Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/4TibG5wrtRSlNwKM9RrcgEZChbg.roa
File: 4TibG5wrtRSlNwKM9RrcgEZChbg.roa (raw, json)
Hash identifier: NVdmGUju4yqb85ZId4i0Md0ke5nTmLX0LmUI1nF9Yxw=
Subject key identifier: E1:38:9B:1B:9C:2B:B5:14:A5:37:02:8C:F5:1A:DC:80:46:42:85:B8
Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial: 0192CC56DAA505BA4FFF4731BEB6E677D3A2
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/4TibG5wrtRSlNwKM9RrcgEZChbg.roa
Signing time: Sun 27 Oct 2024 04:58:16 +0000
ROA not before: Sun 27 Oct 2024 04:58:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208208
IP address blocks: 84.252.120.0/24 maxlen: 24
84.252.121.0/24 maxlen: 24
84.252.122.0/24 maxlen: 24
84.252.123.0/24 maxlen: 24
185.230.160.0/24 maxlen: 24
185.230.161.0/24 maxlen: 24
185.230.162.0/24 maxlen: 24
185.230.163.0/24 maxlen: 24
185.240.241.0/24 maxlen: 24
185.240.242.0/24 maxlen: 24
185.240.243.0/24 maxlen: 24
2a09:6301::/32 maxlen: 32
2a09:6302::/32 maxlen: 32
2a09:6305::/32 maxlen: 32
2a0c:2500::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 30 Oct 2024 16:57:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:cc:56:da:a5:05:ba:4f:ff:47:31:be:b6:e6:77:d3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Validity
Not Before: Oct 27 04:58:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1389b1b9c2bb514a537028cf51adc80464285b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:6f:97:cf:38:6f:b1:57:9c:8c:8a:4a:27:
52:b8:59:73:f9:44:04:c4:8b:d7:a5:de:42:91:40:
64:66:04:1c:23:72:ea:4f:9f:73:1a:48:83:27:3d:
19:5c:3f:7b:83:3b:05:02:3c:a7:1b:fa:23:23:23:
e7:62:5f:02:ed:72:81:3a:3c:76:0b:fd:8c:51:81:
8e:0d:b5:c6:4e:b2:c5:82:fb:8e:1a:32:b6:69:02:
6f:98:46:f3:9c:38:48:93:1e:b0:4a:ee:ea:ff:f4:
1b:e0:37:6a:b2:f4:ea:b2:e8:be:71:f8:ec:ed:7a:
4b:3a:5f:c6:dc:77:0d:75:45:8b:06:d8:ff:72:37:
ec:7d:8f:a0:f7:bb:4d:aa:5a:d0:1f:0f:75:d0:e8:
af:48:2b:52:87:e7:c3:07:f2:dd:e0:48:b3:b0:8d:
82:bb:a8:f0:71:88:48:bb:9a:15:3f:8c:b6:22:a8:
ad:ec:dc:ca:ab:bc:46:37:24:03:5a:80:d4:88:a0:
ac:79:7b:cb:f6:b7:73:06:21:10:ac:3c:4d:98:ac:
21:65:98:6b:54:38:0e:11:c7:1d:39:d2:d3:02:e6:
50:30:bf:9d:7d:5f:ba:55:a2:8c:d9:3f:9c:2a:3c:
08:8d:eb:14:b7:a1:e1:d3:87:f7:2a:10:6e:bb:97:
23:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:38:9B:1B:9C:2B:B5:14:A5:37:02:8C:F5:1A:DC:80:46:42:85:B8
X509v3 Authority Key Identifier:
keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/4TibG5wrtRSlNwKM9RrcgEZChbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.120.0/22
185.230.160.0/22
185.240.241.0-185.240.243.255
IPv6:
2a09:6301::-2a09:6302:ffff:ffff:ffff:ffff:ffff:ffff
2a09:6305::/32
2a0c:2500::/32
Signature Algorithm: sha256WithRSAEncryption
23:9f:fd:d3:b6:e6:00:7b:a5:5a:1c:e4:e3:db:7b:af:9f:b4:
a6:a4:ca:17:45:5e:8b:bf:02:17:4b:d4:73:76:31:31:e3:40:
ec:3a:f7:a0:bb:e6:bf:78:88:6c:f7:6d:ca:29:50:c6:9a:fb:
d2:fb:eb:31:72:37:7a:74:6a:97:74:e6:03:67:92:12:23:b0:
11:b8:7f:a4:d0:62:01:fe:ab:fd:10:4d:8e:ca:7f:4b:81:85:
a5:a7:53:75:90:59:d3:a5:f3:31:2d:4d:d9:4f:35:dd:d5:6f:
29:3f:dc:cd:43:18:d6:cd:ab:52:d5:55:48:64:70:d3:99:58:
e2:72:e7:f2:b8:f6:3a:b9:f8:f2:e5:af:62:84:e6:df:19:51:
91:de:b1:c5:fb:95:d7:64:3a:03:e8:90:42:61:5e:f3:05:d7:
b7:11:a5:6f:74:8d:23:c1:49:cb:46:d6:4a:fb:09:13:66:7a:
b2:2c:3a:fd:1e:59:b0:1b:3d:4e:a9:a4:9e:ba:34:5e:d4:da:
93:39:fe:e9:a4:c2:de:fe:0e:e8:ca:9d:f4:ef:34:4b:05:d4:
d2:3c:76:6e:96:c2:b7:1c:0d:d6:87:d6:65:08:44:75:f2:df:
65:e2:b9:68:02:6d:89:fa:e2:92:4e:7f:2b:09:02:29:34:38:
19:f6:cd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 18:13:43 2024 by rpki-client on console-fra.rpki-client.org