Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/L9nqWOUD3YSY6bXJsU4vzGs9Dqo.roa
File: L9nqWOUD3YSY6bXJsU4vzGs9Dqo.roa (raw, json)
Hash identifier: 3E/EI+F68AhMCxOEHNBNwAdsFAOLHPl6JKMfNw3BM/Y=
Subject key identifier: 2F:D9:EA:58:E5:03:DD:84:98:E9:B5:C9:B1:4E:2F:CC:6B:3D:0E:AA
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01918D9E3A2CB6DD4097F21C091CAFD2C124
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/L9nqWOUD3YSY6bXJsU4vzGs9Dqo.roa
Signing time: Mon 26 Aug 2024 07:37:22 +0000
ROA not before: Mon 26 Aug 2024 07:37:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.84.216.0/24 maxlen: 24
45.85.90.0/24 maxlen: 24
45.95.243.0/24 maxlen: 24
45.130.143.0/24 maxlen: 24
45.146.53.0/24 maxlen: 24
45.148.25.0/24 maxlen: 24
45.157.98.0/24 maxlen: 24
136.144.26.0/24 maxlen: 24
136.144.27.0/24 maxlen: 24
185.227.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 05:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8d:9e:3a:2c:b6:dd:40:97:f2:1c:09:1c:af:d2:c1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Aug 26 07:37:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fd9ea58e503dd8498e9b5c9b14e2fcc6b3d0eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:0e:05:76:85:e1:ee:3a:88:14:bb:a2:98:
58:20:02:5b:8e:f4:d2:1d:66:b9:cf:02:b3:21:58:
5c:49:e2:07:e6:81:5b:06:f4:0b:5b:88:4c:fd:3b:
5a:da:b7:67:06:c9:8c:b5:c2:b1:22:4d:0c:6f:00:
76:99:92:79:de:8e:be:d5:e8:6c:6d:aa:9c:9f:d7:
86:bb:58:4c:02:fe:17:c1:b5:5c:c8:9e:78:8a:f4:
50:0c:cc:0a:62:54:ac:75:06:e4:42:30:c7:3a:ad:
20:ff:5b:52:64:97:2f:f5:5f:97:c8:41:45:30:5a:
69:50:2c:01:73:60:17:3c:2a:8f:dc:3f:ab:55:e0:
8c:6b:fb:0e:fc:a6:00:28:1c:b9:c2:be:1b:b6:67:
93:91:30:43:19:e2:8e:99:64:0a:c5:1d:19:a7:a8:
40:22:02:3f:07:b2:83:3e:cc:e2:86:92:2e:db:b4:
c7:68:1c:77:49:0c:ff:76:c3:f0:bb:98:8a:d2:65:
28:b6:43:19:6d:14:cb:09:ca:e5:ec:51:1d:fc:7b:
71:21:9a:64:20:7f:43:c9:38:93:b5:88:d1:ff:94:
04:71:c8:64:c9:4f:aa:f3:1d:d1:a3:ef:0a:72:93:
ef:3c:2f:1e:dc:bd:a7:99:67:7a:b2:ed:4e:f7:80:
ae:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D9:EA:58:E5:03:DD:84:98:E9:B5:C9:B1:4E:2F:CC:6B:3D:0E:AA
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/L9nqWOUD3YSY6bXJsU4vzGs9Dqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.216.0/24
45.85.90.0/24
45.95.243.0/24
45.130.143.0/24
45.146.53.0/24
45.148.25.0/24
45.157.98.0/24
136.144.26.0/23
185.227.33.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:3e:fb:39:0b:90:f6:6c:29:a4:b8:12:d1:b6:3b:23:1c:3c:
54:5c:78:ad:02:05:5d:b8:47:3c:4e:f3:1d:55:66:4f:99:34:
5a:e0:22:27:62:cb:76:6b:2d:78:55:03:c0:8c:6c:35:6f:46:
c5:7f:bc:ce:38:1b:47:f8:4c:ee:16:96:e6:47:44:bf:65:ea:
80:b0:63:39:45:c2:84:7d:5d:b2:8d:52:7a:d4:60:97:99:bc:
45:b3:c4:c5:e7:e1:46:7f:47:57:ed:b2:29:97:35:f8:a9:a5:
7f:82:37:18:22:fb:ee:5c:d6:41:a5:df:12:09:1d:7f:76:25:
97:8f:a5:6e:62:81:fd:41:24:22:d9:42:c3:3a:fa:69:bd:18:
00:52:22:60:6e:24:29:4a:5f:a1:08:68:46:44:7a:05:42:b1:
a8:f7:f6:46:50:7d:e4:72:18:7d:be:8f:7b:6b:6f:59:b1:0f:
38:0e:64:7a:52:8c:ee:cb:94:01:fe:3f:aa:ed:b4:9b:15:68:
4b:f9:3f:3a:54:cb:31:ae:43:06:43:a9:f2:b7:32:b4:29:cb:
f6:b2:eb:de:96:0a:22:bc:b4:69:22:0a:cf:ac:c4:ba:8f:49:
2d:2c:b7:6c:cb:51:91:26:52:25:bb:a1:c6:39:8d:13:47:21:
c5:69:66:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 07:23:12 2024 by rpki-client on console-ams.rpki-client.org