Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/4f5EN-FKxGlUCZrCA-Qv0euk88o.roa
File: 4f5EN-FKxGlUCZrCA-Qv0euk88o.roa (raw, json)
Hash identifier: ZM5Ie69E+eJx+kYhoCwqrRGEd3dBMi1bskI0dsLLxQY=
Subject key identifier: E1:FE:44:37:E1:4A:C4:69:54:09:9A:C2:03:E4:2F:D1:EB:A4:F3:CA
Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2
Certificate serial: 01856FD5396647892193538F8C62DB3D8E14
Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/4f5EN-FKxGlUCZrCA-Qv0euk88o.roa
Signing time: Mon 02 Jan 2023 00:15:22 +0000
ROA not before: Mon 02 Jan 2023 00:15:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39378
IP address blocks: 194.76.226.0/24 maxlen: 24
79.132.130.0/24 maxlen: 24
185.219.220.0/23 maxlen: 23
185.219.222.0/24 maxlen: 24
185.219.223.0/24 maxlen: 24
185.158.251.0/24 maxlen: 24
185.212.44.0/24 maxlen: 24
185.212.45.0/24 maxlen: 24
185.212.46.0/24 maxlen: 24
185.212.47.0/24 maxlen: 24
91.241.93.0/24 maxlen: 24
2a0b:7140::/48 maxlen: 48
2a07:fc00::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 06 Jan 2023 00:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:39:66:47:89:21:93:53:8f:8c:62:db:3d:8e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2
Validity
Not Before: Jan 2 00:15:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1fe4437e14ac46954099ac203e42fd1eba4f3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:9c:8b:6f:51:e1:bf:6d:d4:ee:67:df:93:
e3:13:1e:2d:a2:3d:30:de:f4:5e:5d:88:b6:ae:cc:
25:8d:00:00:16:aa:c0:24:5d:43:06:69:ea:1d:1e:
55:37:58:1c:f3:2f:b0:0d:fe:48:5b:59:88:40:0c:
e6:bd:6f:7f:65:06:74:22:a8:97:f3:8f:66:91:1b:
12:b8:ab:18:7a:c7:71:be:b0:39:d4:e1:77:7a:9c:
77:ff:e4:a6:6b:23:c3:c9:94:d4:6a:4e:24:ed:d3:
b9:b4:45:d4:fd:98:9e:3f:08:6e:d3:d2:c4:c6:db:
75:43:d8:c9:e8:b6:a8:21:17:ba:2b:58:f1:60:94:
64:a7:03:83:93:85:0a:7c:5a:cf:05:95:10:ea:c0:
f5:91:6f:88:8c:7f:75:90:f6:7e:48:3a:1b:97:48:
f6:02:78:07:ab:ec:eb:b2:51:87:5b:b5:d9:93:6a:
f2:56:fe:60:09:f9:5d:94:ca:ed:16:b0:13:de:6d:
16:fe:de:56:74:a6:6a:ad:15:4e:ad:09:00:e6:a5:
3f:11:7c:6b:43:fc:56:de:b4:ee:8e:8d:32:a0:5e:
b8:72:69:f1:b5:52:76:2e:73:6d:bf:97:a6:60:76:
ae:c5:89:c6:5f:9f:4a:5f:01:bc:d9:c8:a2:c7:65:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FE:44:37:E1:4A:C4:69:54:09:9A:C2:03:E4:2F:D1:EB:A4:F3:CA
X509v3 Authority Key Identifier:
keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/4f5EN-FKxGlUCZrCA-Qv0euk88o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.130.0/24
91.241.93.0/24
185.158.251.0/24
185.212.44.0/22
185.219.220.0/22
194.76.226.0/24
IPv6:
2a07:fc00::/48
2a0b:7140::/48
Signature Algorithm: sha256WithRSAEncryption
7e:69:41:be:bc:10:cc:b8:22:9f:72:a2:81:fa:64:bf:6e:24:
2f:34:5a:10:33:e6:b6:4a:82:7e:2f:19:b9:37:5e:93:83:af:
45:47:95:f3:56:6c:0a:d2:8c:b9:c8:b2:94:74:a7:72:94:a2:
c2:4e:d7:72:0c:e9:ff:d0:ab:5f:ca:0f:37:53:1a:4a:e6:68:
72:99:04:0a:dc:68:11:70:ab:46:31:29:ed:e7:e6:a2:de:dd:
2d:f3:08:ff:9a:a9:c8:bf:39:03:83:39:72:95:0d:9a:08:fa:
3c:8d:13:bf:ba:5d:24:ba:16:a6:68:b1:ff:92:8b:c5:c3:68:
5c:5f:14:73:34:b8:b4:50:06:43:0d:68:a6:6e:44:a3:9f:d4:
a8:c2:cf:35:f9:45:43:1e:b8:23:77:bc:ec:d3:fd:5c:02:b1:
63:82:e2:fa:84:c8:98:f1:bf:b5:af:15:9f:5d:2e:c7:55:4f:
12:6c:eb:d4:b5:c1:17:02:cf:c4:c7:45:69:d7:64:17:01:41:
20:2e:05:4c:67:27:06:d8:25:fa:52:cc:80:82:b5:7c:23:52:
29:27:3a:4d:df:33:11:ec:0e:c8:81:e3:51:f8:38:ea:d8:5e:
cf:7c:ec:ec:5a:31:1d:7d:fc:85:ac:e5:74:31:46:e0:a2:66:
31:93:05:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:55 2024 by rpki-client on console-ams.rpki-client.org