Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/8KP4GGaXm9EYfrXhr8Ri-Ga7c50.roa
File: 8KP4GGaXm9EYfrXhr8Ri-Ga7c50.roa (raw, json)
Hash identifier: TRacf07UxgEd6TcsCpJTKAIUBbhL2MrztsbYq09Y0GY=
Subject key identifier: F0:A3:F8:18:66:97:9B:D1:18:7E:B5:E1:AF:C4:62:F8:66:BB:73:9D
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01885CC3549E413151521380650186C2B353
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/8KP4GGaXm9EYfrXhr8Ri-Ga7c50.roa
Signing time: Sat 27 May 2023 10:31:24 +0000
ROA not before: Sat 27 May 2023 10:31:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398464
IP address blocks: 193.142.36.0/22 maxlen: 24
212.87.218.0/24 maxlen: 24
212.87.216.0/24 maxlen: 24
212.87.219.0/24 maxlen: 24
194.180.232.0/23 maxlen: 24
91.132.124.0/24 maxlen: 24
194.180.236.0/23 maxlen: 24
45.133.112.0/22 maxlen: 24
45.136.24.0/22 maxlen: 24
45.147.8.0/22 maxlen: 24
93.177.94.0/23 maxlen: 24
45.147.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5c:c3:54:9e:41:31:51:52:13:80:65:01:86:c2:b3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: May 27 10:31:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0a3f81866979bd1187eb5e1afc462f866bb739d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:7d:35:d0:19:c6:a7:68:d4:2d:83:fa:18:
f3:d6:2f:76:fa:f9:f7:87:89:c3:f2:9a:57:37:ca:
8b:c1:49:a4:60:82:12:fc:8d:a2:bc:17:6c:1d:a2:
d9:a6:01:90:ae:e9:81:2c:4e:97:57:3a:18:c3:f5:
5f:18:6a:c4:cb:f2:11:df:27:75:20:01:80:5a:9b:
d6:f6:45:ed:a7:7e:0a:b2:58:75:56:54:03:78:b9:
8e:33:c9:2e:e2:db:ff:5c:45:0b:63:e9:63:33:b3:
b1:c1:d8:67:d0:b4:cc:6d:d6:c7:fb:a8:d1:75:5d:
01:04:23:ac:fc:52:b1:8c:11:07:8d:8b:95:b2:de:
1a:86:9b:17:b2:9b:7a:b4:2b:43:0d:6a:fc:0f:7c:
29:ba:f7:dd:1d:af:ec:4b:41:ba:1b:ea:8e:9d:bf:
7b:46:99:00:f0:45:a9:b1:00:f0:ec:80:22:af:d9:
d2:7d:3d:d2:77:18:8c:f4:62:98:cc:58:bb:90:dc:
d4:ac:88:d0:b6:c2:e0:ba:81:c4:3a:57:6c:01:06:
86:c0:e1:0f:35:42:05:4e:46:53:ce:e7:70:fe:81:
68:3f:de:d7:0d:f1:17:f7:bb:f5:49:f1:b8:71:5d:
2e:c1:93:bc:25:d9:c5:b3:b1:77:a4:b6:4b:94:f1:
48:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A3:F8:18:66:97:9B:D1:18:7E:B5:E1:AF:C4:62:F8:66:BB:73:9D
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/8KP4GGaXm9EYfrXhr8Ri-Ga7c50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.112.0/22
45.136.24.0/22
45.147.8.0/22
45.147.232.0/22
91.132.124.0/24
93.177.94.0/23
193.142.36.0/22
194.180.232.0/23
194.180.236.0/23
212.87.216.0/24
212.87.218.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:01:9f:05:7f:0f:f4:98:a4:86:33:8a:cf:e7:b5:94:ef:66:
6c:13:c1:ea:46:19:2a:3c:15:a1:d9:72:95:a9:50:51:74:7f:
6b:c5:9d:49:14:2f:c3:90:ed:21:e4:dd:cc:d3:60:d5:5a:0f:
59:e7:6c:f5:63:b1:cc:99:9c:e0:00:1e:44:c4:63:59:1d:1a:
12:61:9e:3a:68:3e:4e:6a:d2:50:80:7d:d7:b8:28:ee:97:e9:
56:14:fa:ea:aa:28:49:1d:95:e7:79:75:21:9a:49:b7:08:d0:
69:d3:15:e1:ed:7d:d4:e7:12:52:9d:10:96:a3:d0:a5:ef:41:
3a:8a:af:43:9e:41:4e:b3:37:fd:14:3c:8c:21:58:94:43:8d:
8a:8a:e4:63:01:a4:ef:79:67:a3:6c:e8:23:8c:77:93:8f:55:
8c:d1:a2:7f:fb:b2:23:20:7c:2d:35:cc:d2:8c:92:bd:d0:a3:
96:46:e8:b6:cc:a1:1d:5f:23:0e:35:14:4a:c7:3f:41:32:62:
bd:b4:d9:1e:d5:94:3b:51:4b:1f:49:82:14:51:dd:3b:18:a7:
31:39:82:37:d8:bf:87:99:8d:94:16:0f:ad:c0:85:9f:a7:a7:
0d:64:9c:f3:d0:e2:94:31:13:95:3b:ab:48:09:02:65:26:44:
53:85:95:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:20 2024 by rpki-client on console-ams.rpki-client.org