Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/vN2w3xfTdQShzO9TWqtcdLb_038.roa
File: vN2w3xfTdQShzO9TWqtcdLb_038.roa (raw, json)
Hash identifier: Wlb0T5y1dfRFTMrBKiWk28yRGBPiZkqu1QXOOXG1m2U=
Subject key identifier: BC:DD:B0:DF:17:D3:75:04:A1:CC:EF:53:5A:AB:5C:74:B6:FF:D3:7F
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 018F19D57F405B1A592A74BD5258771EA519
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/vN2w3xfTdQShzO9TWqtcdLb_038.roa
Signing time: Fri 26 Apr 2024 09:56:13 +0000
ROA not before: Fri 26 Apr 2024 09:56:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30962
IP address blocks: 45.129.240.0/22 maxlen: 22
45.129.241.0/24 maxlen: 24
62.108.32.0/20 maxlen: 20
62.108.48.0/20 maxlen: 20
84.19.0.0/19 maxlen: 19
89.107.64.0/21 maxlen: 21
91.190.144.0/21 maxlen: 21
91.230.27.0/24 maxlen: 24
91.230.47.0/24 maxlen: 24
93.190.88.0/21 maxlen: 21
93.190.95.0/24 maxlen: 24
185.147.216.0/22 maxlen: 22
194.113.216.0/23 maxlen: 23
195.62.20.0/23 maxlen: 23
195.191.114.0/23 maxlen: 23
195.225.240.0/22 maxlen: 22
2a00:f70::/32 maxlen: 32
2a03:f200::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 03 May 2024 10:37:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:d5:7f:40:5b:1a:59:2a:74:bd:52:58:77:1e:a5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Apr 26 09:56:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcddb0df17d37504a1ccef535aab5c74b6ffd37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f1:a3:c6:e2:dd:3e:a4:58:ad:34:b3:f5:62:
44:f0:70:0e:9b:54:10:e9:53:b9:7a:8e:8a:22:59:
9b:c1:1f:5c:93:bc:19:89:09:68:b6:97:27:cc:b6:
b7:58:13:e6:95:1c:fa:54:0e:e4:26:15:61:2b:da:
99:04:cc:ea:5e:be:94:3a:6a:9a:64:c8:8a:21:98:
95:14:fa:8a:3a:82:fa:bb:ce:63:de:ac:e4:d4:c4:
84:07:e2:e9:11:7f:7d:5d:6f:0c:3f:20:a8:86:7e:
2f:9e:e4:64:1a:65:e7:46:ce:77:f3:3a:f7:a1:fd:
8a:ec:ca:a1:64:04:43:d7:86:6a:c7:3a:dd:76:94:
73:42:59:ba:9e:f7:24:50:6f:3b:eb:ae:19:f9:f1:
15:ba:0c:7f:cf:e6:69:a2:55:1c:23:57:bb:7e:b5:
5a:47:b6:6f:27:03:3b:26:bb:2c:8e:c1:f1:ed:c0:
2e:f2:05:90:7a:c8:38:26:0d:ec:eb:fd:8d:e7:71:
9c:eb:6e:cd:56:a4:57:c5:64:57:3f:73:bf:d4:6d:
80:14:b2:40:78:a3:d5:28:94:3e:33:dd:31:4f:08:
42:56:cd:6a:e1:97:17:0d:fc:cb:a7:5e:c1:58:53:
a8:c4:b1:47:bb:6e:9c:d8:77:2d:aa:3c:16:b0:03:
86:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DD:B0:DF:17:D3:75:04:A1:CC:EF:53:5A:AB:5C:74:B6:FF:D3:7F
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/vN2w3xfTdQShzO9TWqtcdLb_038.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.240.0/22
62.108.32.0/19
84.19.0.0/19
89.107.64.0/21
91.190.144.0/21
91.230.27.0/24
91.230.47.0/24
93.190.88.0/21
185.147.216.0/22
194.113.216.0/23
195.62.20.0/23
195.191.114.0/23
195.225.240.0/22
IPv6:
2a00:f70::/32
2a03:f200::/32
Signature Algorithm: sha256WithRSAEncryption
37:b5:90:8e:93:ea:85:57:16:0e:1a:d3:a1:f0:c6:7b:c6:e0:
ef:94:c8:de:55:ae:bf:b7:6a:94:21:db:c8:27:12:39:8f:e7:
e6:a8:0d:b8:a2:6c:9d:2b:41:a7:7e:1c:62:5f:d7:22:8b:45:
0d:f5:cf:43:a7:85:49:2d:cf:42:dc:27:68:e5:7d:aa:b7:2a:
ab:c0:70:9b:37:d4:07:5e:2d:07:2b:86:a3:7d:72:49:e4:23:
e3:f1:74:00:93:95:5c:21:34:e6:e0:d5:f4:c7:b4:24:3d:17:
18:30:98:d6:a4:c7:0e:4c:be:c4:8c:3f:f0:f6:50:1c:ae:08:
eb:5e:b8:9c:2b:c8:24:69:10:cf:f3:16:3b:4c:6e:f0:7c:8f:
25:f0:d0:b8:e8:ab:7b:35:2d:a7:a3:6a:48:f9:53:e9:ee:20:
f0:76:40:88:aa:28:5e:5c:e1:f9:14:fb:4a:ed:9f:5c:92:9e:
72:66:6c:7a:36:d6:c3:12:0e:68:98:3a:5c:d3:0d:a2:9b:f0:
40:0c:e0:a5:47:d1:0a:3a:5e:57:e9:99:46:95:96:66:a0:51:
2e:70:7c:9f:df:8a:84:cb:88:a8:7e:3c:fc:33:33:03:7b:09:
59:9d:d9:8d:25:25:48:79:f0:a7:9e:98:08:83:33:dd:fa:cb:
a3:b7:a8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:29 2024 by rpki-client on console-ams.rpki-client.org