Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/B6_EFAbnQfFFqBLqNsMNrcNXxLQ.roa
File: B6_EFAbnQfFFqBLqNsMNrcNXxLQ.roa (raw, json)
Hash identifier: BUss6da7JnnTdJgKwHo4nayUj5zIyVGQkB6hSObvqbQ=
Subject key identifier: 07:AF:C4:14:06:E7:41:F1:45:A8:12:EA:36:C3:0D:AD:C3:57:C4:B4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CFAE0BD979B0E733B52F8626243552365
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/B6_EFAbnQfFFqBLqNsMNrcNXxLQ.roa
Signing time: Thu 11 Jan 2024 23:34:41 +0000
ROA not before: Thu 11 Jan 2024 23:34:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.148.116.0/22 maxlen: 24
185.238.188.0/22 maxlen: 24
2a0e:b107:1870::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a10:ccc0:110::/44 maxlen: 48
2a06:de01:d0::/44 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a10:ccc3:ccce::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
2a06:de01:400::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 13 Jan 2024 21:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fa:e0:bd:97:9b:0e:73:3b:52:f8:62:62:43:55:23:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 11 23:34:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07afc41406e741f145a812ea36c30dadc357c4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:a0:56:fb:d4:0e:ba:86:c4:8f:5c:98:fc:
78:e4:55:23:44:16:ad:c8:92:80:2a:4d:b1:47:44:
d3:e6:c7:91:41:5e:8f:ea:0e:3c:d2:ad:97:82:09:
54:a0:fe:da:30:a1:7e:8b:12:7f:df:19:ba:23:31:
e4:a8:61:ee:fb:68:a4:01:0c:a4:78:2d:2a:5a:cb:
4b:2d:4d:1e:c2:57:a0:e2:b5:99:28:2e:a3:60:03:
53:02:94:4a:aa:35:75:16:5a:3a:45:0e:9d:40:05:
50:2f:f9:5a:e9:03:91:09:bb:6c:27:60:3e:14:08:
ea:52:11:6b:9b:c1:75:08:0d:03:ac:db:1e:13:6b:
f1:87:40:f2:a7:e3:82:15:e0:82:04:09:d9:ef:ec:
f1:7b:25:91:31:b3:c4:77:6c:e3:82:a8:99:ef:47:
01:0a:7d:79:1c:e4:72:25:69:bd:d6:84:09:d6:22:
bb:7a:84:d6:36:b3:e5:28:56:04:4b:50:c9:f3:0d:
f9:ce:b6:8a:9a:ff:b8:ac:06:8a:41:c7:8d:61:95:
d9:50:d9:2a:ee:38:3e:0a:d9:51:6e:f3:3b:a0:89:
4f:74:5a:f1:74:89:42:8d:dd:2a:db:f5:3f:5f:5e:
18:a5:43:73:d4:6f:93:9b:ff:bb:ef:41:9b:36:33:
c6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AF:C4:14:06:E7:41:F1:45:A8:12:EA:36:C3:0D:AD:C3:57:C4:B4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/B6_EFAbnQfFFqBLqNsMNrcNXxLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/22
185.238.188.0/22
IPv6:
2a06:de01:d0::/44
2a06:de01:400::/48
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:ccc0:110::/44
2a10:ccc3:ccce::/48
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
2d:f7:61:54:f9:1b:db:7c:08:d7:09:28:9c:12:f9:5a:d9:35:
ef:04:dd:b0:88:da:8f:d2:49:0e:07:be:46:58:f5:ad:96:1d:
fc:1e:f0:c5:71:78:62:b9:11:fd:63:cd:14:65:44:cf:7d:89:
18:55:a7:0a:39:7a:1d:e0:a3:57:1b:11:3b:b1:0b:83:34:ef:
b3:5a:b5:52:8f:ae:a7:e3:94:c4:cb:50:b2:f1:3e:92:af:6a:
af:f0:3d:70:ac:54:aa:d5:24:17:a4:d4:d2:01:06:1a:3e:ff:
a4:db:d0:91:89:82:df:3f:0d:8e:63:1a:b0:7e:d8:58:b0:ba:
e4:e3:de:64:df:52:8a:68:2a:4c:ad:23:c4:d4:f8:ea:6b:cc:
0a:9c:51:3d:d5:29:eb:eb:3e:db:fd:5a:59:bc:42:92:91:a8:
5f:48:d0:8a:e8:8d:7d:fc:49:59:6a:01:47:43:af:c2:a7:73:
92:c4:0b:62:3f:77:3f:13:05:e4:0a:cb:7d:8f:5f:df:6b:58:
b7:de:39:1f:08:b7:0f:72:a7:64:28:1a:2d:89:bb:ef:b4:93:
d9:9f:f5:82:ae:fe:95:b9:ca:e8:94:16:b8:69:b5:67:47:fd:
9f:b3:b4:00:0e:fd:05:c8:b4:fc:d4:71:49:fe:cc:5f:9e:b6:
0c:09:5d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 14 02:06:29 2024 by rpki-client on console-ams.rpki-client.org