Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/2FhERVi2NsammsI04tGWkbbGRfg.roa
File: 2FhERVi2NsammsI04tGWkbbGRfg.roa (raw, json)
Hash identifier: C5duHhDbFisDcBfgDVSdCpZVs2io4zMAEM6BsAe5nJw=
Subject key identifier: D8:58:44:45:58:B6:36:C6:A6:9A:C2:34:E2:D1:96:91:B6:C6:45:F8
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0188FBB66ED4DF5B4943944A58A0EDE82AE6
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/2FhERVi2NsammsI04tGWkbbGRfg.roa
Signing time: Tue 27 Jun 2023 07:16:57 +0000
ROA not before: Tue 27 Jun 2023 07:16:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204916
IP address blocks: 84.54.36.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.243.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
194.113.105.0/24 maxlen: 24
2a10:c0c3::/32 maxlen: 32
2a10:c0c0::/29 maxlen: 29
2a11:200:7000::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a09:3b00::/29 maxlen: 29
2a11:202::/32 maxlen: 32
2a09:4e01:3000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:5000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a10:c0c1::/32 maxlen: 32
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c7:5000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 10 Jul 2023 06:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fb:b6:6e:d4:df:5b:49:43:94:4a:58:a0:ed:e8:2a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jun 27 07:16:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d858444558b636c6a69ac234e2d19691b6c645f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a6:93:47:57:26:93:3b:ec:5b:fe:ef:bb:4a:
0a:50:6b:76:3b:b0:ff:d7:b7:54:7d:6f:93:2e:50:
de:75:28:43:6d:02:a1:ca:7b:81:d6:82:1b:97:82:
c5:de:94:41:fa:15:9f:db:5a:d5:aa:bb:ab:d6:24:
3b:b8:19:6b:10:34:38:c7:4b:5f:61:78:ac:cf:a9:
f2:e9:ab:d5:e6:c9:85:3b:a6:9f:a8:e1:6f:a2:c2:
4a:82:de:c8:ef:43:da:7d:46:56:4c:12:e4:7c:02:
b5:cd:6e:13:05:8c:0e:0b:0c:52:e2:8c:76:e0:9d:
12:d8:dd:03:01:3b:7f:fd:41:dc:9b:8e:e5:a2:85:
04:16:fa:fb:b0:68:fa:c8:55:65:9e:35:f8:ef:80:
ad:61:c4:76:07:97:a3:da:9f:ff:f0:2e:cc:3c:06:
03:0a:fa:a6:f5:78:d6:a6:e1:dc:d3:17:2d:d1:c8:
50:34:58:96:fe:ba:cc:42:fa:40:cf:8d:aa:ff:d6:
b0:58:ab:18:0d:23:3a:fe:ba:93:9b:48:2f:75:23:
86:9e:bc:1e:3a:1e:46:4a:30:27:a4:ae:77:44:ea:
57:7a:5d:82:0f:51:2d:36:21:e7:3f:85:8e:03:3b:
cd:bc:d0:3a:2c:9f:2e:ff:cb:4d:aa:77:50:78:41:
ce:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:58:44:45:58:B6:36:C6:A6:9A:C2:34:E2:D1:96:91:B6:C6:45:F8
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/2FhERVi2NsammsI04tGWkbbGRfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
194.113.105.0/24
IPv6:
2a09:3b00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a0c:e8c0::/29
2a10:c0c0::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::/36
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
09:ff:29:7a:ce:be:ad:1d:d2:05:a5:fc:e1:9e:6d:96:ac:46:
45:a0:5a:55:08:08:96:b1:24:bd:ae:b2:5b:05:37:0b:11:82:
d7:18:69:90:28:b3:4e:f2:37:51:71:ff:6a:3e:d8:20:c0:5e:
ce:51:94:68:56:e6:79:e3:ce:e9:e6:b4:3d:d7:cb:20:cb:c2:
c5:de:5b:2a:d3:e6:e9:85:c5:01:da:6d:e1:81:7b:5c:38:d5:
9a:26:93:ae:b3:5f:68:d9:27:3d:bb:54:aa:b8:52:69:c1:3f:
c5:0c:a5:f6:94:f2:14:72:72:f6:34:8c:97:65:ad:c0:a3:26:
31:ee:b7:24:2d:7a:6a:f7:98:74:0f:af:8d:69:0a:7c:95:81:
43:b6:65:b0:71:0b:73:2d:79:da:a0:92:25:1b:23:4a:aa:9f:
de:55:6b:73:5b:78:5f:fc:d2:88:e6:04:aa:f3:f8:24:f8:17:
5e:8f:58:27:82:09:83:07:1d:68:63:b0:84:ec:5e:43:1e:11:
fd:e4:c5:f7:61:a7:54:23:c6:e6:98:29:11:47:07:2c:52:0e:
45:54:44:f2:6d:c2:e6:af:f3:ce:31:27:61:ab:ab:e0:e0:4c:
1d:df:a2:f6:f6:5f:1d:58:4f:ab:d9:23:52:ac:ca:71:b1:f4:
ad:57:58:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org