Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/8sAyQdIJiWZM3B2IhXWQQlfwKvA.roa
File: 8sAyQdIJiWZM3B2IhXWQQlfwKvA.roa (raw, json)
Hash identifier: y+88ltXd6wd+54rnvjr4qLiFNhKsjw5iejeoCcZj6cQ=
Subject key identifier: F2:C0:32:41:D2:09:89:66:4C:DC:1D:88:85:75:90:42:57:F0:2A:F0
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 018CC8010935A0C66CC146781C845A2070F8
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/8sAyQdIJiWZM3B2IhXWQQlfwKvA.roa
Signing time: Tue 02 Jan 2024 02:29:20 +0000
ROA not before: Tue 02 Jan 2024 02:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211768
IP address blocks: 45.83.160.0/22 maxlen: 24
185.86.188.0/22 maxlen: 24
193.148.188.0/24 maxlen: 24
185.124.192.0/22 maxlen: 24
193.19.128.0/22 maxlen: 24
2a06:b500::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 19 Dec 2024 14:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:09:35:a0:c6:6c:c1:46:78:1c:84:5a:20:70:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: Jan 2 02:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2c03241d20989664cdc1d888575904257f02af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dc:5c:73:73:27:ed:15:66:31:1a:74:88:98:
74:00:60:18:a0:d4:8e:b1:c9:8e:38:0c:e8:a9:0a:
1b:8c:32:8f:b7:c4:a2:4e:f0:f6:af:c6:76:1e:28:
2f:82:9d:d5:be:05:3d:43:56:33:18:ec:11:4a:3b:
ac:16:aa:9b:2c:34:65:d4:f3:c2:fb:51:34:56:30:
8e:96:bf:29:2d:af:4b:c1:dd:61:31:28:fa:4c:a7:
d3:bf:6a:ee:38:7b:f0:c8:7b:68:c9:a5:f5:e9:65:
e1:d6:7a:06:66:41:a8:8f:e1:5a:8f:0f:a5:78:4a:
b6:f3:df:2f:5f:56:57:a5:cc:d4:b9:c6:6c:d8:a2:
8d:ac:fb:bb:df:14:43:02:7a:81:ae:b2:43:c7:0f:
d3:24:68:36:80:a2:e9:06:c3:68:08:6c:88:11:a2:
76:1d:35:a3:9d:9c:65:fb:fb:5b:0d:e4:fd:5f:92:
d1:bc:f2:c3:b5:1d:3c:ed:b0:55:90:51:9a:b3:71:
22:c4:bf:00:eb:d9:ff:7d:a3:d2:02:dc:6d:a8:60:
28:bb:4a:73:26:4b:76:d0:81:66:d7:95:b3:a9:84:
1c:6c:48:9b:26:1f:92:90:48:48:79:eb:95:21:92:
73:d9:5c:b6:b9:45:80:af:2b:0d:43:06:84:a2:2e:
4b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C0:32:41:D2:09:89:66:4C:DC:1D:88:85:75:90:42:57:F0:2A:F0
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/8sAyQdIJiWZM3B2IhXWQQlfwKvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.160.0/22
185.86.188.0/22
185.124.192.0/22
193.19.128.0/22
193.148.188.0/24
IPv6:
2a06:b500::/29
Signature Algorithm: sha256WithRSAEncryption
9e:bd:f8:0d:cd:82:6e:ff:52:2f:81:8a:c2:f0:fe:66:e0:6d:
66:f4:af:6a:71:93:8b:27:24:69:c1:4d:9b:5b:37:95:d4:2d:
cd:2a:f0:da:a5:b0:eb:1e:6a:b9:72:26:1c:44:df:12:42:9f:
44:ae:0f:8b:71:bb:f6:2a:f1:a8:fe:4f:8e:5a:a5:56:ea:25:
fd:1b:e8:07:90:20:9b:c2:c7:f0:42:bd:eb:7a:1c:5f:35:1b:
69:8d:ad:90:04:cd:14:69:2f:24:c1:20:7f:9e:ca:e4:ba:4d:
b4:5f:76:b0:bc:c4:0f:c9:83:4b:65:2d:dc:5f:0a:47:86:83:
4c:6a:ed:63:bd:2e:1a:a4:10:69:9f:5c:f1:f0:6b:b3:c9:c0:
4b:41:e6:25:e2:72:2f:1e:3e:ec:26:ad:c1:88:b8:3e:c7:35:
b9:9f:40:21:9e:cb:45:fd:87:f8:35:62:75:3f:74:26:10:2b:
03:27:50:4e:bc:2e:7c:a8:24:d7:9b:c0:eb:71:b8:65:fa:f7:
1c:56:69:11:45:e0:b2:33:17:e8:80:e6:e4:1c:c1:43:59:af:
0f:a3:63:fe:5c:ae:50:de:45:c1:fe:0e:56:40:b2:02:b3:97:
b3:76:a7:7e:74:fd:36:6f:fb:e7:bd:6a:5e:f8:d6:14:0c:81:
ce:95:fc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:57 2025 by rpki-client