Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UlKjfkaFBywN6hDdyve1tg_SOOk.roa
File: UlKjfkaFBywN6hDdyve1tg_SOOk.roa (raw, json)
Hash identifier: 8qM+FL601rLWA7mephSP8pgVFgBe3ONiUhmzoQPHK+Y=
Subject key identifier: 52:52:A3:7E:46:85:07:2C:0D:EA:10:DD:CA:F7:B5:B6:0F:D2:38:E9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D1E628FBE04A23BB066A719BC441CBF87
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UlKjfkaFBywN6hDdyve1tg_SOOk.roa
Signing time: Thu 18 Jan 2024 21:03:12 +0000
ROA not before: Thu 18 Jan 2024 21:03:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.148.116.0/22 maxlen: 24
185.238.188.0/22 maxlen: 24
2a06:de01:d0::/44 maxlen: 48
2a06:de01:400::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a0e:b107:1870::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
2a10:cc40:cc46::/48 maxlen: 48
2a10:ccc0:110::/44 maxlen: 48
2a10:ccc3:ccce::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
Validation: Failed, certificate revoked on Sat 20 Jan 2024 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1e:62:8f:be:04:a2:3b:b0:66:a7:19:bc:44:1c:bf:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 18 21:03:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5252a37e4685072c0dea10ddcaf7b5b60fd238e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:cb:a6:67:74:15:c0:ce:a7:44:fc:05:0c:
47:02:fd:b9:ff:e9:1e:68:c0:85:83:a7:5f:c3:fd:
10:bf:7c:6c:31:c3:78:d1:b0:8b:4a:07:79:fa:93:
b8:b8:9e:5b:36:ef:fb:3d:da:b0:08:45:6f:ae:7f:
6c:ed:8b:95:85:33:9d:0e:c7:da:f3:5f:85:d9:ed:
8e:5d:f0:20:15:7a:e3:47:c0:c8:ec:e2:f0:1d:bf:
59:77:1d:8b:0f:96:d1:ad:8e:4d:46:67:9b:98:81:
6f:87:28:46:f7:7e:77:f8:ac:95:ef:a0:24:a0:5f:
d0:8e:95:22:d9:09:8d:a5:35:74:df:d4:05:96:fb:
07:3e:ed:1d:30:e3:a6:8c:6a:08:9a:77:e0:a5:66:
0b:c5:c7:f7:60:47:d3:d2:e6:36:75:76:49:f1:08:
00:62:23:b5:7f:b5:fd:0b:e7:f6:ef:63:57:83:76:
04:0b:df:c3:6b:dc:2e:0e:e1:1d:19:93:e2:13:fe:
08:ce:ed:a7:c1:93:82:ae:2e:50:bc:31:68:91:8f:
c0:00:a3:38:9f:a7:85:3d:58:f1:d6:bb:fb:17:54:
54:e3:df:fe:58:c8:cc:1c:d8:bc:5b:f1:a0:e8:72:
fb:d7:cc:18:71:7f:1f:28:c1:a7:8d:c5:64:38:a3:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:52:A3:7E:46:85:07:2C:0D:EA:10:DD:CA:F7:B5:B6:0F:D2:38:E9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UlKjfkaFBywN6hDdyve1tg_SOOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/22
185.238.188.0/22
IPv6:
2a06:de01:d0::/44
2a06:de01:400::/48
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:cc40:cc46::/48
2a10:ccc0:110::/44
2a10:ccc3:ccce::/48
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
95:75:c8:3e:62:26:11:6b:98:f0:c6:47:60:15:c7:ed:e8:ca:
40:9e:89:e2:75:47:e6:a6:92:fc:53:e8:07:20:67:d6:7a:53:
0d:6a:e3:f1:da:2f:8c:19:5c:15:cb:f6:ce:25:b5:f0:48:d5:
02:3b:98:54:c2:46:d9:83:ea:3f:74:6c:3f:ee:b9:8c:1d:80:
aa:f1:6f:7d:63:b4:3c:95:fe:32:37:97:3b:09:f9:b7:d1:2c:
d6:da:2b:b4:27:4c:83:fb:84:f3:2a:35:22:9a:3f:8d:5e:91:
cd:37:51:20:7f:11:11:8a:c1:46:58:b9:84:53:a6:5f:99:93:
64:88:80:4b:8a:56:7b:ea:b7:71:a9:31:4a:cc:9e:38:29:b4:
53:26:7e:f5:3c:98:9c:f6:c0:54:4f:cc:38:b3:3a:a8:61:e1:
27:07:ee:6a:3a:39:96:1b:dc:9c:e2:b9:b5:12:3c:cd:60:ac:
d3:5a:72:01:81:a9:41:0c:16:68:58:5d:40:7a:d7:49:04:b5:
20:a4:6e:4c:bf:7e:9b:ee:bc:e7:54:ad:36:8c:8e:7b:f0:20:
52:c3:21:de:b4:74:5f:bb:72:0e:9c:73:24:8f:fa:4e:b8:b4:
22:d6:fa:0c:21:e8:16:47:82:68:37:ec:22:5a:22:46:38:19:
77:31:2c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 20 05:34:07 2024 by rpki-client on console-ams.rpki-client.org