Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/CAbl5nS0sY_Xpexf9lEkaN-bqpw.roa
File: CAbl5nS0sY_Xpexf9lEkaN-bqpw.roa (raw, json)
Hash identifier: 8Ou7TPFQjv2uG9i2sBYIxTDMoUH+aqG7vsJwxPhwpBg=
Subject key identifier: 08:06:E5:E6:74:B4:B1:8F:D7:A5:EC:5F:F6:51:24:68:DF:9B:AA:9C
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 018F2E3825FD0CE3BB353AA442F8CC9D0C5A
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/CAbl5nS0sY_Xpexf9lEkaN-bqpw.roa
Signing time: Tue 30 Apr 2024 08:56:22 +0000
ROA not before: Tue 30 Apr 2024 08:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39521
IP address blocks: 45.10.16.0/23 maxlen: 23
45.10.18.0/24 maxlen: 24
45.88.5.0/24 maxlen: 24
45.88.6.0/24 maxlen: 24
45.88.7.0/24 maxlen: 24
45.95.40.0/22 maxlen: 22
45.130.100.0/22 maxlen: 22
83.229.34.0/24 maxlen: 24
95.178.107.0/24 maxlen: 24
185.144.56.0/22 maxlen: 24
188.191.48.0/22 maxlen: 22
217.194.153.0/24 maxlen: 24
2a05:e4c0::/29 maxlen: 32
Validation: Failed, certificate revoked on Fri 31 May 2024 20:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2e:38:25:fd:0c:e3:bb:35:3a:a4:42:f8:cc:9d:0c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Apr 30 08:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0806e5e674b4b18fd7a5ec5ff6512468df9baa9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:e2:75:f7:17:cc:c7:b4:76:2f:5b:6c:c1:
05:a3:08:8b:1d:7c:d4:ad:44:fb:17:4c:74:92:a8:
b9:2c:0c:4a:5a:b9:61:9e:ba:09:e4:f5:37:77:c9:
63:ac:64:1d:e0:95:bb:dd:70:14:4f:8d:ba:e0:6d:
23:a7:f6:e8:98:07:a9:cd:f3:3c:33:38:3f:70:c9:
d9:14:5a:d0:03:8b:2d:74:4e:22:9f:b9:67:4d:b4:
98:87:bd:4e:e3:90:b1:07:92:51:ac:7d:04:93:dc:
71:30:25:8c:5b:2d:3e:fd:0f:2b:d4:02:4b:83:04:
50:90:ca:0b:d7:d5:21:4f:1f:cb:b2:08:87:07:72:
b2:30:46:23:1a:4c:64:13:77:d8:0b:ac:4a:27:30:
a5:ba:da:90:09:11:ed:10:2f:69:2e:c0:b7:2e:fd:
2b:b7:3d:1b:c5:07:26:1d:6e:44:37:ee:7a:64:de:
e2:20:8e:01:64:75:90:ce:50:74:26:9f:ce:c6:6e:
fa:0f:ea:c8:70:a8:b1:cb:5d:c8:5f:1c:bd:8a:4e:
3e:fa:cd:4d:22:15:7c:20:4b:b5:80:0d:0f:92:6f:
e3:d9:bc:47:d7:69:75:c7:4b:45:b7:4b:e0:a6:db:
9d:82:27:7b:a9:f9:da:aa:2d:5b:67:b9:fb:9f:20:
d6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:06:E5:E6:74:B4:B1:8F:D7:A5:EC:5F:F6:51:24:68:DF:9B:AA:9C
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/CAbl5nS0sY_Xpexf9lEkaN-bqpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.16.0-45.10.18.255
45.88.5.0-45.88.7.255
45.95.40.0/22
45.130.100.0/22
83.229.34.0/24
95.178.107.0/24
185.144.56.0/22
188.191.48.0/22
217.194.153.0/24
IPv6:
2a05:e4c0::/29
Signature Algorithm: sha256WithRSAEncryption
31:06:7f:1b:2e:b4:95:a3:83:9d:c4:01:00:d9:c5:2d:88:a2:
25:42:87:b0:51:e9:c7:03:3f:82:93:b0:06:a8:cd:66:1d:e1:
2e:37:40:ec:5c:f2:2f:db:43:86:d3:02:a5:d4:e0:55:3f:6a:
b7:37:75:9c:6a:d6:3c:30:bf:ee:26:cc:e2:95:d0:61:f2:db:
a7:0f:a9:cc:84:98:62:45:26:ae:9d:89:1a:9a:9c:f7:f1:14:
23:cb:5b:4a:ab:b4:4c:bc:94:b9:6a:ac:94:46:3c:59:fe:24:
f2:8e:c1:69:11:c9:51:70:47:3f:2a:02:89:6c:56:ed:7d:10:
8b:c4:f6:c7:a0:35:85:c3:ab:45:a1:0e:67:ec:82:1c:a1:c9:
88:7a:92:e9:d0:92:3d:1d:49:a7:cf:10:6e:de:ab:28:b6:52:
53:60:44:01:56:f1:bc:d0:e3:03:7c:6c:08:b1:62:65:0e:aa:
9f:17:e6:eb:9f:73:f6:f4:9b:02:06:0d:8c:3d:83:ed:57:f0:
a9:00:82:de:df:a9:08:70:01:ad:9c:b5:e7:c8:28:5a:11:71:
17:f5:a4:79:63:26:16:a7:2b:20:7e:9a:b2:c3:91:43:e0:33:
c7:18:76:e2:0c:42:96:6c:2a:31:ca:c2:7d:70:ca:15:ed:6b:
4d:d4:cf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:50:00 2024 by rpki-client on console-ams.rpki-client.org