Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Xzy-dS9fm5upJL7h0Z9VknitFkA.roa
File: Xzy-dS9fm5upJL7h0Z9VknitFkA.roa (raw, json)
Hash identifier: ueQaoGYDDhG6GCYkRTtH0kkqwsctDQhbyaOEoANV4k4=
Subject key identifier: 5F:3C:BE:75:2F:5F:9B:9B:A9:24:BE:E1:D1:9F:55:92:78:AD:16:40
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018DC99C4EEE251F7F5BAFBE6EA5B84BC87B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Xzy-dS9fm5upJL7h0Z9VknitFkA.roa
Signing time: Wed 21 Feb 2024 03:01:20 +0000
ROA not before: Wed 21 Feb 2024 03:01:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.148.116.0/22 maxlen: 24
185.238.188.0/22 maxlen: 24
2a06:de01:d0::/44 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a0e:b107:1870::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
2a10:ccc3:ccc6::/48 maxlen: 48
2a10:ccc3:ccca::/48 maxlen: 48
2a10:ccc3:ccce::/47 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 Feb 2024 13:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c9:9c:4e:ee:25:1f:7f:5b:af:be:6e:a5:b8:4b:c8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 21 03:01:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f3cbe752f5f9b9ba924bee1d19f559278ad1640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:84:4f:e8:43:1b:82:69:44:0b:37:20:ed:1c:
fb:5d:64:6c:78:ee:22:1e:76:cd:ee:73:7c:a3:21:
17:02:c4:91:06:2b:da:fe:ae:63:88:b7:66:e5:97:
1c:f3:03:b7:da:73:df:8f:8d:5d:36:1a:32:99:43:
0b:38:f3:a7:75:3b:d8:cb:89:2c:bb:67:93:a3:66:
71:7e:3d:36:53:b8:cb:76:a4:9f:e4:2e:e1:fb:60:
f4:6f:ad:75:1c:9f:7e:5a:66:da:a4:a3:8c:47:be:
22:a5:dc:b3:d1:71:5c:d9:da:ef:7b:50:b8:4c:3e:
65:cf:89:e7:46:02:a9:fa:1b:78:90:90:64:09:67:
21:e4:f8:12:45:68:38:ba:82:a9:60:f7:c1:d1:0b:
2f:eb:60:14:b4:f5:0c:ba:f9:30:16:b6:90:9c:79:
23:98:de:5b:66:7f:42:e0:04:a8:46:40:29:9e:8b:
08:1a:98:42:5f:59:19:cf:76:d3:8e:84:ff:63:38:
da:16:53:e4:ba:64:8a:d3:c8:48:5d:04:9e:b5:98:
be:7f:93:b0:93:c8:57:b8:6c:f8:00:26:cb:3a:60:
06:84:6d:bb:65:72:9a:23:1e:6f:78:ad:38:f6:e9:
a8:c3:b5:4a:66:90:65:37:59:46:6c:8b:bd:23:a3:
5b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3C:BE:75:2F:5F:9B:9B:A9:24:BE:E1:D1:9F:55:92:78:AD:16:40
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Xzy-dS9fm5upJL7h0Z9VknitFkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/22
185.238.188.0/22
IPv6:
2a06:de01:d0::/44
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:ccc3:ccc6::/48
2a10:ccc3:ccca::/48
2a10:ccc3:ccce::/47
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
2c:f2:8e:1f:5a:e5:a7:4a:94:8b:b9:ac:34:28:1b:48:68:a4:
5b:83:1a:8b:9f:75:ce:93:5f:4d:f5:55:3c:60:b1:ae:91:df:
cb:e8:12:f1:7d:2b:9b:f2:69:d5:01:77:67:84:16:19:26:dd:
be:d6:d0:94:fc:11:1b:ba:26:2f:e2:e2:04:b7:ac:f2:69:6c:
ee:c8:c1:09:d7:f6:56:c3:8e:d2:7e:fb:8f:51:0e:20:75:ad:
85:ce:7b:c9:e3:cd:75:ec:2e:99:a8:87:3b:af:5a:b8:ef:00:
22:0e:c9:8b:40:c3:07:ea:d2:19:77:e5:a6:c2:3a:01:e7:9b:
8c:4d:3d:63:ec:45:10:92:6f:03:81:35:65:1a:26:21:97:09:
e4:d7:3d:10:cc:44:97:d0:45:d4:6c:bf:45:3f:dc:b1:50:68:
65:86:1c:03:90:d6:e5:d2:46:84:4e:b9:b2:5e:a2:b7:20:7f:
26:29:9b:60:8a:e8:81:5d:d3:1d:63:6e:fc:4b:3d:e2:49:08:
b0:bc:e1:00:43:b4:20:47:5a:34:b0:47:ac:b4:1e:61:12:09:
2a:cf:7a:d6:98:76:d2:36:76:4d:a1:7f:47:6f:05:de:38:a8:
19:89:72:64:df:93:3e:50:f6:ae:2f:0c:c1:a7:67:a4:a6:0e:
4b:a9:d6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 21 16:51:05 2024 by rpki-client on console-fra.rpki-client.org