Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/1bSK87ktTSZvxzEEitGBtwK8ueE.roa
File: 1bSK87ktTSZvxzEEitGBtwK8ueE.roa (raw, json)
Hash identifier: lqosbe3hIvFXXW0bC9aFdsGeORdYtaA7Tja3iDZAF6k=
Subject key identifier: D5:B4:8A:F3:B9:2D:4D:26:6F:C7:31:04:8A:D1:81:B7:02:BC:B9:E1
Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial: 018CC726CF8AEC9ACA3C07034BAF5416C697
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/1bSK87ktTSZvxzEEitGBtwK8ueE.roa
Signing time: Mon 01 Jan 2024 22:30:58 +0000
ROA not before: Mon 01 Jan 2024 22:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60144
IP address blocks: 45.150.76.0/22 maxlen: 24
185.53.8.0/22 maxlen: 24
192.162.136.0/24 maxlen: 24
192.162.136.0/22 maxlen: 24
45.138.36.0/22 maxlen: 24
91.215.156.0/22 maxlen: 24
185.56.28.0/22 maxlen: 24
185.27.236.0/22 maxlen: 24
2a07:f9c0::/29 maxlen: 48
2a02:5060::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 22 Jan 2024 00:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:cf:8a:ec:9a:ca:3c:07:03:4b:af:54:16:c6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Validity
Not Before: Jan 1 22:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5b48af3b92d4d266fc731048ad181b702bcb9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:4d:e6:4d:31:c7:0c:f7:31:05:dc:e4:4c:
15:92:ee:d6:28:92:99:ad:b3:27:be:91:d7:19:1a:
ff:60:8b:d1:87:bc:83:81:c2:db:c9:4d:66:06:c0:
fa:97:d8:78:ff:49:a7:5f:d4:54:c2:6a:1b:69:8f:
3a:bb:8f:63:3e:8d:68:f5:e0:ed:df:dc:be:d4:81:
63:b0:a4:3f:25:b1:89:a7:af:2a:59:30:be:1b:2a:
ce:0d:37:af:70:ad:bc:7c:12:2d:1d:48:f7:67:4f:
56:12:da:38:c5:68:93:b9:3e:11:fe:b1:6a:7a:c0:
5a:99:e8:cc:aa:7d:69:20:5b:50:db:c7:7d:4a:95:
38:22:55:99:72:3a:18:71:2e:58:6d:a3:5b:6c:46:
a2:ad:6b:1b:59:76:f0:ff:09:85:b5:8c:e5:2f:5b:
18:48:f9:0c:ee:97:7c:b6:9b:a6:b6:aa:f0:33:6f:
17:44:01:b4:d5:06:92:05:af:aa:ee:74:2d:99:d5:
a6:a6:82:bd:8c:31:3f:75:04:bd:3e:a0:a3:70:81:
8a:51:95:ea:1f:5d:70:2e:ed:f4:4d:30:08:c0:cb:
87:72:6e:a1:75:8a:c9:eb:ff:68:16:52:d0:e9:c4:
7b:d4:2f:a0:99:56:62:4d:b1:51:ec:66:ba:ef:df:
42:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B4:8A:F3:B9:2D:4D:26:6F:C7:31:04:8A:D1:81:B7:02:BC:B9:E1
X509v3 Authority Key Identifier:
keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/1bSK87ktTSZvxzEEitGBtwK8ueE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.36.0/22
45.150.76.0/22
91.215.156.0/22
185.27.236.0/22
185.53.8.0/22
185.56.28.0/22
192.162.136.0/22
IPv6:
2a02:5060::/32
2a07:f9c0::/29
Signature Algorithm: sha256WithRSAEncryption
34:ab:30:f4:4e:2b:25:64:74:ee:8f:b3:3c:9e:09:59:16:84:
15:72:02:8b:c3:2b:6b:fb:db:63:05:64:4f:b9:fc:6e:83:0f:
0b:54:ad:4c:49:83:86:96:73:4b:77:f0:69:d3:30:9b:f1:5b:
db:90:94:fb:9b:ec:4c:08:61:b7:21:9d:87:f2:3f:9e:ee:e6:
77:aa:2b:d1:35:58:66:30:64:5c:2c:68:40:9c:97:86:d0:ab:
7b:c2:be:27:3b:c6:5e:46:31:b8:5a:b9:0d:df:9f:1c:78:61:
6d:30:0c:83:9e:2a:3d:6d:e9:2f:79:34:2d:a9:4a:4d:b5:59:
c4:68:5b:c1:3b:d3:de:4a:8a:b4:cc:4f:1f:13:c8:cb:fd:4f:
53:55:7d:e2:bf:73:8e:b4:7b:63:4b:74:38:4c:24:94:74:a2:
44:af:b2:35:15:f5:c8:8f:c9:43:ef:99:7f:38:81:50:10:5b:
f3:33:fb:ac:01:ce:2a:12:ab:99:77:26:00:70:aa:80:7a:21:
cd:31:f9:30:5e:46:11:4d:27:24:df:bc:f0:5c:54:b8:b1:04:
a5:de:5d:dc:39:35:2a:24:1c:db:ef:03:d7:97:99:0d:86:db:
d8:8b:15:20:a7:27:6a:ef:8a:70:5d:39:42:c9:a3:40:94:9f:
ac:2c:86:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 04:52:40 2024 by rpki-client on console-fra.rpki-client.org