Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/1LFnLBPxoRd7mkqQV2gfOb0QWHQ.roa
File: 1LFnLBPxoRd7mkqQV2gfOb0QWHQ.roa (raw, json)
Hash identifier: BBZIFdFjoVd5bYa70bg4g1g+OFouoO7oYVdRSwfTba4=
Subject key identifier: D4:B1:67:2C:13:F1:A1:17:7B:9A:4A:90:57:68:1F:39:BD:10:58:74
Certificate issuer: /CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Certificate serial: 0193449670AB61E8C7BDBB4614BEEFE470F6
Authority key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/1LFnLBPxoRd7mkqQV2gfOb0QWHQ.roa
Signing time: Tue 19 Nov 2024 13:22:09 +0000
ROA not before: Tue 19 Nov 2024 13:22:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208366
IP address blocks: 45.142.220.0/22 maxlen: 22
45.142.220.0/24 maxlen: 24
45.142.221.0/24 maxlen: 24
45.142.222.0/24 maxlen: 24
45.142.223.0/24 maxlen: 24
2a0e:dbc0::/29 maxlen: 29
2a0e:dbc0::/48 maxlen: 48
2a0e:dbc0:1::/48 maxlen: 48
2a0e:dbc0:2::/48 maxlen: 48
2a0e:dbc0:3::/48 maxlen: 48
2a0e:dbc0:4::/48 maxlen: 48
2a0e:dbc0:5::/48 maxlen: 48
2a0e:dbc0:6::/48 maxlen: 48
2a0e:dbc0:7::/48 maxlen: 48
2a0e:dbc0:8::/48 maxlen: 48
2a0e:dbc0:9::/48 maxlen: 48
2a0e:dbc0:a::/48 maxlen: 48
2a0e:dbc0:b::/48 maxlen: 48
2a0e:dbc0:c::/48 maxlen: 48
2a0e:dbc0:d::/48 maxlen: 48
2a0e:dbc0:e::/48 maxlen: 48
2a0e:dbc0:f::/48 maxlen: 48
2a0e:dbc0:1000::/48 maxlen: 48
2a0e:dbc0:1001::/48 maxlen: 48
2a0e:dbc0:1002::/48 maxlen: 48
2a0e:dbc0:1003::/48 maxlen: 48
2a0e:dbc0:1004::/48 maxlen: 48
2a0e:dbc0:1005::/48 maxlen: 48
2a0e:dbc0:1006::/48 maxlen: 48
2a0e:dbc0:1007::/48 maxlen: 48
2a0e:dbc0:1008::/48 maxlen: 48
2a0e:dbc0:1009::/48 maxlen: 48
2a0e:dbc0:100a::/48 maxlen: 48
2a0e:dbc0:100b::/48 maxlen: 48
2a0e:dbc0:100c::/48 maxlen: 48
2a0e:dbc0:100d::/48 maxlen: 48
2a0e:dbc0:100f::/48 maxlen: 48
2a0e:dbc0:2000::/48 maxlen: 48
2a0e:dbc0:2001::/48 maxlen: 48
2a0e:dbc0:2002::/48 maxlen: 48
2a0e:dbc0:2003::/48 maxlen: 48
2a0e:dbc0:2004::/48 maxlen: 48
2a0e:dbc0:2005::/48 maxlen: 48
2a0e:dbc0:2006::/48 maxlen: 48
2a0e:dbc0:2007::/48 maxlen: 48
2a0e:dbc0:2008::/48 maxlen: 48
2a0e:dbc0:2009::/48 maxlen: 48
2a0e:dbc0:200a::/48 maxlen: 48
2a0e:dbc0:200b::/48 maxlen: 48
2a0e:dbc0:200c::/48 maxlen: 48
2a0e:dbc0:200d::/48 maxlen: 48
2a0e:dbc0:200f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 20 Nov 2024 14:11:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:44:96:70:ab:61:e8:c7:bd:bb:46:14:be:ef:e4:70:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Validity
