Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Rgs6KR4KYD8a3BdEDr8Tcholmy4.roa
File: Rgs6KR4KYD8a3BdEDr8Tcholmy4.roa (raw, json)
Hash identifier: 7KN9aD5Q8lQBvnDt6p4nWF8rhUUuZx0/XK9cJNyJPpQ=
Subject key identifier: 46:0B:3A:29:1E:0A:60:3F:1A:DC:17:44:0E:BF:13:72:1A:25:9B:2E
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DD1E8C1550CF3391A7537ECDB92C17892
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Rgs6KR4KYD8a3BdEDr8Tcholmy4.roa
Signing time: Thu 22 Feb 2024 17:41:48 +0000
ROA not before: Thu 22 Feb 2024 17:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12722
IP address blocks: 2.59.48.0/24 maxlen: 24
37.221.80.0/24 maxlen: 24
45.11.22.0/24 maxlen: 24
45.14.220.0/24 maxlen: 24
45.14.221.0/24 maxlen: 24
45.80.120.0/22 maxlen: 22
45.89.68.0/24 maxlen: 24
45.89.71.0/24 maxlen: 24
91.188.220.0/24 maxlen: 24
94.158.188.0/24 maxlen: 24
176.124.34.0/24 maxlen: 24
185.212.112.0/24 maxlen: 24
193.3.18.0/24 maxlen: 24
193.201.114.0/24 maxlen: 24
194.32.240.0/24 maxlen: 24
195.18.26.0/24 maxlen: 24
195.69.148.0/24 maxlen: 24
195.69.150.0/24 maxlen: 24
195.225.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 18:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d1:e8:c1:55:0c:f3:39:1a:75:37:ec:db:92:c1:78:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 22 17:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=460b3a291e0a603f1adc17440ebf13721a259b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a3:ab:52:0b:0d:a6:dd:c9:e8:d2:97:16:da:
e3:46:71:8c:30:23:d6:73:b3:47:2c:5a:f0:6d:07:
6b:03:d6:8a:3d:e0:64:5f:97:59:1d:aa:5c:82:d6:
d9:a8:ef:e7:36:36:f8:77:39:e8:58:aa:cb:70:93:
79:51:88:4d:35:c9:c4:29:94:9d:7d:5d:69:70:b3:
cb:f6:c4:09:88:bb:84:98:e1:8f:90:4c:f1:bf:8a:
2a:71:9f:2e:cd:a3:d4:07:28:a3:82:43:00:fc:f2:
32:56:90:fe:1c:83:ac:0e:14:35:64:d6:00:4a:88:
bf:50:9b:0a:67:fe:d3:df:a8:b7:13:21:51:b1:e4:
68:e0:2c:e1:66:9b:8c:d6:b8:19:30:bf:2d:20:bf:
f1:0a:3c:0e:aa:38:2b:1f:87:6a:38:fa:5d:7f:72:
b5:08:8b:ef:2b:55:dd:05:eb:40:9d:84:57:7b:ad:
cc:5f:99:67:67:66:9e:bc:20:20:ee:07:43:65:20:
56:ea:6c:07:6c:fd:03:c0:53:57:39:6d:0a:e5:89:
7c:f9:f6:89:f4:f2:68:23:1e:96:fc:aa:75:4b:3e:
3c:e5:d5:f7:7b:56:d7:2e:af:49:2d:14:c0:b0:44:
bd:88:7a:7e:22:b8:e0:e7:06:12:a0:9b:03:f1:be:
18:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0B:3A:29:1E:0A:60:3F:1A:DC:17:44:0E:BF:13:72:1A:25:9B:2E
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Rgs6KR4KYD8a3BdEDr8Tcholmy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.48.0/24
37.221.80.0/24
45.11.22.0/24
45.14.220.0/23
45.80.120.0/22
45.89.68.0/24
45.89.71.0/24
91.188.220.0/24
94.158.188.0/24
176.124.34.0/24
185.212.112.0/24
193.3.18.0/24
193.201.114.0/24
194.32.240.0/24
195.18.26.0/24
195.69.148.0/24
195.69.150.0/24
195.225.96.0/24
Signature Algorithm: sha256WithRSAEncryption
22:27:0d:60:a7:e8:c0:d8:d4:9b:b3:a4:1a:82:02:3f:0d:94:
93:d7:bc:cd:0f:35:2e:e2:34:00:55:0b:fb:f3:d5:6b:f3:78:
b3:3f:f1:41:13:b7:1f:4d:7a:49:71:82:c3:25:ca:89:e6:aa:
61:ab:df:64:4f:fd:25:be:6f:b8:c3:c6:35:02:59:77:cf:35:
20:4a:dc:c0:77:49:89:3e:55:68:8b:5f:ad:1d:b7:fb:1e:30:
bc:4a:6d:0f:50:07:2d:33:11:91:7b:5b:41:cf:32:49:da:a4:
61:5e:80:68:4f:89:65:07:35:f1:b5:39:88:ed:aa:f6:ce:e5:
57:55:38:69:cb:69:1e:44:79:58:cf:16:c4:63:52:27:1b:13:
d8:f0:40:e4:c8:83:26:11:0d:d8:6c:c8:e1:32:75:95:4e:66:
fa:5b:3f:ba:cf:80:f8:94:cf:4a:08:da:2c:78:ea:95:8d:55:
90:b5:d4:6c:50:fe:27:fc:28:5e:9b:9d:c5:29:31:85:b6:82:
41:cb:d4:3f:bb:5e:b3:90:c8:4a:e2:6d:cd:40:c2:03:50:3d:
c6:84:e5:fc:4c:d5:a9:f5:4d:37:0e:9f:fc:4f:c0:18:f9:6e:
4c:c6:86:a0:49:35:10:78:d1:5f:cb:e1:c7:2e:5e:78:fc:d4:
5c:9e:1b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 22:58:30 2024 by rpki-client on console-ams.rpki-client.org