Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/CntJ07xyj77fkUWITLuEjwc9c8Y.roa
File: CntJ07xyj77fkUWITLuEjwc9c8Y.roa (raw, json)
Hash identifier: cXNtiScZxLST+ijx/F5tqda4V5UMIgE+WbzhQBPkP+Y=
Subject key identifier: 0A:7B:49:D3:BC:72:8F:BE:DF:91:45:88:4C:BB:84:8F:07:3D:73:C6
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 018570429CAD9A7BEE6BAABCAED0EAE3A24E
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/CntJ07xyj77fkUWITLuEjwc9c8Y.roa
Signing time: Mon 02 Jan 2023 02:14:51 +0000
ROA not before: Mon 02 Jan 2023 02:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202709
IP address blocks: 194.48.180.0/22 maxlen: 22
193.26.2.0/24 maxlen: 24
193.25.255.0/24 maxlen: 24
185.119.228.0/22 maxlen: 22
193.26.0.0/24 maxlen: 24
193.26.12.0/24 maxlen: 24
5.61.216.0/21 maxlen: 21
45.82.132.0/22 maxlen: 22
185.58.132.0/22 maxlen: 22
2a02:63e0::/32 maxlen: 32
2a0e:6b80::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:9c:ad:9a:7b:ee:6b:aa:bc:ae:d0:ea:e3:a2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Jan 2 02:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a7b49d3bc728fbedf9145884cbb848f073d73c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:15:7b:1a:e0:94:18:a7:29:86:0d:cb:6e:
50:a2:46:dd:d8:15:0d:4b:20:b8:7b:e0:6d:52:f7:
d7:05:8e:4f:7c:b3:18:25:85:d4:ee:0d:d7:c5:4d:
ee:6c:e3:08:51:8c:10:63:77:91:93:95:37:1f:63:
70:a7:04:91:62:2b:de:7c:2d:e6:8d:5c:70:2a:6d:
08:40:a0:52:32:ca:33:bf:c9:05:ab:7e:bd:c3:97:
01:a4:56:da:10:1b:50:c8:3b:f4:e3:32:b0:e2:6f:
2c:35:af:dd:c9:dd:ff:e4:ea:5a:03:e7:c1:fe:56:
58:a9:f1:34:13:5d:7a:ad:e5:02:26:d3:cd:1e:0d:
bf:df:20:35:e4:e9:80:6f:4e:e9:de:97:43:3b:06:
b9:6e:b2:e9:e1:c2:c5:f3:9d:c0:4e:9c:9c:0e:ac:
c4:bc:12:2a:c1:be:59:77:7b:b0:c5:1f:76:61:2e:
6d:c4:cd:1b:80:03:7a:6f:7f:ac:91:4a:83:e2:41:
5e:be:1c:26:08:3d:3e:70:c4:84:56:d0:e4:2e:28:
1a:88:c2:99:e4:9f:25:cd:2e:84:16:88:fe:55:13:
ce:0a:4f:ae:ce:27:3c:b5:5a:11:94:ec:fd:64:a3:
a5:74:96:f1:1b:3c:d3:55:3b:76:89:28:7d:4c:23:
67:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7B:49:D3:BC:72:8F:BE:DF:91:45:88:4C:BB:84:8F:07:3D:73:C6
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/CntJ07xyj77fkUWITLuEjwc9c8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.216.0/21
45.82.132.0/22
185.58.132.0/22
185.119.228.0/22
193.25.255.0-193.26.0.255
193.26.2.0/24
193.26.12.0/24
194.48.180.0/22
IPv6:
2a02:63e0::/32
2a0e:6b80::/29
Signature Algorithm: sha256WithRSAEncryption
17:20:3c:98:87:8f:1e:9b:a6:c8:75:8a:98:a1:9f:64:52:b3:
86:0e:da:07:8a:7a:38:ae:19:2c:df:26:3c:11:39:a2:f3:20:
3a:cc:8a:3a:f8:3e:6e:b8:50:4d:09:de:76:e6:6b:7a:23:b7:
cb:b1:03:39:2f:1d:a5:cd:15:ce:e3:63:e8:3a:dd:28:43:d5:
d7:e5:a7:67:b9:af:c9:83:ec:7b:c2:7e:aa:00:d8:3b:c2:61:
be:b7:81:95:0a:e4:3b:e4:a4:c4:5a:54:6b:3c:99:5e:3b:8b:
ea:14:30:d3:18:6e:6b:1e:e5:0d:cf:bd:c2:38:26:6c:13:2c:
22:45:06:c6:76:f5:99:51:e8:b0:bf:f0:d1:2a:00:f9:e8:ad:
82:70:aa:3f:bc:6c:69:8b:19:4f:4f:0f:53:c1:26:cc:a9:2f:
f6:46:78:05:6b:09:71:00:f5:16:2c:9d:25:9c:b5:d2:e3:c1:
e3:6e:9c:b6:a4:e9:49:c1:71:7a:59:a6:83:c6:0a:3f:a9:05:
06:e8:2e:27:69:6d:a5:f2:b1:e8:da:09:ef:a6:e3:f8:fb:df:
59:48:d6:00:3c:1e:4c:a7:ec:6f:ec:b5:76:09:a5:50:b3:84:
ee:3e:ef:3b:f5:26:22:5b:54:59:77:2f:2f:4d:32:4d:37:06:
3c:95:f4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:31 2024 by rpki-client on console-fra.rpki-client.org