Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/RVOAQzGrD274fmV3fBJsWB32gS4.roa
File: RVOAQzGrD274fmV3fBJsWB32gS4.roa (raw, json)
Hash identifier: dl0uhXy7ZbVJxuFm01xv8hnkWx3WPbveYN4wl/hgCmY=
Subject key identifier: 45:53:80:43:31:AB:0F:6E:F8:7E:65:77:7C:12:6C:58:1D:F6:81:2E
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 018991DD500CD9DFD6494DAA443428598657
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/RVOAQzGrD274fmV3fBJsWB32gS4.roa
Signing time: Wed 26 Jul 2023 11:02:27 +0000
ROA not before: Wed 26 Jul 2023 11:02:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203759
IP address blocks: 193.148.160.0/19 maxlen: 24
185.86.188.0/22 maxlen: 24
185.124.192.0/22 maxlen: 24
193.19.128.0/22 maxlen: 24
45.142.7.0/24 maxlen: 24
2a05:b540::/29 maxlen: 48
2a06:b500::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:91:dd:50:0c:d9:df:d6:49:4d:aa:44:34:28:59:86:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: Jul 26 11:02:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4553804331ab0f6ef87e65777c126c581df6812e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:46:1e:3d:92:73:05:34:f1:c5:df:77:03:29:
e9:40:c6:0f:21:f4:57:67:de:61:3b:d1:d6:b8:27:
22:a3:4e:b2:60:cc:b0:2f:b6:01:38:04:3b:06:43:
a6:9c:0e:b9:17:83:3d:8b:6e:7f:e4:4d:1f:6e:ec:
02:8d:2f:b6:85:d2:27:5d:84:b7:32:43:6c:99:2c:
01:11:4c:cd:53:77:20:22:c7:01:55:1f:00:c9:f0:
d6:ce:49:df:8f:63:23:88:78:2d:35:4b:e1:78:37:
05:04:41:3b:c4:a3:fc:d1:c3:6b:6c:f0:3c:c0:11:
c0:a0:e2:5f:1d:5f:17:d1:2d:70:bc:74:09:49:e7:
f7:a8:77:90:00:ab:2b:9a:79:bb:f8:c1:d7:c9:13:
e3:d0:6c:57:bc:ac:7e:61:7d:6a:de:1c:da:7a:af:
d9:f2:6b:c1:9d:14:61:98:da:2f:bd:23:5f:43:c4:
d3:91:84:a2:98:16:6e:1e:89:ea:6a:8d:89:d4:4e:
4e:f3:d7:38:3a:7a:f8:9a:db:c6:b2:cb:75:01:47:
e2:39:f5:7d:a7:71:a2:1b:22:d9:09:99:23:0f:ae:
6a:c8:8a:38:02:45:c8:6c:80:25:3d:6e:1d:32:45:
19:83:cf:29:ee:e1:68:fa:95:11:e2:aa:ea:7c:83:
e0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:53:80:43:31:AB:0F:6E:F8:7E:65:77:7C:12:6C:58:1D:F6:81:2E
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/RVOAQzGrD274fmV3fBJsWB32gS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.7.0/24
185.86.188.0/22
185.124.192.0/22
193.19.128.0/22
193.148.160.0/19
IPv6:
2a05:b540::/29
2a06:b500::/29
Signature Algorithm: sha256WithRSAEncryption
2a:1e:f5:08:49:95:8b:48:fc:cc:17:1e:a5:02:c9:c3:44:ca:
f7:da:f7:85:ef:08:8b:1c:a1:93:24:cf:bf:0a:17:cc:69:93:
62:4c:3b:91:75:54:c3:41:5f:69:13:56:e7:c3:c5:6b:52:84:
8b:af:3a:29:bd:ee:4e:3d:87:60:80:3a:b6:e6:3c:ef:26:94:
5a:85:8d:74:99:22:f1:be:44:7a:3d:4b:0e:04:b8:1f:ee:cd:
df:ec:63:2c:1e:77:b0:f7:76:31:70:19:41:dd:6c:97:2f:fd:
94:cf:81:31:f5:b7:9f:71:70:dd:5f:b3:f2:89:ea:fa:b1:ae:
43:66:31:bf:49:f5:9b:7b:75:f2:cb:b2:b2:97:b4:b4:88:92:
43:21:06:3d:0d:da:91:2f:02:f9:07:6d:8a:38:21:2b:43:39:
be:0f:fc:46:78:bf:bf:85:6b:c2:80:b5:c9:8a:e3:4c:0c:e6:
95:5d:a4:9e:d2:23:ad:09:a6:31:a9:88:fb:cc:d5:e7:a1:3d:
c0:38:a6:c1:f6:fc:02:d9:89:46:b9:47:6b:be:3f:0e:83:98:
e4:67:77:9a:95:b8:a4:ac:da:45:16:6a:38:e1:d2:26:4b:fd:
58:cb:83:37:82:1f:91:2b:b8:ef:7d:8e:a8:61:67:aa:28:a0:
c1:c3:96:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:04 2024 by rpki-client on console-fra.rpki-client.org