Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/0Dx5Eyt2n0WABBuyrk-D6L4_5JQ.roa
File: 0Dx5Eyt2n0WABBuyrk-D6L4_5JQ.roa (raw, json)
Hash identifier: 8/DhO9FEp104U+d4/wjTp8CpO744z0Q4XveNtBVgEls=
Subject key identifier: D0:3C:79:13:2B:76:9F:45:80:04:1B:B2:AE:4F:83:E8:BE:3F:E4:94
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 018A45BB3AE31362F88F53758F3ADF93DC0D
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/0Dx5Eyt2n0WABBuyrk-D6L4_5JQ.roa
Signing time: Wed 30 Aug 2023 09:16:52 +0000
ROA not before: Wed 30 Aug 2023 09:16:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44306
IP address blocks: 213.186.25.0/24 maxlen: 24
213.186.26.0/24 maxlen: 24
213.186.27.0/24 maxlen: 24
213.186.28.0/22 maxlen: 24
46.151.128.0/21 maxlen: 24
185.151.132.0/24 maxlen: 24
185.151.133.0/24 maxlen: 24
185.151.134.0/24 maxlen: 24
213.186.0.0/24 maxlen: 24
213.186.1.0/24 maxlen: 24
213.186.0.0/19 maxlen: 19
213.186.0.0/20 maxlen: 20
213.186.4.0/23 maxlen: 23
213.186.9.0/24 maxlen: 24
213.186.16.0/23 maxlen: 23
213.186.23.0/24 maxlen: 24
213.186.18.0/24 maxlen: 24
213.186.19.0/24 maxlen: 24
213.186.21.0/24 maxlen: 24
213.186.22.0/23 maxlen: 23
213.186.22.0/24 maxlen: 24
91.199.77.0/24 maxlen: 24
2a02:2608:fffe::/48 maxlen: 48
2a02:2608:fffe:1::/64 maxlen: 64
2a02:2608::/32 maxlen: 32
2a02:2608:2000::/48 maxlen: 48
2a02:2608:3000::/48 maxlen: 48
2a02:2608:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:45:bb:3a:e3:13:62:f8:8f:53:75:8f:3a:df:93:dc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Aug 30 09:16:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d03c79132b769f4580041bb2ae4f83e8be3fe494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:93:9e:4d:33:2d:d9:4b:f1:07:ca:ad:b5:ac:
d2:23:ac:be:07:ac:8d:14:b7:22:ff:44:27:6d:27:
bb:42:07:c7:69:f6:98:90:bf:38:da:86:20:03:da:
a9:20:8a:c2:b9:ce:ad:58:bc:46:08:fd:35:01:56:
2a:e4:df:65:48:0c:1f:9c:dd:73:3a:e5:b6:3b:ab:
40:35:ff:8d:06:cc:a0:10:b8:67:6d:bb:94:62:4a:
57:0c:b6:57:9a:f9:16:68:01:21:55:38:91:17:ab:
6b:22:f2:fb:9c:b3:e5:d0:f1:d7:0b:0c:9d:a6:3c:
28:91:e2:75:5c:3e:e5:29:f8:be:ea:d5:2b:13:93:
25:8b:4a:f7:50:52:88:5d:8d:4f:88:76:87:f5:c3:
88:41:d7:c4:80:c0:5d:3c:ef:e9:88:00:cc:7e:cf:
c7:fd:8e:cf:34:68:b6:3a:ed:fd:a2:8f:64:83:df:
2a:14:18:ee:34:58:45:19:7f:6c:d0:6c:87:ef:13:
a6:4a:fa:38:aa:6a:60:05:94:a9:67:36:ce:25:de:
98:83:f0:93:b1:fd:26:32:7e:62:49:23:1a:ad:ca:
a5:e0:11:61:6d:54:2b:a3:52:cd:51:fd:2b:28:1f:
6b:46:de:53:86:bd:ec:63:bc:f2:a7:6b:62:6b:5c:
36:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3C:79:13:2B:76:9F:45:80:04:1B:B2:AE:4F:83:E8:BE:3F:E4:94
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/0Dx5Eyt2n0WABBuyrk-D6L4_5JQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.128.0/21
91.199.77.0/24
185.151.132.0-185.151.134.255
213.186.0.0/19
IPv6:
2a02:2608::/32
Signature Algorithm: sha256WithRSAEncryption
5e:0a:a0:ba:87:69:a7:01:4a:7f:13:56:43:48:89:a6:5b:bd:
5c:4c:f6:ba:30:a9:7b:08:b8:59:1b:49:e1:ec:6a:4c:b0:f5:
31:85:33:10:07:0b:ce:96:34:7a:46:0f:a1:c9:28:4b:a8:3c:
3f:56:b8:d2:2a:8b:e3:ac:ce:ae:6d:38:f8:2b:01:3d:eb:4b:
6f:a2:92:5f:d6:04:71:10:80:64:cc:c0:5c:34:13:aa:e6:93:
70:62:e5:b7:4a:31:38:55:2a:de:04:46:0e:c0:f1:ac:58:34:
53:e8:65:1d:fd:e3:17:6d:86:d3:e2:a5:ff:56:b0:86:e6:8b:
96:65:6f:d0:37:0b:4e:f3:07:dc:10:fb:6c:2c:b4:95:73:f3:
c2:0a:ca:0d:33:74:2f:af:c2:7c:0c:5e:94:29:1c:f9:58:61:
70:b3:76:e7:48:5f:35:e5:b0:2d:4e:99:74:0f:e0:07:9c:ce:
5c:96:de:81:0b:ec:30:84:82:1f:70:a0:14:33:32:65:66:ac:
51:b7:7b:c4:01:08:f2:8c:4d:16:f9:9c:b9:5b:f8:77:53:a6:
7f:d7:5e:3e:52:54:3f:88:58:a0:dd:96:54:10:59:6e:89:48:
74:f2:87:7b:19:89:6a:6b:47:28:c2:74:0c:ae:1b:22:9f:9a:
a3:ee:b5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:11 2024 by rpki-client on console-fra.rpki-client.org