Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/SOa6_EH2log-m1qK3pvmbJaqa5o.roa
File: SOa6_EH2log-m1qK3pvmbJaqa5o.roa (raw, json)
Hash identifier: 9E/WquAEZqM8O2ETkeB7bWHgejNweIEbKMc7kUZSV1Q=
Subject key identifier: 48:E6:BA:FC:41:F6:96:88:3E:9B:5A:8A:DE:9B:E6:6C:96:AA:6B:9A
Certificate issuer: /CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Certificate serial: 0191269EC37E7BCDCA136854425EA2EDF837
Authority key identifier: E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/SOa6_EH2log-m1qK3pvmbJaqa5o.roa
Signing time: Tue 06 Aug 2024 07:37:04 +0000
ROA not before: Tue 06 Aug 2024 07:37:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48675
IP address blocks: 45.15.148.0/24 maxlen: 24
45.15.149.0/24 maxlen: 24
45.15.150.0/24 maxlen: 24
45.15.151.0/24 maxlen: 24
185.177.104.0/24 maxlen: 24
185.177.105.0/24 maxlen: 24
185.177.106.0/24 maxlen: 24
185.177.107.0/24 maxlen: 24
195.8.50.0/23 maxlen: 23
195.8.50.0/24 maxlen: 24
195.8.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:26:9e:c3:7e:7b:cd:ca:13:68:54:42:5e:a2:ed:f8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Validity
Not Before: Aug 6 07:37:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48e6bafc41f696883e9b5a8ade9be66c96aa6b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:ef:46:61:b4:0f:c6:ea:bf:e3:09:ee:0b:
b6:c5:df:86:f4:6b:5c:9f:eb:a3:19:6c:97:7e:72:
62:ed:0f:35:74:e7:4b:f6:b9:b3:d2:04:da:f2:bd:
2d:02:0a:0b:cb:6a:3a:4a:d0:5b:0f:24:98:ca:1d:
47:c1:33:00:dd:66:7f:c4:e8:ec:66:17:ac:e0:f1:
10:18:a6:f9:6d:b8:b5:2f:67:27:f7:a4:d7:84:2e:
23:03:b5:86:00:a6:ee:9f:11:f9:75:4c:0c:24:73:
12:8c:8d:03:cb:62:49:3e:33:8d:23:4e:7d:7b:ca:
62:97:a4:bb:93:b8:b3:1c:11:4c:5e:be:fe:ae:f5:
1e:41:21:cd:11:9f:dd:0f:0b:92:9a:d0:60:ec:35:
e4:db:be:ad:46:48:9c:fc:68:aa:fd:be:0b:9a:95:
13:66:3f:6d:76:ed:f5:58:0f:ff:36:26:96:ca:56:
61:34:c3:56:1d:cd:56:8f:28:58:07:9c:1c:ee:9c:
31:cf:c2:95:c8:4d:51:5e:e2:49:53:6a:f1:ef:20:
9a:c8:10:a7:c3:d0:2c:81:f4:d6:84:db:b8:58:94:
45:77:d5:38:a6:f4:8c:50:a8:2b:bf:57:18:f5:ea:
b4:b1:71:c9:91:9d:d5:f0:44:0d:93:8a:c5:a0:a3:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E6:BA:FC:41:F6:96:88:3E:9B:5A:8A:DE:9B:E6:6C:96:AA:6B:9A
X509v3 Authority Key Identifier:
keyid:E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/SOa6_EH2log-m1qK3pvmbJaqa5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.148.0/22
185.177.104.0/22
195.8.50.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:f6:c1:55:be:9c:33:cb:fb:a6:03:63:78:3b:76:9b:4e:b1:
52:34:c6:f0:84:d6:c5:1b:c5:e2:c8:4c:10:c4:50:02:7a:35:
8e:e8:77:82:cc:90:47:79:95:be:6c:30:ac:2b:95:95:86:6f:
31:7e:1b:c2:38:3f:73:02:e8:df:02:6b:77:e2:42:93:63:c8:
66:b4:20:72:c1:0e:e0:9d:3e:9c:8b:09:a4:ba:65:71:cc:d2:
f2:76:04:69:40:f2:77:04:8d:8d:a6:fc:c0:a0:67:91:2a:c1:
bd:68:e6:1a:c3:f5:92:b5:92:2c:af:02:52:14:37:55:90:4e:
92:64:62:cf:f4:5a:f8:4d:80:65:58:3f:03:7f:81:6a:2d:f2:
81:41:96:68:a9:c3:09:28:bc:06:2a:2c:af:b8:8d:04:85:7d:
0e:df:95:fa:66:f2:2e:fc:96:68:85:ec:dc:a0:37:23:90:5b:
fb:e4:fa:e2:b6:d6:44:08:32:fc:d7:68:e8:4f:ce:02:5a:c3:
2d:32:65:e7:c1:f2:44:d5:40:37:06:9c:a4:7c:18:29:25:9f:
b9:3e:c3:77:ab:eb:d4:19:70:36:7d:ea:05:4c:d0:9d:d9:d0:
79:ff:f6:38:90:87:8b:7f:f3:0b:5c:56:93:6e:a6:40:31:de:
75:fb:89:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:06 2025 by rpki-client