Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/P5tBgE_habA8ge5zEVMCodAuVw8.roa
File: P5tBgE_habA8ge5zEVMCodAuVw8.roa (raw, json)
Hash identifier: Yh2xPp16B/Ncc/roHp5ImUToekM/GAiksLEpUu9q4h8=
Subject key identifier: 3F:9B:41:80:4F:E1:69:B0:3C:81:EE:73:11:53:02:A1:D0:2E:57:0F
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 0187EC5598BE084262F8119BAC3638712C87
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/P5tBgE_habA8ge5zEVMCodAuVw8.roa
Signing time: Fri 05 May 2023 14:34:05 +0000
ROA not before: Fri 05 May 2023 14:34:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44076
IP address blocks: 45.141.72.0/22 maxlen: 24
192.214.160.0/19 maxlen: 24
45.129.40.0/21 maxlen: 24
45.135.244.0/22 maxlen: 24
45.137.172.0/22 maxlen: 24
193.148.160.0/19 maxlen: 24
45.142.4.0/22 maxlen: 24
193.19.129.0/24 maxlen: 24
193.19.130.0/24 maxlen: 24
188.34.64.0/18 maxlen: 24
213.17.0.0/18 maxlen: 24
2a05:b540::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 26 Dec 2023 16:10:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ec:55:98:be:08:42:62:f8:11:9b:ac:36:38:71:2c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: May 5 14:34:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f9b41804fe169b03c81ee73115302a1d02e570f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4e:19:27:c9:04:89:a5:53:da:b6:bf:6d:9e:
49:a8:4c:3b:57:2b:af:5e:0e:c7:2e:9b:70:b1:94:
11:2b:d3:c6:2f:a4:cd:2f:c5:1b:1f:a0:57:ed:e7:
d2:1d:a9:2b:6f:f0:e4:a0:0a:56:94:bd:2e:be:e9:
be:dd:81:87:5c:a3:c0:0f:fb:e0:71:aa:03:0b:65:
d4:d6:b3:6a:3e:35:70:c1:9c:22:d9:a4:e8:46:90:
c1:f9:fc:c6:a0:c4:a1:62:be:26:02:cb:a7:7e:42:
0d:5b:40:f3:fc:9a:0c:64:b3:75:ca:e7:26:eb:10:
d5:f7:ef:72:6e:41:ad:bd:df:5c:5d:64:d1:3a:ca:
e9:af:f5:41:25:ab:99:49:f6:e4:a9:80:c7:e6:48:
9f:81:6d:0c:32:fa:9a:69:fa:f9:04:d1:01:11:53:
f9:a4:40:5d:8f:94:c1:ab:6b:3b:2b:60:9c:8f:64:
65:ac:d2:0b:a0:f9:a1:08:73:dc:7c:ad:3f:f2:1a:
7c:ea:6c:66:4c:de:47:e0:7a:23:ff:aa:c2:5f:c8:
11:59:54:91:a2:ef:35:65:c6:65:86:b3:b2:df:0f:
04:3b:6a:58:ff:99:b0:ae:d5:9d:1e:86:7f:c6:3c:
17:13:98:9f:31:90:9f:41:f6:cd:8b:a2:e7:5d:7c:
8d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9B:41:80:4F:E1:69:B0:3C:81:EE:73:11:53:02:A1:D0:2E:57:0F
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/P5tBgE_habA8ge5zEVMCodAuVw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.40.0/21
45.135.244.0/22
45.137.172.0/22
45.141.72.0/22
45.142.4.0/22
188.34.64.0/18
192.214.160.0/19
193.19.129.0-193.19.130.255
193.148.160.0/19
213.17.0.0/18
IPv6:
2a05:b540::/29
Signature Algorithm: sha256WithRSAEncryption
5f:02:20:a5:89:fc:b5:8a:1f:a4:79:ee:8f:ea:3a:a1:97:96:
87:b4:15:d7:f1:b8:a1:00:3f:ca:22:3c:85:2e:1e:ea:d5:71:
ca:dc:c0:7f:ee:76:f8:31:ac:40:01:8a:18:f0:59:c7:d1:1a:
11:67:f7:0f:f9:1c:9c:82:dc:49:07:3b:fe:7b:65:b8:69:8a:
ec:47:dd:36:e6:d3:60:b9:08:fe:c2:10:c4:1f:11:65:cb:0e:
18:85:0d:6a:90:e3:6a:ca:84:76:e7:cd:86:f8:ef:db:56:83:
7e:1e:fd:cd:b9:96:45:d4:14:05:81:63:89:5d:bd:21:c3:34:
a5:5d:c6:6d:a1:5f:74:b4:b3:0e:fa:95:c2:e8:39:f5:37:02:
1a:05:7f:5b:04:8e:27:17:c1:79:ab:a7:71:82:cf:ac:8f:bc:
67:b3:44:fa:45:99:e5:af:d0:b9:c4:b7:32:c5:cf:ab:ac:4c:
49:ca:b8:d7:dc:b4:41:5c:e6:73:25:0c:89:13:cf:2d:b3:b5:
ac:f5:35:92:2b:a4:18:05:35:29:f4:2a:aa:dd:6c:a8:e8:e9:
53:c0:33:53:90:af:6a:c5:40:4e:dd:32:8b:f6:43:03:df:49:
13:68:b6:52:de:de:74:0a:40:0a:4e:c5:50:26:ed:86:58:77:
32:9c:74:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:25 2024 by rpki-client on console-ams.rpki-client.org