Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/0R4K3yYm0MnkzID3t51rFRvO2ec.roa
File: 0R4K3yYm0MnkzID3t51rFRvO2ec.roa (raw, json)
Hash identifier: 03tx/fKjEoAnWjYlPCsT4GbUIKQt+BU97/T1bFDw8UU=
Subject key identifier: D1:1E:0A:DF:26:26:D0:C9:E4:CC:80:F7:B7:9D:6B:15:1B:CE:D9:E7
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018FBF629F74A0A62274CD49DE5317D77106
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/0R4K3yYm0MnkzID3t51rFRvO2ec.roa
Signing time: Tue 28 May 2024 13:27:42 +0000
ROA not before: Tue 28 May 2024 13:27:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 46.173.240.0/21 maxlen: 21
64.43.104.0/22 maxlen: 22
64.43.112.0/22 maxlen: 22
64.43.124.0/22 maxlen: 22
77.36.120.0/22 maxlen: 22
91.233.0.0/23 maxlen: 23
91.245.184.0/22 maxlen: 22
176.96.88.0/22 maxlen: 22
176.102.120.0/21 maxlen: 21
176.102.120.0/22 maxlen: 22
176.102.124.0/22 maxlen: 22
176.103.240.0/21 maxlen: 21
176.103.240.0/22 maxlen: 22
176.103.244.0/22 maxlen: 22
176.116.232.0/22 maxlen: 22
178.212.184.0/21 maxlen: 21
178.212.184.0/22 maxlen: 22
178.212.188.0/22 maxlen: 22
185.55.4.0/22 maxlen: 22
185.55.4.0/23 maxlen: 23
185.55.6.0/23 maxlen: 23
185.55.140.0/22 maxlen: 22
185.55.140.0/23 maxlen: 23
185.55.142.0/23 maxlen: 23
193.36.204.0/22 maxlen: 22
193.36.208.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jul 2024 13:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bf:62:9f:74:a0:a6:22:74:cd:49:de:53:17:d7:71:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: May 28 13:27:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d11e0adf2626d0c9e4cc80f7b79d6b151bced9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3f:a7:bb:4a:e1:77:d7:0c:4f:8a:a7:0d:1a:
cd:0a:80:06:f9:c5:5f:d2:d6:80:3c:12:2a:ba:8c:
97:c6:7a:79:07:f2:ea:59:c1:7d:1d:d2:08:ae:42:
f5:9b:7c:9e:32:73:de:00:e5:78:09:28:7b:80:33:
6e:58:a8:ca:c1:d8:6f:88:be:df:80:da:d1:27:bb:
e0:5d:50:f8:9b:48:d7:d1:c1:d3:0c:ff:ef:f5:09:
46:fb:db:25:e3:8d:4a:51:ae:4d:d9:a6:4f:5d:e5:
af:9c:e2:4d:bd:93:f3:84:59:4e:b7:b2:38:00:cd:
b8:0d:1d:c6:6c:a7:db:c2:f3:cb:87:c3:b4:34:c9:
20:3f:0f:71:a4:2a:6f:7e:82:10:47:00:eb:bf:fe:
fc:38:16:54:08:5d:46:e0:93:ef:a3:59:3a:c2:de:
52:72:1e:c0:2e:c7:38:18:52:8f:19:d1:fc:1c:bd:
8e:bc:e0:75:c8:d1:80:c7:2d:54:91:ba:d3:9f:cf:
83:04:51:33:d2:79:c8:7d:89:1f:3b:8e:6f:54:8a:
1d:9e:6c:d9:f8:00:f3:b1:76:cc:fa:68:f4:47:e4:
65:4d:0c:04:08:ee:58:61:04:44:b0:5f:0e:02:e8:
28:f4:53:87:7e:97:39:3e:95:b3:9a:2b:a7:e5:87:
d6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1E:0A:DF:26:26:D0:C9:E4:CC:80:F7:B7:9D:6B:15:1B:CE:D9:E7
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/0R4K3yYm0MnkzID3t51rFRvO2ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.240.0/21
64.43.104.0/22
64.43.112.0/22
64.43.124.0/22
77.36.120.0/22
91.233.0.0/23
91.245.184.0/22
176.96.88.0/22
176.102.120.0/21
176.103.240.0/21
176.116.232.0/22
178.212.184.0/21
185.55.4.0/22
185.55.140.0/22
193.36.204.0-193.36.215.255
Signature Algorithm: sha256WithRSAEncryption
0a:e9:b7:87:52:8e:f8:a8:69:7e:ef:40:f7:4b:cb:43:4f:9d:
c1:0a:fa:68:11:43:23:8b:61:ad:ea:5c:4d:1c:a0:eb:27:76:
34:68:be:83:61:4e:b8:08:c7:5f:0e:be:e2:f5:31:ca:aa:f9:
17:94:fa:f2:1c:95:26:4b:71:06:3f:99:cd:05:5c:c0:cb:4f:
3d:ab:e3:12:b6:9a:d9:7b:5a:24:75:17:db:dd:20:da:76:b0:
20:89:54:b6:c9:7e:69:50:4a:ec:ee:b8:b0:9d:18:a2:da:50:
d9:ed:3b:5a:15:eb:0f:cc:9f:12:c1:3e:bd:d4:78:70:f6:9f:
c9:47:0c:f3:be:9d:8c:ce:da:76:0b:c7:1d:8c:b5:05:4a:d8:
5e:6e:4d:2e:af:cb:0d:53:2b:10:5b:58:8a:7a:17:ee:7d:a8:
21:22:e3:ab:96:ea:e2:02:e5:87:49:04:63:a0:1f:72:33:0f:
79:95:6f:a2:4c:9e:06:b7:52:6e:5a:d4:e1:a4:12:a8:7e:19:
d8:13:a4:7f:8e:6b:86:33:98:5d:8e:67:77:74:04:0c:43:70:
f6:f9:21:11:96:cf:91:e3:0d:87:89:14:4c:8f:44:08:f4:e7:
1c:85:fa:2f:6c:af:0e:cb:3f:d2:d7:2a:a1:4e:bc:78:f2:a4:
64:2c:97:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 14:45:33 2024 by rpki-client on console-ams.rpki-client.org