Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/4Cc291SAyUfrG3Noff7G_NlKgRk.roa
File: 4Cc291SAyUfrG3Noff7G_NlKgRk.roa (raw, json)
Hash identifier: 3Y+4oXXmlzYkTzFEoFFMg5OUJUKH62cgitLmoJWQWd8=
Subject key identifier: E0:27:36:F7:54:80:C9:47:EB:1B:73:68:7D:FE:C6:FC:D9:4A:81:19
Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial: 018D2E7982822D9121D074EFADEE6C756D8E
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/4Cc291SAyUfrG3Noff7G_NlKgRk.roa
Signing time: Mon 22 Jan 2024 00:02:11 +0000
ROA not before: Mon 22 Jan 2024 00:02:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60144
IP address blocks: 45.138.36.0/22 maxlen: 24
45.150.76.0/22 maxlen: 24
91.215.156.0/22 maxlen: 24
146.19.105.0/24 maxlen: 24
185.27.236.0/22 maxlen: 24
185.53.8.0/22 maxlen: 24
185.56.28.0/22 maxlen: 24
192.162.136.0/22 maxlen: 24
192.162.136.0/24 maxlen: 24
2a02:5060::/32 maxlen: 48
2a07:f9c0::/29 maxlen: 48
2a12:1680::/29 maxlen: 29
2a12:8f00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 24 Jan 2024 16:50:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2e:79:82:82:2d:91:21:d0:74:ef:ad:ee:6c:75:6d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Validity
Not Before: Jan 22 00:02:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e02736f75480c947eb1b73687dfec6fcd94a8119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:4c:e8:b2:16:e3:ec:cf:6f:43:a0:74:b6:
22:71:42:2d:a4:90:83:a9:b9:47:37:4e:a1:a4:ee:
e3:7b:55:ad:7b:66:ce:6a:12:b4:98:a0:96:59:8e:
75:db:4f:93:dd:aa:2c:9d:b5:9a:15:0b:e6:f2:81:
8d:84:2a:e8:35:7a:ed:10:b4:ab:39:0b:86:5b:f0:
0c:a3:f1:90:cd:f3:1a:c4:17:3a:f0:40:9d:ec:c1:
4f:1f:76:93:6a:f0:86:12:99:11:b0:fe:5c:21:1f:
53:3d:d8:54:73:1e:f4:30:55:db:b1:44:65:fb:70:
01:24:0f:3a:a4:0e:d8:50:1b:13:44:61:2c:a2:af:
e2:8e:0f:9f:ba:f9:04:32:fa:0e:22:b1:22:29:20:
64:b4:2f:d8:69:70:56:6c:b7:65:27:bd:48:7e:e2:
a9:d5:a4:e9:bd:33:81:d1:1a:f2:85:ef:87:48:db:
15:38:04:97:da:03:94:74:e0:90:4c:09:a0:11:9a:
b0:1b:41:a0:4a:09:28:8b:bf:51:1c:24:34:d8:71:
98:f0:30:d8:6e:2c:91:40:23:1d:88:94:65:97:b8:
ee:9d:b1:b1:86:da:d5:24:88:71:05:0d:6f:92:34:
9f:79:84:3e:09:d0:02:10:38:13:00:fa:5e:c6:79:
d8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:27:36:F7:54:80:C9:47:EB:1B:73:68:7D:FE:C6:FC:D9:4A:81:19
X509v3 Authority Key Identifier:
keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/4Cc291SAyUfrG3Noff7G_NlKgRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.36.0/22
45.150.76.0/22
91.215.156.0/22
146.19.105.0/24
185.27.236.0/22
185.53.8.0/22
185.56.28.0/22
192.162.136.0/22
IPv6:
2a02:5060::/32
2a07:f9c0::/29
2a12:1680::/29
2a12:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
5c:fd:8a:54:3c:a4:12:e1:14:47:3a:7a:a8:b1:ce:89:76:50:
2e:72:08:57:c4:93:3a:2f:68:07:b3:3c:f0:09:1a:c9:2d:f0:
f6:67:52:8b:88:fe:84:d1:ba:d2:15:4c:fb:c5:72:c0:a8:2d:
20:db:19:4e:27:4f:bc:6d:36:31:47:9c:c4:e8:95:7e:37:b4:
5e:26:ae:82:a0:b5:15:9d:c5:87:b4:58:0f:3e:2b:a6:f4:34:
8c:8e:ce:cf:af:20:65:2a:ed:c4:0a:36:6e:21:5c:15:c1:2d:
a5:35:60:e7:13:ea:66:3a:47:4c:2b:ef:87:2f:89:66:46:b4:
04:79:3b:ac:a2:31:64:1b:2c:88:e7:e4:20:fc:6a:de:48:7b:
5c:7c:cd:0b:e8:3a:13:17:45:91:c1:bc:a5:dd:c3:35:ec:1f:
37:36:aa:19:ea:ab:1f:52:53:0a:d6:e6:9c:cc:9f:e4:eb:b5:
1e:ee:ac:58:25:a3:af:03:4b:a8:9d:a5:72:b6:a5:23:33:4c:
06:c5:68:40:49:20:27:47:04:cc:de:cd:82:16:1f:3d:a9:2a:
de:b1:d6:31:60:d2:8f:f3:14:51:2d:6c:14:94:96:af:a6:64:
ec:6b:b5:15:5a:f3:54:84:c5:a1:3a:3e:44:9d:6a:d4:35:b1:
db:80:fe:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:37 2024 by rpki-client on console-ams.rpki-client.org