Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/RHIiXiE2bCq1AzUeG27nI_vrWvY.roa
File: RHIiXiE2bCq1AzUeG27nI_vrWvY.roa (raw, json)
Hash identifier: Q69VP6aS5xUImZXovqadrMRzrKi+S3cjdFAxdybT+Xs=
Subject key identifier: 44:72:22:5E:21:36:6C:2A:B5:03:35:1E:1B:6E:E7:23:FB:EB:5A:F6
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018D5038DA611ECC0F2495B7F8BE28580D96
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/RHIiXiE2bCq1AzUeG27nI_vrWvY.roa
Signing time: Sun 28 Jan 2024 13:18:39 +0000
ROA not before: Sun 28 Jan 2024 13:18:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212552
IP address blocks: 46.249.98.0/23 maxlen: 24
46.249.100.0/22 maxlen: 24
82.115.16.0/24 maxlen: 24
82.115.17.0/24 maxlen: 24
82.115.18.0/24 maxlen: 24
82.115.19.0/24 maxlen: 24
82.115.20.0/23 maxlen: 24
82.115.24.0/22 maxlen: 24
89.251.8.0/23 maxlen: 24
103.75.196.0/22 maxlen: 24
185.215.244.0/23 maxlen: 24
193.36.84.0/23 maxlen: 24
202.133.88.0/24 maxlen: 24
202.133.89.0/24 maxlen: 24
212.90.102.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 11:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:50:38:da:61:1e:cc:0f:24:95:b7:f8:be:28:58:0d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 28 13:18:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4472225e21366c2ab503351e1b6ee723fbeb5af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:af:6d:7a:25:7e:f9:51:40:c3:a6:34:93:
d8:98:61:e6:ca:c2:1b:c0:a3:4a:01:a4:75:61:bd:
3b:58:3b:7e:40:10:ed:e1:84:c3:ec:8a:41:a5:12:
82:5b:6d:77:cb:10:d6:fa:21:0b:a1:50:bd:0e:29:
48:07:21:c7:8d:85:9b:b1:4b:f5:bd:45:8d:f2:c9:
9e:f0:95:14:56:c0:e3:6d:2b:8a:ca:53:47:52:d7:
ff:54:f8:72:7c:b7:14:ee:a2:42:dc:bb:76:11:89:
d4:33:13:8f:b9:85:1c:22:ba:4a:ce:1b:ea:2e:2f:
05:14:60:ec:13:eb:a9:83:42:0b:8c:93:5c:bc:f0:
de:44:85:4f:35:31:2f:c5:5a:a3:03:de:4a:70:45:
87:7d:34:3b:35:82:61:20:d3:75:1f:ef:cf:72:92:
94:29:bc:d6:08:09:60:e6:07:ff:e9:44:1e:1a:d2:
d0:5a:e9:59:c6:9a:ce:75:46:3c:87:d6:07:ff:2f:
a2:d4:c2:16:e1:7e:b0:cc:d9:4a:8e:be:c0:bf:f1:
1f:e2:b6:35:ed:58:14:8b:d1:4e:de:a2:fc:99:11:
64:a2:9b:5f:39:e5:90:aa:3e:18:b2:ef:2b:81:a0:
9c:92:ee:a8:10:88:2d:9d:15:78:b5:2b:57:22:be:
9d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:72:22:5E:21:36:6C:2A:B5:03:35:1E:1B:6E:E7:23:FB:EB:5A:F6
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/RHIiXiE2bCq1AzUeG27nI_vrWvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.98.0-46.249.103.255
82.115.16.0-82.115.21.255
82.115.24.0/22
89.251.8.0/23
103.75.196.0/22
185.215.244.0/23
193.36.84.0/23
202.133.88.0/23
212.90.102.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:48:11:1a:c8:04:0d:c3:33:c7:4c:79:7c:6e:cd:35:ce:a0:
d5:0b:2e:4d:d2:47:ad:6c:da:27:43:aa:48:40:c2:a7:44:ba:
58:f4:2f:99:44:b1:ae:d9:d2:b2:c5:91:e6:2b:4b:2f:c8:6e:
8e:09:b8:e2:ff:53:ed:63:54:5e:e2:58:c0:8c:5a:05:a3:a1:
c0:a5:fc:2f:79:1e:5e:54:a3:e5:d3:cd:e4:5e:2c:3d:6e:07:
f9:ee:75:9b:23:17:10:5e:22:f6:f0:a2:84:b5:21:3d:40:b2:
bd:0a:57:8a:4d:fb:b8:62:a5:f1:1a:7d:ec:91:c1:d0:c1:9c:
c7:64:19:93:b9:a5:bc:f9:4e:1c:a0:ba:2c:76:87:7c:fd:8f:
f0:09:d6:f1:7a:7e:2b:17:03:a7:a0:0e:5e:7c:14:a0:d2:f1:
a6:84:59:ee:56:59:af:ef:ec:d3:8b:fb:5e:6e:45:8c:c7:50:
f3:8f:c3:d5:37:42:10:59:2d:03:16:b5:63:68:5c:de:32:a0:
48:da:a3:f9:d9:02:63:fd:c3:bf:bf:f3:86:2d:17:91:af:c7:
d3:63:86:72:ed:e6:c9:5b:d4:ef:c0:8d:55:ac:e8:e6:f8:de:
5a:f2:a8:7d:55:dc:5d:40:05:52:1f:97:fb:f0:8f:bf:3d:a9:
b5:8b:3b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 15:32:18 2024 by rpki-client on console-fra.rpki-client.org