Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L-aPrBnqyaBcUAl-Cwv6O7yRk3Y.roa
File: L-aPrBnqyaBcUAl-Cwv6O7yRk3Y.roa (raw, json)
Hash identifier: 3J70oLQdM57OSOGaamKHetP1VrIaaMBsHE2YyS4zLuM=
Subject key identifier: 2F:E6:8F:AC:19:EA:C9:A0:5C:50:09:7E:0B:0B:FA:3B:BC:91:93:76
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CDC529526D08EBA9DC51FA62478FDE017
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L-aPrBnqyaBcUAl-Cwv6O7yRk3Y.roa
Signing time: Sat 06 Jan 2024 01:10:48 +0000
ROA not before: Sat 06 Jan 2024 01:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.148.116.0/22 maxlen: 24
185.238.188.0/22 maxlen: 24
2a0e:b107:1870::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a10:ccc0:110::/44 maxlen: 48
2a06:de01:d0::/44 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a10:ccc3:ccce::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
2a10:cc40:cc46::/48 maxlen: 48
2a06:de01:400::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 11 Jan 2024 23:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:dc:52:95:26:d0:8e:ba:9d:c5:1f:a6:24:78:fd:e0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 6 01:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fe68fac19eac9a05c50097e0b0bfa3bbc919376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:82:59:58:33:e2:23:68:d7:26:2f:b7:23:86:
f1:0c:68:e3:b3:e3:1b:26:61:b2:08:8f:c2:69:22:
ae:52:7c:de:3c:c8:80:4d:2b:b8:9e:59:d5:1d:97:
a4:c8:58:b0:f4:f7:6e:dc:a6:48:c4:26:3d:25:02:
68:cb:1b:65:46:94:42:b0:68:da:d5:58:18:70:25:
d3:d2:8e:0a:8d:9d:b8:50:48:b1:fb:f7:ae:95:fe:
9f:3e:b9:21:a4:87:7b:82:9b:dd:cf:02:ab:e1:bb:
9f:48:8e:f8:11:ab:fc:f6:a1:83:6e:6a:e6:9f:5b:
0f:4b:6e:f9:e0:2c:26:6e:d6:4e:25:9b:97:ab:04:
3e:d3:98:ee:8a:ba:1b:67:38:cc:be:78:88:f0:a6:
cc:08:d0:37:1e:1b:66:24:6e:96:b6:f0:61:19:c4:
8b:e3:4c:1b:e2:85:b6:c4:0a:f1:cd:05:60:0a:7b:
17:1f:30:4c:54:45:6d:73:93:d5:fd:5a:29:94:11:
43:ce:e9:8b:88:fd:25:f7:e3:93:be:c5:fb:b6:40:
c0:95:9e:c3:ee:39:21:15:71:3c:81:c6:74:3b:b9:
61:d0:06:a9:26:c9:81:f9:c6:de:8d:02:6b:92:f2:
b8:84:e1:06:91:5d:86:09:c3:f4:e3:16:8e:42:40:
d0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E6:8F:AC:19:EA:C9:A0:5C:50:09:7E:0B:0B:FA:3B:BC:91:93:76
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L-aPrBnqyaBcUAl-Cwv6O7yRk3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/22
185.238.188.0/22
IPv6:
2a06:de01:d0::/44
2a06:de01:400::/48
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:cc40:cc46::/48
2a10:ccc0:110::/44
2a10:ccc3:ccce::/48
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
6d:85:7c:8e:f5:d4:ed:3c:ef:c9:31:9a:2d:48:e8:a5:3b:25:
55:5c:5e:33:8b:13:c6:24:d8:18:65:d4:d0:44:64:3f:3a:aa:
ab:1d:6e:80:a6:92:8e:a1:33:74:36:0e:0b:f5:dd:c3:5c:91:
3f:b6:b7:19:6f:b7:e3:7c:45:e6:b7:19:2f:80:85:c0:c6:79:
c4:51:d0:d4:53:ff:fc:07:44:82:3e:c0:86:b4:81:48:12:ec:
96:43:44:76:75:2e:6e:e0:3e:2c:51:0f:1c:9b:2d:ff:f5:02:
2b:8f:8b:db:7c:97:8c:21:2e:46:2e:dc:fd:00:72:dc:d3:b9:
77:bb:b3:54:bd:1e:bd:98:b9:4f:0a:0a:1d:2a:7e:96:c1:6e:
4d:48:6a:72:c9:34:86:76:26:8c:09:fd:f6:49:c2:f7:0f:ff:
86:ed:8d:17:42:4f:57:9c:45:f0:d6:38:c5:af:19:55:90:9e:
a6:bf:d3:99:24:91:d6:c3:94:63:4c:d3:6c:30:b1:d0:e4:87:
b9:9d:5a:71:31:55:9a:45:26:eb:74:c0:3a:b3:b2:eb:1e:9b:
4c:9b:0c:7d:5b:72:0b:47:c2:b6:4f:5b:e1:e1:57:cc:30:74:
87:8c:70:ff:9d:bc:16:fd:53:f5:bd:98:47:03:28:19:83:68:
f6:79:41:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 00:47:00 2024 by rpki-client on console-ams.rpki-client.org