Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/tP65Am7eZs-CDoGOJpGPC3DGWAQ.roa
File: tP65Am7eZs-CDoGOJpGPC3DGWAQ.roa (raw, json)
Hash identifier: uFoQxAebPO2DuU4Ba0mQ4bIo+j4HJHZiCsNQxoobVDw=
Subject key identifier: B4:FE:B9:02:6E:DE:66:CF:82:0E:81:8E:26:91:8F:0B:70:C6:58:04
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 0191E158F43EB27BCA5B359C4ACEC8B52480
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/tP65Am7eZs-CDoGOJpGPC3DGWAQ.roa
Signing time: Wed 11 Sep 2024 13:49:48 +0000
ROA not before: Wed 11 Sep 2024 13:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 46.102.105.0/24 maxlen: 24
79.139.80.0/23 maxlen: 24
86.105.241.0/24 maxlen: 24
89.32.125.0/24 maxlen: 24
89.37.58.0/24 maxlen: 24
89.40.41.0/24 maxlen: 24
89.40.164.0/23 maxlen: 24
89.47.43.0/24 maxlen: 24
91.216.138.0/24 maxlen: 24
91.229.228.0/24 maxlen: 24
92.114.110.0/24 maxlen: 24
93.114.84.0/24 maxlen: 24
93.115.36.0/24 maxlen: 24
93.119.193.0/24 maxlen: 24
93.180.208.0/22 maxlen: 24
94.176.150.0/24 maxlen: 24
94.177.6.0/23 maxlen: 24
94.177.23.0/24 maxlen: 24
176.126.198.0/23 maxlen: 24
176.126.204.0/24 maxlen: 24
188.208.108.0/24 maxlen: 24
188.208.116.0/24 maxlen: 24
188.210.254.0/24 maxlen: 24
188.211.234.0/24 maxlen: 24
188.214.81.0/24 maxlen: 24
188.215.76.0/23 maxlen: 24
193.37.136.0/24 maxlen: 24
193.105.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 11:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:58:f4:3e:b2:7b:ca:5b:35:9c:4a:ce:c8:b5:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Sep 11 13:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4feb9026ede66cf820e818e26918f0b70c65804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:a4:92:7f:d0:99:9b:69:4b:64:2c:8c:9b:
df:68:09:47:97:95:d6:f9:6a:b7:3f:c4:ef:55:61:
da:3b:cf:15:43:c7:df:43:54:a7:0d:4d:78:64:65:
25:c6:88:9f:34:a3:74:5b:61:2b:32:3b:a7:64:4c:
25:ef:d4:b7:c8:12:9d:b4:ee:c8:30:ec:2d:b6:41:
fe:d5:b5:d1:8b:ae:b2:7c:64:fe:08:cd:95:b7:13:
5c:91:cf:a5:a8:86:b2:5a:6f:77:01:66:96:19:39:
af:d9:e0:d2:20:a8:d7:bf:3b:2f:b0:6e:28:45:96:
d8:88:8d:a7:2e:2a:2d:01:3d:5e:fb:e3:37:0a:f6:
40:58:46:1f:f4:e4:a5:9b:8b:89:1c:38:9a:a1:9c:
50:11:58:e4:b4:ba:06:87:ef:8b:69:73:22:2c:f4:
47:6b:97:fb:98:ad:64:3f:98:b1:23:74:f4:c8:e0:
e5:96:03:b9:ec:9a:61:cc:c1:df:f4:80:15:0c:e9:
6e:6a:7c:f6:66:63:40:df:52:a7:02:28:25:9b:52:
8b:4a:94:54:50:08:1f:f7:6a:a5:f8:75:84:7c:96:
91:9b:07:b4:71:ce:9d:b7:e7:4e:97:ce:51:9c:e4:
d4:9d:be:59:1e:f0:e8:ed:ae:4e:55:83:00:d6:5f:
43:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FE:B9:02:6E:DE:66:CF:82:0E:81:8E:26:91:8F:0B:70:C6:58:04
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/tP65Am7eZs-CDoGOJpGPC3DGWAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.105.0/24
79.139.80.0/23
86.105.241.0/24
89.32.125.0/24
89.37.58.0/24
89.40.41.0/24
89.40.164.0/23
89.47.43.0/24
91.216.138.0/24
91.229.228.0/24
92.114.110.0/24
93.114.84.0/24
93.115.36.0/24
93.119.193.0/24
93.180.208.0/22
94.176.150.0/24
94.177.6.0/23
94.177.23.0/24
176.126.198.0/23
176.126.204.0/24
188.208.108.0/24
188.208.116.0/24
188.210.254.0/24
188.211.234.0/24
188.214.81.0/24
188.215.76.0/23
193.37.136.0/24
193.105.176.0/24
Signature Algorithm: sha256WithRSAEncryption
73:dc:0c:19:57:b2:7f:54:1f:df:84:37:25:0a:c4:7b:c5:d4:
c1:eb:e9:bc:f1:ad:9a:0c:fd:be:34:aa:f7:b2:6f:27:ec:ce:
dc:d0:10:64:58:75:8f:a2:12:08:15:01:29:a6:6d:79:ea:12:
f5:e5:5d:1a:0a:bf:83:2f:82:c2:9c:04:a5:17:73:d0:f3:e8:
38:5c:12:a6:d5:fc:fd:b3:5b:02:9b:a6:76:7d:e5:42:fa:80:
4c:39:28:a3:0d:00:48:55:80:74:e1:7d:8d:53:88:90:0e:4f:
fd:4a:44:70:44:84:e1:3e:6d:7d:90:87:46:b7:e7:2f:93:7a:
e1:57:bb:ea:64:5f:bb:82:c9:95:fe:31:ea:5c:9e:14:4e:4e:
14:00:ab:5d:7a:05:55:04:2a:6e:22:1e:10:9d:04:c4:0e:86:
b0:5d:af:1b:f1:a8:5a:bf:a1:11:b1:c2:8a:35:ed:8b:69:05:
87:99:7b:b8:a9:e4:c8:28:45:a8:98:5b:5b:14:cd:16:b9:4f:
a4:e5:44:f5:c0:72:72:33:be:82:c5:86:6d:68:d7:42:b7:20:
d1:a4:09:df:2c:52:e3:7c:51:c7:e4:9f:eb:6a:8c:14:da:f0:
c5:b7:3e:fa:5a:e8:36:92:88:d0:5f:7f:60:5f:aa:5b:78:ce:
cc:bd:50:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 14:32:25 2024 by rpki-client on console-fra.rpki-client.org