Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/c_xexVYF2G4XETWRQ5FHyUpfc88.roa
File: c_xexVYF2G4XETWRQ5FHyUpfc88.roa (raw, json)
Hash identifier: 64hXyObq9/mYy44SshA4ijKl11m03360TJDCXX7XHnk=
Subject key identifier: 73:FC:5E:C5:56:05:D8:6E:17:11:35:91:43:91:47:C9:4A:5F:73:CF
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018D84C45C73D0D7AD48964F38F34648B468
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/c_xexVYF2G4XETWRQ5FHyUpfc88.roa
Signing time: Wed 07 Feb 2024 18:11:17 +0000
ROA not before: Wed 07 Feb 2024 18:11:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 45.15.239.0/24 maxlen: 24
45.129.1.0/24 maxlen: 24
45.138.7.0/24 maxlen: 24
45.138.212.0/24 maxlen: 24
45.138.215.0/24 maxlen: 24
45.149.130.0/24 maxlen: 24
45.149.131.0/24 maxlen: 24
45.152.118.0/24 maxlen: 24
45.152.119.0/24 maxlen: 24
84.246.82.0/24 maxlen: 24
91.206.69.0/24 maxlen: 24
91.237.104.0/24 maxlen: 24
91.237.105.0/24 maxlen: 24
176.116.20.0/24 maxlen: 24
194.107.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 17:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:c4:5c:73:d0:d7:ad:48:96:4f:38:f3:46:48:b4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 7 18:11:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73fc5ec55605d86e17113591439147c94a5f73cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:51:58:7a:af:12:ad:55:97:16:b2:62:6b:
4d:94:61:8a:50:5c:52:49:2c:cb:8c:b1:8b:e5:c2:
81:ba:7a:25:57:3b:cf:de:82:0d:60:6a:5d:3b:c0:
d5:b7:c7:6c:5e:fb:97:27:fd:13:3b:e2:ae:47:50:
6e:65:0b:49:62:04:d3:f7:25:4f:39:42:30:47:1c:
ef:e2:7c:09:0e:85:2c:6b:ee:1e:ba:70:60:bf:ef:
f6:e0:bd:bd:8a:e0:b7:9b:a0:c6:a0:ad:45:00:d3:
d4:d6:c9:c9:d6:1c:de:20:74:46:30:9e:f8:d7:ae:
b8:d2:7b:d8:ec:46:3a:d1:6a:31:c9:dd:8d:df:19:
93:4c:84:57:b1:f0:63:f3:a9:33:4f:18:80:8d:9a:
6e:ef:45:2f:08:48:85:f2:ad:93:1d:60:65:b7:10:
e0:86:4c:0d:93:ba:69:52:47:24:fc:ce:90:6d:74:
f4:f2:27:d0:fc:30:74:a8:f7:65:3d:aa:ff:c0:48:
0e:e7:eb:06:d5:bc:ac:47:7e:0f:d9:b5:18:ed:9b:
75:7c:f2:84:7d:f8:4d:67:9a:1b:5e:83:4f:2c:9c:
80:e8:df:01:f8:bb:f9:33:48:e8:d6:fb:f1:ef:5a:
a0:49:ab:99:46:e0:f1:c4:42:ce:d9:2e:91:ff:fa:
0c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FC:5E:C5:56:05:D8:6E:17:11:35:91:43:91:47:C9:4A:5F:73:CF
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/c_xexVYF2G4XETWRQ5FHyUpfc88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.239.0/24
45.129.1.0/24
45.138.7.0/24
45.138.212.0/24
45.138.215.0/24
45.149.130.0/23
45.152.118.0/23
84.246.82.0/24
91.206.69.0/24
91.237.104.0/23
176.116.20.0/24
194.107.200.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:d4:31:9b:ac:a0:c3:39:36:a5:8e:87:7c:b9:62:27:50:ea:
ad:11:df:6b:f0:da:38:32:9a:a9:5a:04:e6:48:ce:fd:eb:eb:
a7:0a:53:f6:f6:ec:0e:24:fa:a9:2a:23:03:b7:8b:54:44:11:
d0:cc:43:40:d9:3c:e5:be:bf:af:0a:60:21:45:a7:1c:1c:4e:
76:61:c9:04:bd:5e:50:26:c9:2a:58:d9:e7:33:49:d6:70:c0:
22:7d:c9:0e:17:4b:19:60:8c:b6:ad:b0:bd:79:e7:d9:3a:42:
59:3c:39:cd:68:0a:8c:78:60:30:ca:98:0c:4d:29:83:95:6a:
1f:d3:eb:f9:ac:8f:83:a2:74:ee:5e:e5:95:2b:ba:6d:1e:29:
7d:4c:12:a6:9a:62:23:c5:5c:97:da:16:61:60:d3:84:69:77:
30:16:39:c4:3f:25:2a:31:8b:46:3d:6b:19:7c:e5:84:82:b9:
a8:be:9d:5c:45:7c:16:8a:85:12:91:64:de:ef:0b:8d:ef:80:
1f:3c:ab:ab:cd:14:bb:8b:d1:44:71:68:8b:89:93:47:c8:76:
cd:3d:ce:52:78:b2:23:79:e6:b8:d8:e6:8a:61:2a:b0:c7:c0:
73:2b:b0:e0:8e:a9:7b:4c:58:aa:e0:42:48:c3:d8:bf:bb:c1:
cc:4a:15:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:48 2024 by rpki-client on console-ams.rpki-client.org