Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/P-x3rxa5Tc7uTfCBgBUUUTMB1dA.roa
File: P-x3rxa5Tc7uTfCBgBUUUTMB1dA.roa (raw, json)
Hash identifier: vRdxI9B7a5mM/Ht8n/2a0J47UcAiZxtO9BwE+8MGbkk=
Subject key identifier: 3F:EC:77:AF:16:B9:4D:CE:EE:4D:F0:81:80:15:14:51:33:01:D5:D0
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DC28044FAFC2BF6F9D98BEE2DF4525D92
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/P-x3rxa5Tc7uTfCBgBUUUTMB1dA.roa
Signing time: Mon 19 Feb 2024 17:53:22 +0000
ROA not before: Mon 19 Feb 2024 17:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 45.15.239.0/24 maxlen: 24
45.129.1.0/24 maxlen: 24
45.138.7.0/24 maxlen: 24
45.138.212.0/24 maxlen: 24
45.138.215.0/24 maxlen: 24
45.149.130.0/24 maxlen: 24
45.149.131.0/24 maxlen: 24
45.152.118.0/24 maxlen: 24
45.152.119.0/24 maxlen: 24
83.138.52.0/24 maxlen: 24
84.246.82.0/24 maxlen: 24
91.206.69.0/24 maxlen: 24
91.237.104.0/24 maxlen: 24
91.237.105.0/24 maxlen: 24
176.116.5.0/24 maxlen: 24
176.116.20.0/24 maxlen: 24
193.58.178.0/24 maxlen: 24
194.107.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 15:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c2:80:44:fa:fc:2b:f6:f9:d9:8b:ee:2d:f4:52:5d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 19 17:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fec77af16b94dceee4df081801514513301d5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fe:5b:5c:d5:13:ae:c7:da:22:5d:72:51:69:
77:8a:f7:6a:ca:fb:71:8a:9a:8d:eb:59:cc:e9:3f:
3f:4d:12:c0:92:84:00:52:bb:b0:65:d8:04:fd:1e:
02:17:ec:08:73:43:7c:cf:52:9a:b5:9b:10:40:17:
7b:8a:23:0e:6e:1d:ca:cf:77:13:90:a8:39:96:4c:
61:96:d8:15:22:f5:64:b7:26:32:b1:23:08:4b:c8:
2c:97:f4:06:08:3f:49:c7:9c:97:1c:fa:e5:23:de:
82:0f:36:9b:04:be:d7:45:e9:9c:ba:fc:a8:d6:3a:
cd:7e:69:81:ba:70:36:45:01:b5:bb:61:be:38:c0:
c1:c3:d7:1b:5f:72:38:1d:6d:ff:90:fa:a7:8d:d3:
f3:cd:eb:15:e5:e0:38:60:3e:f3:8e:f8:4b:ac:5f:
98:bf:f2:80:9f:b4:1e:a0:07:4e:c9:da:00:27:2b:
9c:e1:ca:99:19:1b:a0:3c:55:2e:f2:4e:6a:e7:59:
91:7b:90:cf:b6:ff:c2:80:f3:14:92:01:04:64:6c:
1c:e9:7f:1f:74:f5:65:c1:fd:fa:63:8d:3a:83:1f:
98:20:ce:7e:71:65:94:6b:10:47:bf:71:f6:bf:85:
8e:e4:07:ed:d7:ac:8e:16:ce:a6:33:d7:d4:c6:ee:
ab:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EC:77:AF:16:B9:4D:CE:EE:4D:F0:81:80:15:14:51:33:01:D5:D0
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/P-x3rxa5Tc7uTfCBgBUUUTMB1dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.239.0/24
45.129.1.0/24
45.138.7.0/24
45.138.212.0/24
45.138.215.0/24
45.149.130.0/23
45.152.118.0/23
83.138.52.0/24
84.246.82.0/24
91.206.69.0/24
91.237.104.0/23
176.116.5.0/24
176.116.20.0/24
193.58.178.0/24
194.107.200.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:cc:8e:2e:bc:96:44:71:ec:bc:cd:62:b2:f1:36:44:0d:7c:
ca:30:d4:3a:3b:b6:ab:36:44:db:0e:09:85:d3:16:d5:24:37:
00:cb:2a:96:2d:fe:30:46:70:aa:d3:f4:72:65:46:7b:da:88:
f0:24:49:94:b8:6f:ed:78:b3:93:aa:9f:8e:f5:62:89:98:f5:
a2:40:6a:7c:3b:6a:f4:2b:c2:ec:c1:f8:d4:c4:fd:08:a9:f6:
cc:7c:f4:9e:00:67:ca:55:8e:d6:17:2f:80:5e:ac:c3:35:6c:
9c:ab:66:79:11:1e:95:00:73:a2:7e:d6:63:29:74:7d:13:89:
90:82:6d:ca:9c:67:e2:d7:4f:a7:4c:bb:94:83:e0:53:eb:75:
f0:3d:3e:07:1d:e3:c8:fa:f9:5a:ff:f9:b2:17:5e:90:d2:3c:
48:a9:56:14:65:5d:a7:5c:be:f3:9b:88:db:3b:fb:2b:cc:4f:
35:1f:a8:47:e3:f9:0e:11:02:dc:4c:31:88:1b:82:d3:cc:6e:
48:f4:19:27:a3:fb:4a:7b:14:81:58:b0:4b:4d:e4:65:3a:2b:
25:a7:09:e7:38:85:45:20:70:11:65:ef:95:bf:4c:16:b6:6e:
40:3b:02:99:ef:9d:46:c9:52:47:62:d6:89:df:76:d0:08:39:
98:4d:08:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:22 2024 by rpki-client on console-fra.rpki-client.org