Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/TxsDqRMDuC5DG9Y9QPRYQazq-UQ.roa
File: TxsDqRMDuC5DG9Y9QPRYQazq-UQ.roa (raw, json)
Hash identifier: vrrR6AwNqdyW07zMg0Veiiglw/vq/yoAhvRAdzg8FE4=
Subject key identifier: 4F:1B:03:A9:13:03:B8:2E:43:1B:D6:3D:40:F4:58:41:AC:EA:F9:44
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 018D35736DE06439006AC8745B7B71CC3FB5
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/TxsDqRMDuC5DG9Y9QPRYQazq-UQ.roa
Signing time: Tue 23 Jan 2024 08:32:53 +0000
ROA not before: Tue 23 Jan 2024 08:32:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49289
IP address blocks: 93.185.112.0/20 maxlen: 20
159.255.136.0/22 maxlen: 22
159.255.144.0/24 maxlen: 24
171.22.232.0/24 maxlen: 24
171.22.233.0/24 maxlen: 24
171.22.234.0/24 maxlen: 24
171.22.235.0/24 maxlen: 24
178.239.32.0/20 maxlen: 20
185.63.132.0/23 maxlen: 23
185.63.135.0/24 maxlen: 24
188.94.120.0/21 maxlen: 21
2a00:c50::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 28 Oct 2024 07:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:35:73:6d:e0:64:39:00:6a:c8:74:5b:7b:71:cc:3f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: Jan 23 08:32:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f1b03a91303b82e431bd63d40f45841aceaf944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a2:df:01:d0:42:c4:61:61:7f:50:00:8a:81:
58:98:2c:49:af:03:5d:ad:67:e2:d9:be:ca:80:f1:
c6:54:f0:e4:95:80:fc:f7:02:0d:59:23:43:b1:03:
90:6b:a8:c5:c1:0c:f6:2b:00:a2:a6:57:db:bd:04:
82:af:62:a6:a8:ec:3f:52:9f:37:49:52:da:e5:d1:
19:6c:d9:91:a8:ef:9e:ee:e8:80:b4:97:6d:b4:3b:
3c:4c:71:c9:9e:38:dc:21:ef:fd:0d:20:46:c8:13:
e7:29:f5:04:8d:c1:fa:94:94:51:be:89:a9:af:43:
05:2d:7e:a9:e4:1f:9a:8b:3d:10:83:29:f9:fd:62:
cd:e5:86:07:71:59:51:df:c3:b1:26:15:d1:2b:a5:
8e:f7:7d:56:96:32:04:99:a3:34:3d:ff:aa:38:8d:
f6:6a:77:80:ed:38:a8:0b:b4:9a:9c:8c:d6:db:06:
ea:c5:86:40:a2:d9:00:fc:91:c3:53:9c:be:43:56:
71:7f:a3:75:89:01:ba:81:8d:14:a6:28:7f:86:57:
ed:c4:c0:de:56:1c:d7:e0:e9:07:a8:f1:3e:e3:25:
35:d3:ad:c5:ee:c2:1c:01:9a:3b:f8:7c:56:ea:8d:
30:23:09:79:42:99:2b:a3:f6:bf:5b:97:da:ed:35:
1c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1B:03:A9:13:03:B8:2E:43:1B:D6:3D:40:F4:58:41:AC:EA:F9:44
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/TxsDqRMDuC5DG9Y9QPRYQazq-UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.112.0/20
159.255.136.0/22
159.255.144.0/24
171.22.232.0/22
178.239.32.0/20
185.63.132.0/23
185.63.135.0/24
188.94.120.0/21
IPv6:
2a00:c50::/29
Signature Algorithm: sha256WithRSAEncryption
1c:04:75:b5:d0:a7:02:20:be:cd:84:fc:74:d0:cb:f0:51:6d:
ab:b3:ae:f2:1f:62:36:3a:cf:74:3c:fd:68:58:a7:64:33:10:
94:58:a6:3a:e1:9f:d8:e0:a2:26:5b:8d:58:70:10:7d:92:6f:
15:12:75:47:d6:92:85:bb:47:bf:d5:90:00:0f:8c:07:7f:4a:
f3:e3:c1:10:87:a4:e4:e3:76:98:be:42:cb:14:78:e5:a7:c8:
e5:ff:59:9f:ce:d9:df:23:51:a7:c5:4e:00:8c:b2:24:ec:d1:
2f:f3:48:0c:70:39:3c:2b:16:4f:b1:18:50:f5:df:13:e3:d2:
e4:00:8b:fd:62:81:b3:29:bb:31:bd:38:8f:70:75:2c:c3:d5:
b1:7c:2e:c8:01:78:95:72:d0:50:62:64:ad:24:55:5a:43:1f:
5b:54:2b:cc:a4:9a:45:a2:d4:c2:31:8a:bb:04:37:50:18:bc:
3b:46:91:f2:fc:33:7e:ec:d4:e1:ab:88:4b:a3:ec:1e:53:8e:
71:e0:e5:49:8f:9b:ff:c5:54:06:95:12:02:eb:ee:30:61:3e:
a0:d8:70:2f:69:ba:6d:e6:9d:27:b9:2c:f8:59:8f:d1:3e:8c:
1b:c8:d1:fe:92:1a:1c:f8:37:08:0d:37:8c:6b:94:8c:e5:84:
28:78:97:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:03 2025 by rpki-client