Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1MbxbGj37eldGZN-bOSbwaiQwUk.roa
File: 1MbxbGj37eldGZN-bOSbwaiQwUk.roa (raw, json)
Hash identifier: BYQymgKdyi0V0vm7s1X/WSVk86gaW1qOUBA+lbFcZjY=
Subject key identifier: D4:C6:F1:6C:68:F7:ED:E9:5D:19:93:7E:6C:E4:9B:C1:A8:90:C1:49
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018C672857DC61CD7393F9560B32C7EFEDDD
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1MbxbGj37eldGZN-bOSbwaiQwUk.roa
Signing time: Thu 14 Dec 2023 07:09:06 +0000
ROA not before: Thu 14 Dec 2023 07:09:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44889
IP address blocks: 212.16.64.0/19 maxlen: 24
212.16.71.0/24 maxlen: 24
212.16.78.0/23 maxlen: 23
212.16.72.0/24 maxlen: 25
212.16.80.0/24 maxlen: 24
212.16.86.0/23 maxlen: 23
212.16.89.0/24 maxlen: 24
212.16.92.0/23 maxlen: 23
212.16.94.0/24 maxlen: 24
212.80.0.0/24 maxlen: 24
212.80.0.0/19 maxlen: 24
212.80.2.0/24 maxlen: 24
212.80.6.0/23 maxlen: 23
212.80.18.0/23 maxlen: 23
212.80.20.0/23 maxlen: 23
212.80.29.0/24 maxlen: 24
46.38.141.0/24 maxlen: 24
46.38.144.0/21 maxlen: 21
46.38.144.0/23 maxlen: 23
46.38.140.0/24 maxlen: 24
46.38.150.0/24 maxlen: 24
46.38.156.0/23 maxlen: 23
46.38.158.0/24 maxlen: 24
46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
109.94.164.0/23 maxlen: 23
2a00:7d80::/29 maxlen: 64
Validation: Failed, certificate revoked on Thu 14 Dec 2023 08:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:28:57:dc:61:cd:73:93:f9:56:0b:32:c7:ef:ed:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Dec 14 07:09:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4c6f16c68f7ede95d19937e6ce49bc1a890c149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:04:c5:3c:e4:00:88:2b:92:53:c4:39:9e:
32:43:8f:3a:ee:9e:c3:28:b8:51:ce:26:73:5f:55:
42:80:14:a0:94:23:cb:a4:96:ef:3e:5d:1a:1e:ec:
e5:18:41:3f:61:49:6d:1b:e9:32:4f:63:7a:64:a7:
3b:01:af:71:bc:34:ab:14:91:f7:ab:ee:1d:4f:92:
4c:85:af:ba:ee:89:53:6c:60:4d:bf:59:95:99:10:
d0:45:7c:0a:10:d0:24:49:74:88:4e:18:df:e7:60:
d0:6a:4a:d2:40:d0:64:05:d4:bd:b3:5e:43:af:93:
96:73:69:41:49:b2:d8:17:8e:16:49:33:a6:08:1b:
0f:58:2f:57:14:52:72:bc:86:98:82:d2:99:9e:93:
07:19:a7:f6:89:8f:74:7d:58:d3:6a:52:12:57:02:
33:85:98:01:b1:af:bc:b9:fb:92:94:35:46:ce:15:
97:d0:1e:e4:f8:ec:b4:0e:d4:39:8a:07:f3:6d:cf:
20:3b:7e:76:e6:c2:5f:4c:10:f6:a5:3d:76:5e:44:
d0:f0:b9:24:ed:3d:61:58:f7:43:75:6f:8d:9e:4d:
e8:07:09:21:ff:c8:81:58:b4:a8:cb:51:55:31:10:
a7:f0:ca:08:0f:1a:db:ae:22:74:85:0f:6d:e0:27:
1f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C6:F1:6C:68:F7:ED:E9:5D:19:93:7E:6C:E4:9B:C1:A8:90:C1:49
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1MbxbGj37eldGZN-bOSbwaiQwUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.140.0/23
46.38.144.0/21
46.38.156.0-46.38.158.255
109.94.164.0/23
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
65:13:07:9d:7f:91:56:30:00:4e:e4:a5:0a:51:ca:5b:84:fb:
2c:97:07:55:af:36:05:bf:26:7b:0e:93:cb:25:be:c4:5a:4b:
cf:2e:35:d9:ec:24:9b:9b:90:9e:06:86:f3:d7:c3:64:1a:64:
3e:fb:ba:87:ca:31:e6:e0:46:eb:06:53:0b:97:89:1f:d1:e8:
ab:63:ef:15:f7:58:45:b3:ea:97:f9:20:9a:d1:c0:41:e4:57:
e7:37:b8:48:92:3c:a1:ef:18:9f:89:d6:80:7b:12:d7:e1:e2:
0a:57:63:39:ab:93:08:5d:82:2d:4c:29:13:ca:fc:1c:c9:fe:
97:2a:49:44:2e:20:40:ca:51:8c:10:fc:63:40:75:d1:dc:f1:
39:8e:c1:3d:58:ac:87:7a:cb:46:bd:35:76:56:84:5c:37:b2:
c7:7d:6b:b9:72:21:7a:22:7e:e7:05:df:1f:62:62:1f:fd:84:
93:e5:9d:12:f3:c0:9a:18:84:32:75:22:5f:ac:e4:72:3b:6d:
08:d0:d1:20:73:19:89:34:00:a6:a8:9f:71:4d:6a:ab:28:a4:
76:c9:f1:4c:87:a5:f9:a5:f4:5e:8c:9e:0a:6c:c5:52:2f:45:
85:6e:81:f4:dc:7e:97:55:1b:fe:66:db:a5:ab:5a:cf:9f:11:
03:d2:56:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:24 2024 by rpki-client on console-fra.rpki-client.org