Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/_g4FUbVws3qHONbqdF_CySGcVJ8.roa
File: _g4FUbVws3qHONbqdF_CySGcVJ8.roa (raw, json)
Hash identifier: 6mX50ZF2RmU6W1Obucp2b0LOF6TRYXM/CZWAjHnrXms=
Subject key identifier: FE:0E:05:51:B5:70:B3:7A:87:38:D6:EA:74:5F:C2:C9:21:9C:54:9F
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018625F356562ED91F9D6A1028FD4DDD84F8
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/_g4FUbVws3qHONbqdF_CySGcVJ8.roa
Signing time: Mon 06 Feb 2023 08:59:09 +0000
ROA not before: Mon 06 Feb 2023 08:59:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209408
IP address blocks: 45.66.224.0/22 maxlen: 22
81.29.146.0/24 maxlen: 24
81.29.149.0/24 maxlen: 24
81.29.156.0/24 maxlen: 24
2a09:6c40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 13 Feb 2023 07:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:25:f3:56:56:2e:d9:1f:9d:6a:10:28:fd:4d:dd:84:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Feb 6 08:59:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe0e0551b570b37a8738d6ea745fc2c9219c549f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:40:18:06:81:c7:34:07:f3:1e:bd:3e:33:af:
f2:f4:4d:67:f1:11:83:3a:eb:b2:05:8b:73:ad:75:
cb:b3:79:a5:04:cb:ba:94:ef:f6:ee:b8:6d:69:14:
3b:a4:71:81:88:8e:67:05:d7:52:95:5c:43:37:80:
4b:0d:12:6f:3e:c0:e5:0d:45:54:81:cb:07:ce:d3:
15:af:1f:65:1e:12:31:0d:24:74:56:c2:1e:3a:17:
b7:b3:0a:d8:d7:a8:c3:ad:07:f6:2a:22:42:d5:a8:
fa:19:ab:48:d4:62:5c:1f:19:48:03:89:5d:99:2f:
d5:a9:9d:1f:46:1e:4a:78:5e:39:b0:05:7a:36:f9:
54:a8:ea:58:16:92:06:24:75:c6:c4:6c:48:a8:6c:
c7:33:4f:77:49:2d:d0:e9:c8:5f:01:6d:83:02:a5:
13:9c:d1:b9:86:ae:6b:ef:71:c8:03:9c:bc:1c:d2:
c8:55:a7:ea:b6:dc:86:76:08:33:39:22:68:b3:bf:
48:c0:9d:00:02:22:69:8c:46:16:b5:9d:d4:ce:1e:
75:5c:fc:19:e5:09:a3:aa:95:6e:67:18:96:33:cb:
7f:23:38:55:ee:85:36:ee:da:3c:8c:97:ee:b2:0a:
69:97:e6:08:5f:5e:55:ff:f9:11:4f:1b:d3:37:db:
7a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0E:05:51:B5:70:B3:7A:87:38:D6:EA:74:5F:C2:C9:21:9C:54:9F
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/_g4FUbVws3qHONbqdF_CySGcVJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.224.0/22
81.29.146.0/24
81.29.149.0/24
81.29.156.0/24
IPv6:
2a09:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
30:79:50:9c:e2:e3:f7:22:14:d6:80:b5:7c:47:29:bf:42:4e:
d0:fa:55:9d:4f:9c:64:51:55:01:e1:89:02:96:3a:dd:86:42:
6d:7a:dd:2c:24:67:f8:89:fb:7a:0c:d4:13:1a:fa:d1:e7:42:
fc:bd:33:ea:55:e7:b4:e5:8b:c6:59:11:2b:f0:6d:d8:b0:8a:
61:19:aa:2c:ab:f9:ef:03:dc:71:54:d6:6c:18:5b:3f:0d:91:
e4:a1:00:36:5b:ea:b6:8b:08:d1:86:b1:56:ca:65:34:1f:89:
10:53:1c:fd:8b:1f:1d:29:eb:4f:c2:23:b5:0a:9a:c9:88:93:
c4:2a:24:a4:15:3e:ba:fd:60:c5:3c:25:5d:27:f2:a1:d4:64:
a7:33:a1:3f:2a:74:92:90:25:19:72:83:97:22:b5:c4:65:54:
1c:b8:23:80:b4:49:52:8a:00:85:d7:29:dc:11:2f:82:fe:9d:
9c:a2:96:66:03:5e:cb:e1:3c:14:06:40:31:e3:ca:bc:c5:c5:
de:cf:35:b2:5d:ad:75:96:95:0f:5f:c3:31:04:e8:98:2d:60:
72:1e:fe:8f:4f:3b:64:fc:ca:14:b5:2f:7e:9d:c0:bc:89:69:
eb:5a:7a:54:95:10:49:79:2f:78:a7:bf:97:83:f9:7c:a6:0d:
ab:83:54:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:40 2024 by rpki-client on console-fra.rpki-client.org