Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/sWGvmw2Hjce0Dsyfm2w-NkBuqRI.roa
File: sWGvmw2Hjce0Dsyfm2w-NkBuqRI.roa (raw, json)
Hash identifier: y60MI5a08ZQJE+5mF+OR3DRUWd0lIacCTH+06k8fOuM=
Subject key identifier: B1:61:AF:9B:0D:87:8D:C7:B4:0E:CC:9F:9B:6C:3E:36:40:6E:A9:12
Certificate issuer: /CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Certificate serial: 01856EB912AF3DA4042D0956A67FCFCEFEDA
Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/sWGvmw2Hjce0Dsyfm2w-NkBuqRI.roa
Signing time: Sun 01 Jan 2023 19:05:00 +0000
ROA not before: Sun 01 Jan 2023 19:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39093
IP address blocks: 45.158.144.0/22 maxlen: 22
185.46.252.0/22 maxlen: 22
88.81.96.0/19 maxlen: 19
2a02:3d8::/32 maxlen: 32
2a0f:6380::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:12:af:3d:a4:04:2d:09:56:a6:7f:cf:ce:fe:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Validity
Not Before: Jan 1 19:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b161af9b0d878dc7b40ecc9f9b6c3e36406ea912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:62:4d:01:6d:87:6b:72:94:59:e4:6e:39:
52:d1:39:17:a2:2b:f5:b1:ca:29:b0:94:55:47:ba:
40:86:b6:cf:3e:05:02:2d:8f:f6:a0:1e:4e:f6:86:
5b:76:77:a3:02:a5:0d:c7:9b:5f:1c:bf:bf:38:31:
f0:36:6b:8f:ad:d0:af:89:3f:15:4a:21:95:68:87:
df:c6:c4:61:cc:3d:c4:5f:bd:ea:e6:80:f7:eb:20:
ea:a4:d6:15:f7:d2:90:85:31:66:59:78:cb:da:3c:
0a:96:23:fa:8a:10:17:40:c3:20:04:5b:d7:a1:0f:
5b:cf:9d:90:43:58:7c:bb:74:10:60:62:5e:22:81:
b9:4d:ee:30:4a:80:b3:5d:8b:95:4b:67:a4:6a:f7:
16:5d:7b:8f:b7:53:61:b0:4a:00:3f:ae:ef:f4:cc:
cf:f3:d5:0f:6d:dd:f3:2b:bd:57:a9:c9:87:f4:8b:
dc:71:64:a4:cd:bd:da:bf:d8:f5:3d:95:b1:c7:a9:
4e:de:1d:a3:42:39:98:69:d6:47:e6:63:8d:c3:76:
c7:4e:c2:37:65:67:85:db:39:01:35:35:bd:2a:e5:
d0:56:42:9a:84:8d:90:11:2e:01:34:d8:21:43:56:
18:5d:22:ef:79:96:63:16:81:07:c8:dd:c6:bd:7a:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:61:AF:9B:0D:87:8D:C7:B4:0E:CC:9F:9B:6C:3E:36:40:6E:A9:12
X509v3 Authority Key Identifier:
keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/sWGvmw2Hjce0Dsyfm2w-NkBuqRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.144.0/22
88.81.96.0/19
185.46.252.0/22
IPv6:
2a02:3d8::/32
2a0f:6380::/29
Signature Algorithm: sha256WithRSAEncryption
4d:6d:a8:71:05:af:2e:e6:6a:01:1b:fc:98:6f:3d:f5:43:57:
1c:ec:50:13:7a:f6:20:88:17:49:53:ed:78:91:12:c0:3f:9b:
ad:25:dd:91:b0:39:70:9a:b9:e1:f0:9b:a3:f5:97:ca:f2:c0:
b6:ac:c7:88:90:7f:74:93:b3:10:65:90:89:20:69:c4:a5:c2:
8c:f3:48:03:b0:8d:02:bb:23:1a:ee:ad:42:f3:d1:74:40:3c:
53:22:f1:6a:3d:9d:9f:50:92:1f:86:43:ec:ed:6c:b1:a5:eb:
71:c7:87:00:64:a0:0f:6e:e3:05:19:31:c5:5e:20:4d:80:c6:
6c:1f:13:58:b5:2b:38:87:99:67:48:91:d3:37:4f:14:a7:d6:
07:47:a9:82:52:76:c4:49:89:d7:61:45:31:d1:03:22:2c:4b:
b0:e4:14:3c:8e:00:cb:c8:2c:5b:f2:7a:8e:8f:4f:38:30:c7:
b5:f8:e9:75:cf:b7:90:5b:a6:26:ee:04:ec:6f:ae:d1:13:69:
57:42:5c:a0:39:c4:77:84:8f:bc:ea:75:6a:a6:46:18:dc:88:
3c:4d:cf:6c:f1:17:88:69:b0:63:b5:f6:2a:39:e8:aa:d9:be:
b2:01:db:9f:16:49:b4:5f:49:92:ee:48:dd:ac:fc:df:13:ac:
04:69:5a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:19 2024 by rpki-client on console-fra.rpki-client.org