Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/Xts4KGQw4Ip7JKClECFXiiIfIxA.roa
File: Xts4KGQw4Ip7JKClECFXiiIfIxA.roa (raw, json)
Hash identifier: SVZcGjyTO1SYiaFkttm8GiYOQeNQw7vAr9hgVHhjnOY=
Subject key identifier: 5E:DB:38:28:64:30:E0:8A:7B:24:A0:A5:10:21:57:8A:22:1F:23:10
Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Certificate serial: 018CC6B81FE293FF50460C88C4649D9BEEA9
Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/Xts4KGQw4Ip7JKClECFXiiIfIxA.roa
Signing time: Mon 01 Jan 2024 20:30:04 +0000
ROA not before: Mon 01 Jan 2024 20:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44592
IP address blocks: 45.153.34.0/24 maxlen: 24
195.62.46.0/24 maxlen: 24
45.153.35.0/24 maxlen: 24
45.142.182.0/24 maxlen: 24
45.142.181.0/24 maxlen: 24
45.142.180.0/24 maxlen: 24
92.246.85.0/24 maxlen: 24
92.246.84.0/24 maxlen: 24
92.246.86.0/24 maxlen: 24
2a0d:c2c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 12 Mar 2024 14:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:1f:e2:93:ff:50:46:0c:88:c4:64:9d:9b:ee:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Validity
Not Before: Jan 1 20:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5edb38286430e08a7b24a0a51021578a221f2310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:16:5c:6a:b2:9f:13:cb:bc:7f:11:0d:05:2e:
e7:a1:fa:46:03:b4:a8:73:c0:d7:fa:bf:93:ae:ae:
c2:14:3e:18:ff:6a:4e:52:6a:e0:a6:14:68:e4:66:
1f:85:8d:89:1f:57:90:b7:78:ce:4b:52:ed:0f:33:
f9:84:6e:27:e0:34:a9:87:08:2e:11:74:8d:89:82:
dc:78:f3:a1:5c:4c:97:29:1a:e1:fc:ce:dd:a1:73:
27:bf:02:f2:de:ef:24:2a:8e:fc:e6:3c:53:3f:fa:
7c:3e:49:96:c6:13:0d:78:82:bd:29:e0:ef:ed:e9:
8c:ed:34:3b:1a:7f:e4:a7:88:a2:8b:57:23:e0:95:
75:35:d5:b1:05:d9:71:e4:a4:cd:a7:b4:ca:8d:38:
fa:37:ca:66:48:27:f7:92:ae:1f:f6:30:4d:4b:2c:
0b:76:5f:c2:15:34:bf:16:22:50:f9:09:d2:e1:33:
f0:50:0c:9a:85:37:97:7c:3d:20:0b:8e:c3:d9:0c:
40:6d:60:67:49:bd:13:8d:88:b4:ff:cf:5b:0b:81:
9c:3a:70:12:fa:26:fc:44:a2:f5:83:bd:29:a4:79:
88:27:4e:54:c0:a1:88:15:4a:1b:2e:2a:cf:b1:db:
e6:69:34:f8:e7:a8:be:42:81:c2:b2:c7:96:4e:63:
fa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DB:38:28:64:30:E0:8A:7B:24:A0:A5:10:21:57:8A:22:1F:23:10
X509v3 Authority Key Identifier:
keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/Xts4KGQw4Ip7JKClECFXiiIfIxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.180.0-45.142.182.255
45.153.34.0/23
92.246.84.0-92.246.86.255
195.62.46.0/24
IPv6:
2a0d:c2c0::/29
Signature Algorithm: sha256WithRSAEncryption
8e:71:ae:ae:e7:64:6d:ab:a6:4c:e8:3a:0d:e7:0c:d1:fc:7c:
a7:2a:44:69:3d:b7:3e:fd:4c:0c:53:1c:aa:4f:f6:07:9e:22:
b2:a3:37:8e:d4:7f:ce:67:15:95:8e:7d:d5:d1:8d:0f:a8:5f:
61:7f:58:37:a8:e8:cc:dc:ae:c2:02:14:34:37:3a:5c:d2:ed:
d8:9d:4d:12:92:a0:d1:a0:51:3f:35:a4:46:ea:6d:d0:90:1c:
65:e8:c2:1e:76:e6:a9:ea:e2:11:a9:79:56:24:df:36:80:54:
49:43:8a:27:09:88:b2:d4:9d:50:99:24:5f:d0:be:85:d5:c7:
89:be:1a:cb:63:5d:5e:7f:6b:17:52:8d:c7:b7:1f:d6:b9:e8:
34:57:04:27:8b:f1:57:76:36:28:c8:e3:4f:ee:0f:37:7d:13:
11:62:e5:19:db:06:8c:ed:63:88:06:37:c9:ff:be:84:1b:66:
54:0a:8e:d8:da:b4:94:e3:c1:0b:59:2d:8e:10:7a:b2:72:a4:
f6:d2:ab:03:f7:83:80:df:7a:24:f3:8d:aa:a9:e4:bb:9e:99:
9d:de:0a:2b:71:dd:51:3e:a7:6a:f9:c4:a7:87:62:d6:81:f6:
74:b0:dd:b6:2a:95:93:2d:fd:bc:d5:a2:48:85:0a:1e:a9:f3:
4f:3f:79:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 17:31:50 2024 by rpki-client on console-ams.rpki-client.org