Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/4rcjztlL2HkOU-W5mD2WuGcO9y8.roa
File: 4rcjztlL2HkOU-W5mD2WuGcO9y8.roa (raw, json)
Hash identifier: dbaZEmpbA4uoHj9KU1lpE9Ie+PiY5zi3oQAEC2vYoqQ=
Subject key identifier: E2:B7:23:CE:D9:4B:D8:79:0E:53:E5:B9:98:3D:96:B8:67:0E:F7:2F
Certificate issuer: /CN=bbca3f25d54620b50ef8520657634d3b096bac57
Certificate serial: 018CC26D77BB5BF5F07B755687FFF3186ABA
Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/4rcjztlL2HkOU-W5mD2WuGcO9y8.roa
Signing time: Mon 01 Jan 2024 00:30:03 +0000
ROA not before: Mon 01 Jan 2024 00:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58212
IP address blocks: 45.145.40.0/22 maxlen: 24
185.219.84.0/24 maxlen: 24
194.48.217.0/24 maxlen: 24
185.254.96.0/22 maxlen: 22
185.94.29.0/24 maxlen: 24
193.41.237.0/24 maxlen: 24
94.143.231.0/24 maxlen: 24
193.42.11.0/24 maxlen: 24
193.42.12.0/24 maxlen: 24
45.157.232.0/22 maxlen: 22
176.96.136.0/22 maxlen: 24
2.59.132.0/22 maxlen: 24
193.41.226.0/24 maxlen: 24
62.192.153.0/24 maxlen: 24
2a0d:5940::/29 maxlen: 29
2a0c:4ac0:1100::/40 maxlen: 40
2a0c:4ac0:1200::/40 maxlen: 40
Validation: Failed, certificate revoked on Sat 24 Feb 2024 23:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:77:bb:5b:f5:f0:7b:75:56:87:ff:f3:18:6a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57
Validity
Not Before: Jan 1 00:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2b723ced94bd8790e53e5b9983d96b8670ef72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9c:79:3c:18:ae:6a:80:7b:cc:c2:c0:9c:eb:
00:19:f6:ba:90:2b:ee:dd:9a:8b:54:ba:cc:c0:19:
d3:b8:87:21:0b:31:2a:8e:19:a8:db:39:d0:f8:bc:
f7:e5:27:ef:9e:35:28:a3:aa:05:ef:48:fe:0d:3a:
1b:64:6d:81:29:5c:14:4f:7d:f6:ac:90:48:c2:7b:
c6:f3:e3:77:67:3b:85:dc:b3:f6:a7:44:21:c3:65:
f7:00:02:2e:aa:98:0d:68:44:d9:60:9e:3d:0f:05:
69:d3:28:48:53:73:99:7d:2b:36:e3:c7:be:3e:b2:
4e:7f:b3:f1:f4:49:c1:09:4d:e6:6d:74:06:16:aa:
3e:90:63:5b:ac:16:65:5f:5f:4e:f7:1e:20:d8:df:
39:e1:de:ca:e4:42:d4:e6:87:6f:d3:c8:08:0c:d0:
65:64:c4:26:fa:1e:28:1e:31:4b:b3:04:af:20:97:
f1:41:ec:af:c4:d4:7c:e7:dc:75:a9:46:30:1b:37:
d3:be:6e:f6:cf:ba:0e:37:b6:e6:93:9a:5a:32:80:
ad:86:ba:67:41:b3:23:55:81:0a:49:6f:fd:b4:dd:
91:55:b5:4c:4d:6d:3e:25:6c:ea:a1:13:39:cf:c5:
1c:7f:33:59:c9:77:42:00:08:bc:c7:2f:12:f3:79:
76:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B7:23:CE:D9:4B:D8:79:0E:53:E5:B9:98:3D:96:B8:67:0E:F7:2F
X509v3 Authority Key Identifier:
keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/4rcjztlL2HkOU-W5mD2WuGcO9y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.132.0/22
45.145.40.0/22
45.157.232.0/22
62.192.153.0/24
94.143.231.0/24
176.96.136.0/22
185.94.29.0/24
185.219.84.0/24
185.254.96.0/22
193.41.226.0/24
193.41.237.0/24
193.42.11.0-193.42.12.255
194.48.217.0/24
IPv6:
2a0c:4ac0:1100::-2a0c:4ac0:12ff:ffff:ffff:ffff:ffff:ffff
2a0d:5940::/29
Signature Algorithm: sha256WithRSAEncryption
c3:a5:5c:be:44:24:6c:0a:cd:fc:86:1c:16:98:77:b9:24:0c:
41:70:27:9e:fe:3c:76:51:3a:1e:4e:b5:c8:38:25:21:87:0b:
fd:06:09:2a:1a:2f:3f:b5:f7:9b:7a:d7:24:40:b6:96:0b:00:
9b:92:3e:9a:1d:94:4e:fb:e3:a8:3a:98:9f:3c:14:e1:39:d9:
f9:bc:dc:b8:d1:c7:04:a2:bf:4a:66:4c:1d:32:c6:86:fc:ff:
24:35:25:ce:31:02:b3:a0:2a:f3:6e:57:8d:1f:74:c9:69:1e:
39:a7:31:83:96:63:63:52:d3:14:b0:54:73:f6:cb:e8:a3:f4:
a1:75:ee:72:1e:bb:24:cf:d8:b3:c4:09:9c:7f:30:76:23:cc:
82:3e:c6:07:91:2b:18:27:d5:a5:5c:08:17:24:89:22:4c:e4:
1c:4b:8b:4a:ff:08:bb:45:1c:b7:16:3a:ab:c1:12:b5:22:30:
90:39:8a:af:c6:ee:e1:51:63:ee:a3:85:7a:bc:01:ab:10:9b:
d0:34:d8:ef:ab:e4:a4:ac:8f:f7:37:c9:99:65:95:03:40:3b:
83:c5:29:b5:cd:55:fa:d9:55:1e:83:6e:7b:f4:26:f0:d2:4d:
f6:13:7f:9e:73:33:df:99:b1:2a:4c:36:59:d8:98:42:dd:53:
f0:68:fb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:43 2024 by rpki-client on console-ams.rpki-client.org