Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/an4lNarbNGcAWu7ZI14xwShAtbM.roa
File: an4lNarbNGcAWu7ZI14xwShAtbM.roa (raw, json)
Hash identifier: hq8tnrQE+YEZx3jUBurwEUmE42gXiNNo4L3i0cNpcVE=
Subject key identifier: 6A:7E:25:35:AA:DB:34:67:00:5A:EE:D9:23:5E:31:C1:28:40:B5:B3
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0190DA2A5D03B0725538EB0DB4D95B2EC9FD
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/an4lNarbNGcAWu7ZI14xwShAtbM.roa
Signing time: Mon 22 Jul 2024 11:18:47 +0000
ROA not before: Mon 22 Jul 2024 11:18:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.84.216.0/24 maxlen: 24
45.95.243.0/24 maxlen: 24
45.146.53.0/24 maxlen: 24
45.148.25.0/24 maxlen: 24
185.227.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 17:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:da:2a:5d:03:b0:72:55:38:eb:0d:b4:d9:5b:2e:c9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 22 11:18:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a7e2535aadb3467005aeed9235e31c12840b5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9f:8e:cb:eb:55:c8:81:3e:fe:93:ac:73:c0:
e9:78:35:14:30:9a:b6:3c:31:cd:b7:18:f9:b5:e5:
21:7d:5e:8e:a8:70:49:3c:0f:3e:9d:bd:2c:f5:15:
57:96:a7:cb:d1:1b:cb:01:93:2d:17:29:5b:8d:d5:
25:13:4e:d5:97:87:90:9c:82:ea:4c:12:47:82:59:
b1:0f:5c:4b:39:b1:84:7b:3e:bc:50:35:54:51:af:
85:5a:03:7a:37:d9:d9:28:1c:55:5f:77:d1:49:ec:
55:b1:98:78:15:8d:09:1b:1c:f0:1a:f0:b8:65:a0:
33:76:ca:6d:c6:e3:cf:3f:57:12:69:c3:60:ed:64:
a5:77:cf:0e:60:f5:ad:b2:af:a6:de:1d:28:ec:f4:
d8:17:00:fb:da:07:43:b9:af:0d:23:ed:2b:50:da:
ae:e6:22:a2:6f:5e:0a:56:52:5e:8a:d5:96:6b:d6:
87:74:56:2b:ff:09:50:e9:ce:02:b6:fd:fe:96:87:
76:9c:37:46:e8:4d:e6:78:bc:02:8b:c4:e6:d4:ae:
cc:b0:4a:a8:e9:b3:23:10:76:60:92:4f:50:94:9f:
ef:55:e6:85:7a:22:40:9e:70:15:68:24:82:c9:ba:
fa:c2:28:01:35:60:20:3b:34:de:94:c7:72:ec:ce:
09:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7E:25:35:AA:DB:34:67:00:5A:EE:D9:23:5E:31:C1:28:40:B5:B3
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/an4lNarbNGcAWu7ZI14xwShAtbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.216.0/24
45.95.243.0/24
45.146.53.0/24
45.148.25.0/24
185.227.33.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:4a:af:7e:0b:e3:e3:4c:03:81:2a:02:5a:fa:fe:06:ba:fb:
c0:ce:e5:b9:50:57:56:74:b0:31:36:0a:a7:4c:8f:76:3c:a7:
63:67:37:98:84:a7:9b:ff:43:b7:62:3f:dc:9a:49:61:e0:bb:
ed:0f:53:6d:95:4e:02:26:a9:4e:5a:ff:ff:3b:b0:a4:c2:b3:
16:9a:56:d9:4e:d0:9b:d6:ce:45:c1:62:49:e2:eb:57:55:c8:
25:eb:8f:de:7c:5e:31:8e:47:c1:05:1e:1e:a6:27:87:58:c6:
a7:e9:68:69:74:f2:c5:3e:6f:7b:46:65:b6:f6:76:86:43:43:
a5:1b:90:4b:86:c7:f0:44:8f:5f:48:6e:ec:8e:9a:31:8b:1f:
21:95:26:3a:e3:88:97:48:f2:ca:4a:d3:96:7b:a2:8b:4b:74:
96:df:19:3a:6f:7c:8e:00:bd:93:9e:f1:1b:c9:57:87:a6:25:
f1:94:a4:0c:6e:d1:7f:9b:67:cf:91:a6:b6:c0:28:b7:26:f1:
92:ab:28:a6:99:77:9d:85:a4:06:f9:5b:43:95:98:22:37:30:
c6:9e:1a:42:fc:e3:b3:79:d6:28:71:41:cd:cf:a5:c8:fb:33:
ca:f3:ec:09:4c:1a:06:eb:ab:18:da:9f:db:64:c2:df:84:f6:
3f:4a:db:4e
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZDaKl0DsHJVOOsNtNlbLsn9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjQwNzIyMTExODQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTdlMjUzNWFhZGIzNDY3MDA1YWVlZDkyMzVlMzFjMTI4NDBiNWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ+Oy+tVyIE+/pOsc8DpeDUUMJq2
PDHNtxj5teUhfV6OqHBJPA8+nb0s9RVXlqfL0RvLAZMtFylbjdUlE07Vl4eQnILq
TBJHglmxD1xLObGEez68UDVUUa+FWgN6N9nZKBxVX3fRSexVsZh4FY0JGxzwGvC4
ZaAzdsptxuPPP1cSacNg7WSld88OYPWtsq+m3h0o7PTYFwD72gdDua8NI+0rUNqu
5iKib14KVlJeitWWa9aHdFYr/wlQ6c4Ctv3+lod2nDdG6E3meLwCi8Tm1K7MsEqo
6bMjEHZgkk9QlJ/vVeaFeiJAnnAVaCSCybr6wigBNWAgOzTelMdy7M4JgwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGp+JTWq2zRnAFru2SNeMcEoQLWzMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvYW40bE5hcmJOR2NBV3U3WkkxNHh3U2hBdGJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALVTYAwQA
LV/zAwQALZI1AwQALZQZAwQAueMhMA0GCSqGSIb3DQEBCwUAA4IBAQAfSq9+C+Pj
TAOBKgJa+v4GuvvAzuW5UFdWdLAxNgqnTI92PKdjZzeYhKeb/0O3Yj/cmklh4Lvt
D1NtlU4CJqlOWv//O7CkwrMWmlbZTtCb1s5FwWJJ4utXVcgl64/efF4xjkfBBR4e
pieHWMan6WhpdPLFPm97RmW29naGQ0OlG5BLhsfwRI9fSG7sjpoxix8hlSY644iX
SPLKStOWe6KLS3SW3xk6b3yOAL2TnvEbyVeHpiXxlKQMbtF/m2fPkaa2wCi3JvGS
qyimmXedhaQG+VtDlZgiNzDGnhpC/OOzedYocUHNz6XI+zPK8+wJTBoG66sY2p/b
ZMLfhPY/SttO
-----END CERTIFICATE-----
Generated at Wed Aug 21 22:37:05 2024 by rpki-client on console-fra.rpki-client.org