Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/ijttlID3ytx_bKXNPJ1BF_XEEU4.roa
File: ijttlID3ytx_bKXNPJ1BF_XEEU4.roa (raw, json)
Hash identifier: wE5uqfMLpbtEV01E95GJL+6EbeI52c3D38vjd6kVibo=
Subject key identifier: 8A:3B:6D:94:80:F7:CA:DC:7F:6C:A5:CD:3C:9D:41:17:F5:C4:11:4E
Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial: 018CC6B7ADAB46D49CFD11F7EE2A460428D8
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/ijttlID3ytx_bKXNPJ1BF_XEEU4.roa
Signing time: Mon 01 Jan 2024 20:29:35 +0000
ROA not before: Mon 01 Jan 2024 20:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208555
IP address blocks: 45.129.36.0/22 maxlen: 22
45.129.36.0/24 maxlen: 24
45.129.37.0/24 maxlen: 24
45.129.38.0/24 maxlen: 24
45.129.39.0/24 maxlen: 24
45.129.38.0/23 maxlen: 23
185.126.202.0/24 maxlen: 24
185.53.143.0/24 maxlen: 24
185.53.141.0/24 maxlen: 24
185.53.142.0/23 maxlen: 23
185.53.142.0/24 maxlen: 24
185.53.140.0/24 maxlen: 24
185.53.140.0/23 maxlen: 23
185.53.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 23:25:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ad:ab:46:d4:9c:fd:11:f7:ee:2a:46:04:28:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Validity
Not Before: Jan 1 20:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a3b6d9480f7cadc7f6ca5cd3c9d4117f5c4114e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2c:0b:2c:f3:b5:29:0f:80:c1:96:54:42:0a:
8f:76:e9:06:15:28:45:f4:19:94:98:85:da:34:74:
fb:f8:c1:cc:d9:18:ab:13:59:0d:e3:30:a1:c1:52:
fa:26:1e:3d:e2:e8:0a:8f:32:98:85:b3:6d:c6:04:
e9:3f:4b:65:07:32:80:5a:c5:1c:41:93:79:ac:7f:
45:2c:8c:4c:87:c4:e6:0d:f6:03:ba:e4:b8:e7:cf:
b6:86:99:b7:30:56:42:51:1a:bd:eb:ce:a1:6f:0c:
64:e9:55:85:bb:a2:93:ad:5a:0d:d6:e8:cb:10:4b:
c7:67:e1:67:87:36:c7:ff:fd:f3:07:e9:9b:bc:b7:
c4:5b:0b:9e:08:a2:a5:2d:fa:99:d3:85:02:8d:fd:
84:cb:1f:bd:c8:cd:ef:53:a8:49:e6:21:6c:0d:0f:
6e:81:13:cd:eb:23:11:b0:10:12:5b:fd:0f:09:b6:
7d:35:f5:79:db:03:af:60:81:e0:3f:be:99:c6:cb:
1d:0d:8c:a7:eb:43:59:ec:12:bc:2a:20:86:73:5c:
f7:b1:9c:08:25:f4:71:ee:7a:13:cb:25:1a:e4:55:
93:5a:a9:af:2c:55:79:d7:4d:41:84:93:7e:f4:75:
eb:31:f7:a7:a4:b2:c9:64:21:98:76:6e:7b:f4:cc:
3e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3B:6D:94:80:F7:CA:DC:7F:6C:A5:CD:3C:9D:41:17:F5:C4:11:4E
X509v3 Authority Key Identifier:
keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/ijttlID3ytx_bKXNPJ1BF_XEEU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.36.0/22
185.53.140.0/22
185.126.202.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:3d:a8:62:93:b0:ef:d4:35:08:9d:0b:2d:ea:49:52:90:cd:
1e:b3:8b:11:99:f9:48:46:f4:34:99:10:fb:2b:1a:46:4f:19:
b3:36:90:d1:fe:83:c5:54:9d:4e:23:b7:6b:84:00:80:a4:cd:
87:5b:10:68:32:0b:98:a3:25:0f:27:51:07:63:fc:ec:8d:3d:
0e:b2:77:fa:e3:d3:03:87:83:c7:5b:7e:49:b0:77:9c:c2:4a:
93:7c:c9:eb:d6:89:ca:f4:0a:e3:d5:5b:9f:19:aa:79:ab:2a:
5c:60:1f:a3:c2:e7:fb:a2:57:0a:64:cb:f4:84:ac:c8:62:bd:
3e:71:5c:64:2d:b6:3b:2b:f9:5d:be:5e:4e:73:9b:3a:94:01:
65:2f:97:8c:1e:ba:1a:a5:27:2e:4a:34:4a:3e:10:77:8c:44:
ec:9b:4a:7a:c8:c4:fb:bd:26:c6:7b:5b:9a:4b:76:2e:1a:e3:
41:b3:e8:6d:cb:e4:08:51:a1:1c:da:0e:63:d5:b5:d8:5e:6a:
25:b4:7a:d6:c1:17:92:86:8e:5d:72:69:f9:b6:d4:f0:e8:c1:
79:1f:4a:24:15:1b:b1:ea:28:bc:0f:88:aa:90:88:29:62:0f:
b3:a3:f1:84:1a:e6:f3:95:be:b5:64:be:a2:cf:c9:88:e9:b6:
5e:45:ad:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:50:00 2024 by rpki-client on console-ams.rpki-client.org