Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/3vLeXqyr2LGZpbnqfAt26qDG6Wc.roa
File: 3vLeXqyr2LGZpbnqfAt26qDG6Wc.roa (raw, json)
Hash identifier: NcQFYpAOHHTGRvoXqXUv7wnsySPAc4tVqhLY1HxxcLY=
Subject key identifier: DE:F2:DE:5E:AC:AB:D8:B1:99:A5:B9:EA:7C:0B:76:EA:A0:C6:E9:67
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 018852C2984DBAC1DB484357C390D9B93107
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/3vLeXqyr2LGZpbnqfAt26qDG6Wc.roa
Signing time: Thu 25 May 2023 11:54:24 +0000
ROA not before: Thu 25 May 2023 11:54:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56971
IP address blocks: 193.43.72.0/24 maxlen: 32
45.152.112.0/24 maxlen: 32
45.152.113.0/24 maxlen: 32
193.242.145.0/24 maxlen: 32
45.145.4.0/24 maxlen: 32
45.145.6.0/24 maxlen: 32
45.145.7.0/24 maxlen: 32
45.159.208.0/24 maxlen: 32
45.159.209.0/24 maxlen: 32
45.159.210.0/24 maxlen: 32
45.154.3.0/24 maxlen: 32
45.152.84.0/24 maxlen: 32
45.154.1.0/24 maxlen: 32
45.154.2.0/24 maxlen: 32
45.152.86.0/24 maxlen: 32
45.11.92.0/24 maxlen: 32
45.11.93.0/24 maxlen: 32
193.43.94.0/24 maxlen: 32
45.11.94.0/24 maxlen: 32
193.23.55.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 25 May 2023 12:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:c2:98:4d:ba:c1:db:48:43:57:c3:90:d9:b9:31:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: May 25 11:54:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=def2de5eacabd8b199a5b9ea7c0b76eaa0c6e967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:16:57:3a:40:07:8e:c8:82:a9:ee:55:4f:c3:
dc:dc:37:fb:4b:1a:9f:48:0e:be:a6:08:0a:8a:cd:
a0:14:6c:0b:2e:70:24:5b:f3:6b:38:75:c4:ad:d4:
44:34:cd:bd:4b:5c:52:a3:ac:e0:33:78:dc:40:74:
ce:29:f4:8f:44:62:5c:a6:75:32:06:eb:2b:b3:e7:
34:f0:a2:99:73:75:29:c2:7b:86:8e:01:9e:3d:72:
82:60:59:97:20:1c:be:36:a1:4d:24:6f:24:b9:90:
99:0f:f0:14:1f:c1:cb:d2:f0:d5:2a:02:10:cc:9e:
c1:92:e0:df:7f:de:2c:4c:b7:0f:45:d3:33:82:26:
d0:73:f4:a2:85:a8:ab:07:ae:15:5e:2f:e3:68:b9:
b8:92:0d:40:a8:86:9e:17:c6:57:8a:3e:a3:5b:fa:
f9:ad:a3:6f:89:2e:45:7e:33:e2:b1:84:e6:0f:78:
f4:3c:3b:0e:e6:63:5d:cb:5a:bd:9b:09:46:fa:24:
e1:67:8a:de:70:ff:66:39:20:86:fd:bc:6a:2d:70:
be:bd:82:78:27:1d:6d:65:43:8a:73:7b:90:05:21:
16:42:b8:4d:43:f0:4f:f4:b1:93:cd:31:19:83:5e:
49:f0:5c:a8:90:ab:a1:1c:de:64:f9:ff:98:6c:04:
a6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F2:DE:5E:AC:AB:D8:B1:99:A5:B9:EA:7C:0B:76:EA:A0:C6:E9:67
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/3vLeXqyr2LGZpbnqfAt26qDG6Wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.92.0-45.11.94.255
45.145.4.0/24
45.145.6.0/23
45.152.84.0/24
45.152.86.0/24
45.152.112.0/23
45.154.1.0-45.154.3.255
45.159.208.0-45.159.210.255
193.23.55.0/24
193.43.72.0/24
193.43.94.0/24
193.242.145.0/24
Signature Algorithm: sha256WithRSAEncryption
97:3a:c7:59:5f:88:29:79:e3:e0:27:7d:d1:19:89:be:8a:42:
08:72:79:19:23:04:c7:66:f8:4a:9c:ca:5d:9c:c1:8b:70:61:
de:bb:3b:07:62:ec:cc:1c:c9:d1:52:39:d7:78:12:b8:a0:2a:
a8:d9:6b:88:44:3e:86:c4:40:45:bd:e1:f8:27:99:c0:bd:ef:
99:b9:69:9a:72:53:67:ae:49:bb:7a:d5:db:40:af:12:dd:a0:
82:db:e0:e0:fb:b4:40:9d:83:38:df:cc:c2:35:b7:7c:55:c0:
34:c9:05:a9:96:bd:c0:bc:df:53:63:b7:6a:54:42:60:fb:d0:
8b:06:f2:b6:09:c9:c1:2f:c8:ba:0f:b6:2f:6a:e7:d9:c6:10:
49:7e:9a:2f:0c:d3:11:8d:18:f1:21:c8:60:28:ae:9c:bb:d1:
a6:63:61:f7:21:b3:87:21:4e:9d:d7:2d:f9:e6:bf:58:e5:79:
39:bb:70:4c:84:ff:7e:c3:b1:f0:e1:f3:1a:57:c3:81:fd:4d:
07:54:45:e8:36:a5:dd:07:17:67:16:01:e4:85:01:f1:2a:54:
6d:e7:bd:ad:bd:36:99:c6:fa:05:77:58:4c:a4:a7:07:72:f0:
99:c3:34:ad:68:bd:0e:63:6e:24:47:ee:b1:e2:a1:9b:7d:d0:
12:84:86:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:22 2024 by rpki-client on console-ams.rpki-client.org