Not Before: Nov 19 13:22:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4b1672c13f1a1177b9a4a9057681f39bd105874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e1:d9:70:17:b8:ce:ff:a3:c3:1b:93:5f:6d:
ef:7d:c3:f8:01:ee:82:6b:66:be:eb:84:42:0c:1d:
36:5a:a6:ef:ba:55:63:e1:62:d1:ff:5d:28:3d:ca:
2a:b7:2c:02:4f:8f:37:00:cf:ea:e2:db:d6:99:ac:
f5:bf:07:be:69:b2:93:6a:c9:74:d6:27:e4:77:98:
0d:da:1a:af:27:ac:ba:28:ba:7b:56:07:8f:14:ee:
56:27:e4:1e:b5:29:5d:42:96:d9:cb:86:3c:c7:29:
e5:76:6a:08:bd:7d:2c:2f:cb:d7:f0:85:f7:79:6f:
83:82:a4:02:b0:d3:0e:d6:a2:e1:30:91:ca:d9:eb:
78:ef:85:66:39:0e:09:45:34:e2:5d:f8:a1:b0:e5:
2d:48:8b:24:41:e8:4b:39:38:cc:af:d3:c6:98:fd:
a8:9d:81:fa:d4:ff:55:b8:80:54:d3:53:0e:60:6a:
80:00:6c:ba:b4:52:4e:40:36:df:e7:6f:88:12:66:
0b:46:75:35:07:68:33:e2:e8:cb:29:f4:58:55:f4:
23:0a:c0:b4:99:bf:ea:35:51:23:33:e8:f0:2c:93:
51:fb:81:92:ec:d8:8e:9e:07:3f:93:87:1e:91:41:
e8:47:27:3b:35:d2:0a:1d:40:4e:77:53:ef:c4:ac:
c3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B1:67:2C:13:F1:A1:17:7B:9A:4A:90:57:68:1F:39:BD:10:58:74
X509v3 Authority Key Identifier:
keyid:51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/1LFnLBPxoRd7mkqQV2gfOb0QWHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.220.0/22
IPv6:
2a0e:dbc0::/29
Signature Algorithm: sha256WithRSAEncryption
86:6b:b9:0a:30:01:12:2c:66:11:16:b8:5d:e7:45:83:18:88:
d5:de:94:0b:ce:86:92:cc:20:ad:f3:ef:cc:a4:11:c9:a4:69:
50:1c:56:35:3a:fe:9f:ab:bf:02:18:9f:62:dc:f6:9c:15:e3:
74:33:59:09:f9:ad:8d:95:b2:fc:c4:a5:f3:ee:30:5f:8b:f2:
43:f8:62:62:49:d5:a9:e9:b0:b0:ad:eb:a7:36:53:c9:d8:da:
03:43:43:a7:1d:69:f1:fd:77:24:0d:fd:cb:16:b7:f6:47:58:
fa:7c:d9:62:a2:ab:00:ad:af:f7:bc:08:60:c6:1f:f8:de:97:
ce:4e:46:eb:37:7b:99:cc:23:20:b3:21:4b:81:01:b8:8c:3e:
b4:ed:53:07:97:b7:f4:f8:e0:1c:58:f1:58:6c:d9:f0:42:7a:
c6:0f:ca:be:77:63:8b:16:2a:de:28:c3:b1:7f:2a:1f:31:1c:
f0:de:88:d1:ba:9f:ff:22:64:7c:c3:de:62:2c:53:b6:18:5a:
63:1d:2d:cd:94:57:c4:60:a3:5c:70:dd:6b:fe:c2:a4:a6:f8:
51:69:ba:e3:81:75:27:d1:a0:46:d5:fd:8d:9e:10:6d:f9:5e:
e1:83:d3:ab:92:ef:95:1d:2c:d0:0d:dd:ed:d6:9e:ac:05:62:
dc:9f:d4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 17:27:22 2024 by rpki-client on console-ams.rpki-client.org