d:42:7e:36:b7:71:
a3:0e:99:df:e5:0a:f2:19:bb:5d:2a:96:24:db:c0:
01:0b:df:ad:29:30:91:d7:bf:ca:dc:ec:2a:3b:c4:
34:82:b7:f4:69:d3:eb:3e:30:26:fa:5a:ed:9a:ae:
3c:17:3b:2b:1e:d2:10:12:49:3b:da:7c:76:c7:fc:
66:1d:29:4c:e2:04:80:d0:0e:28:ea:77:e9:47:b0:
c6:81:c0:ab:39:c0:ca:1d:78:b2:cc:8f:88:af:e5:
ff:56:93:f3:21:19:d7:10:92:c6:c1:26:50:90:36:
07:08:ff:1e:f7:0b:42:a1:d2:a4:a4:ff:48:ec:c0:
b4:ca:1d:5c:dc:64:7a:da:7c:cf:0a:52:44:d2:e6:
9d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:48:92:2D:EC:C1:C0:CE:32:E6:08:C3:9C:95:7B:1E:BD:41:08:13
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/fUiSLezBwM4y5gjDnJV7Hr1BCBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.8.0/22
45.80.20.0-45.80.27.255
45.80.32.0/22
88.202.236.0/22
88.212.152.0/22
91.203.92.0/22
95.178.88.0/22
130.180.208.0/20
141.255.128.0/21
185.44.88.0/22
185.91.220.0/22
185.146.220.0/22
212.114.16.0/20
IPv6:
2a05:6e00::/29
Signature Algorithm: sha256WithRSAEncryption
61:88:7c:b2:20:bf:b0:fe:e6:94:fe:ca:81:4a:ef:5b:e4:74:
fb:c1:f9:2e:42:91:c8:ba:05:0a:bb:50:1a:83:c7:f9:d4:4a:
0a:de:f7:55:85:b1:03:ee:9f:b0:c3:5a:c7:90:7b:b6:42:dc:
c5:66:01:49:ae:c8:0f:0b:9d:c7:45:16:22:cc:df:c3:1b:44:
c9:65:24:eb:04:7f:ee:9d:d4:67:6a:2c:72:c2:37:92:3d:3d:
b1:98:74:f2:5f:00:fd:db:19:99:19:84:75:d3:88:7f:38:c7:
12:f5:28:8f:6a:61:29:27:57:76:58:72:43:51:36:86:11:b2:
b0:17:4b:03:9b:5f:15:6d:99:a2:39:cf:27:40:bb:ee:9a:5b:
e9:9a:5f:04:33:61:84:66:22:07:65:21:19:80:0e:97:5f:4b:
76:27:59:1f:d6:ba:9f:d5:eb:f4:48:9d:39:e2:9c:70:14:11:
ac:48:05:d6:70:e2:89:15:60:87:6f:52:11:2f:31:f7:cf:d3:
9e:b8:42:f3:79:93:e0:55:04:3b:3a:4e:01:bb:ee:1c:e7:c6:
35:93:65:d0:da:10:8a:26:5b:4c:30:17:4c:2f:b9:e0:e2:53:
3b:92:f1:da:a7:c7:04:c8:1c:1c:4e:80:81:c2:44:8b:0f:ab:
f4:e7:e4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:17 2024 by rpki-client on console-ams.rpki-client.org