Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-A5P_s4LuKjkXpA6jZqdI6Z0n1s.roa
File: 1-A5P_s4LuKjkXpA6jZqdI6Z0n1s.roa (raw, json)
Hash identifier: PNRPMSIUpp6GPhrTYreveKoxSnIrjP16/haDVMXMoLA=
Subject key identifier: F8:0E:4F:FE:CE:0B:B8:A8:E4:5E:90:3A:8D:9A:9D:23:A6:74:9F:5B
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DC28044C816D3255F590E95301E172269
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-A5P_s4LuKjkXpA6jZqdI6Z0n1s.roa
Signing time: Mon 19 Feb 2024 17:53:22 +0000
ROA not before: Mon 19 Feb 2024 17:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 45.84.178.0/24 maxlen: 24
45.129.1.0/24 maxlen: 24
45.129.129.0/24 maxlen: 24
45.129.130.0/24 maxlen: 24
45.129.131.0/24 maxlen: 24
45.132.51.0/24 maxlen: 24
45.138.4.0/24 maxlen: 24
45.138.5.0/24 maxlen: 24
45.138.6.0/24 maxlen: 24
45.142.37.0/24 maxlen: 24
45.146.26.0/24 maxlen: 24
45.159.85.0/24 maxlen: 24
62.3.23.0/24 maxlen: 24
80.68.148.0/24 maxlen: 24
80.68.150.0/24 maxlen: 24
91.247.78.0/24 maxlen: 24
92.119.192.0/24 maxlen: 24
93.93.206.0/24 maxlen: 24
94.103.179.0/24 maxlen: 24
146.19.76.0/24 maxlen: 24
176.222.58.0/24 maxlen: 24
185.81.71.0/24 maxlen: 24
185.207.213.0/24 maxlen: 24
185.222.41.0/24 maxlen: 24
193.32.164.0/24 maxlen: 24
193.32.165.0/24 maxlen: 24
193.32.166.0/24 maxlen: 24
193.32.167.0/24 maxlen: 24
193.36.231.0/24 maxlen: 24
193.53.169.0/24 maxlen: 24
193.58.176.0/24 maxlen: 24
193.58.177.0/24 maxlen: 24
193.163.16.0/24 maxlen: 24
195.225.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 16:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c2:80:44:c8:16:d3:25:5f:59:0e:95:30:1e:17:22:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 19 17:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f80e4ffece0bb8a8e45e903a8d9a9d23a6749f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:49:14:1f:15:5d:48:49:19:b5:77:da:b7:98:
66:04:42:78:a3:db:0c:9b:7e:9c:5d:e4:87:6a:cb:
18:28:d3:82:32:2b:b5:5b:e8:54:e3:48:7a:68:44:
9f:c3:fe:6e:e3:93:a2:79:8d:b7:47:60:ab:e6:2c:
ef:9d:cf:0c:c9:9d:13:cd:56:5e:88:85:24:ec:59:
39:28:e7:52:a4:cc:88:c9:70:85:9d:c9:29:b3:cb:
50:d6:d3:07:74:94:8c:8a:fd:f0:a8:7d:6b:b3:83:
b1:3c:d9:84:bf:ac:10:3b:1f:14:e9:21:81:17:2b:
e9:c5:c0:e7:07:f6:2e:9a:2b:d3:b3:b8:c7:42:af:
77:8b:94:dc:b5:74:2a:96:b7:ae:fa:75:79:fb:ef:
2a:a7:c5:82:61:17:33:bf:a5:32:53:78:23:d1:bc:
94:d7:ee:9e:bf:13:90:18:73:3c:10:fc:68:3b:c8:
02:53:64:c8:70:9a:be:1f:88:fe:17:85:35:92:3c:
4b:df:18:6a:50:64:e9:95:93:61:99:c2:0b:13:b5:
53:94:e3:2d:e8:d8:ec:dd:21:d4:26:9a:fa:b6:b7:
6d:38:fd:ca:d3:ff:ce:69:e5:9d:7c:a8:0d:2d:6d:
6e:81:98:e0:92:c5:83:c9:09:40:b0:4e:40:07:4d:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0E:4F:FE:CE:0B:B8:A8:E4:5E:90:3A:8D:9A:9D:23:A6:74:9F:5B
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-A5P_s4LuKjkXpA6jZqdI6Z0n1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.178.0/24
45.129.1.0/24
45.129.129.0-45.129.131.255
45.132.51.0/24
45.138.4.0-45.138.6.255
45.142.37.0/24
45.146.26.0/24
45.159.85.0/24
62.3.23.0/24
80.68.148.0/24
80.68.150.0/24
91.247.78.0/24
92.119.192.0/24
93.93.206.0/24
94.103.179.0/24
146.19.76.0/24
176.222.58.0/24
185.81.71.0/24
185.207.213.0/24
185.222.41.0/24
193.32.164.0/22
193.36.231.0/24
193.53.169.0/24
193.58.176.0/23
193.163.16.0/24
195.225.99.0/24
Signature Algorithm: sha256WithRSAEncryption
07:96:50:25:3b:19:b7:3e:45:f2:a2:ef:a6:c3:6a:45:59:bb:
7e:42:38:71:d6:f4:a8:4e:5a:61:e5:f9:9a:d7:7b:6b:a3:66:
be:90:88:cd:91:ef:8c:c4:e4:c5:03:95:ce:69:a3:cb:b4:7f:
69:80:0e:b8:01:e4:8b:65:dd:c5:26:d7:16:f0:33:fe:31:4b:
fd:ac:aa:1a:8f:7f:78:0c:20:0e:b4:6a:ce:11:e7:b9:09:04:
9d:3f:de:a3:b8:7b:f8:b3:ad:c0:a7:5b:6c:a5:6b:a6:fa:dc:
0e:26:7b:5b:4e:8c:a0:1a:57:b7:ea:7a:d9:70:78:d7:51:8b:
e2:84:16:c7:b3:ee:9c:b6:a5:01:f5:d0:fb:b9:43:d0:de:7e:
38:44:f7:d1:9c:85:d8:90:28:d6:24:9b:14:4c:4c:40:88:0b:
03:60:a7:4d:89:d9:97:e1:9a:e5:d3:fc:b7:7c:fe:0f:69:b3:
ef:1e:84:a8:37:ef:bc:38:e2:3f:54:8d:1c:58:e2:ef:44:f9:
d0:04:b9:9d:fb:01:af:c7:f3:43:24:a9:5d:a2:20:ce:21:ab:
bf:e5:55:a2:bf:f9:b4:34:7a:c5:23:5e:f9:0a:e5:9b:57:de:
42:4a:03:21:1d:89:f7:aa:d6:da:46:a3:4c:f8:4d:49:c5:b2:
28:ce:4e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 20:34:54 2024 by rpki-client on console-fra.rpki-client.org