Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/SbaCxfDfJbvms54QXFabVzPWU40.roa
File: SbaCxfDfJbvms54QXFabVzPWU40.roa (raw, json)
Hash identifier: WrJXbD7Vg6NidJtQ6nfbKyS9STqI2g85TXF5FbV9gqc=
Subject key identifier: 49:B6:82:C5:F0:DF:25:BB:E6:B3:9E:10:5C:56:9B:57:33:D6:53:8D
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 018CC7956CC0A7717529DB9B19CEBE74E27D
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/SbaCxfDfJbvms54QXFabVzPWU40.roa
Signing time: Tue 02 Jan 2024 00:31:47 +0000
ROA not before: Tue 02 Jan 2024 00:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25540
IP address blocks: 185.12.0.0/22 maxlen: 22
185.120.176.0/22 maxlen: 22
94.177.28.0/24 maxlen: 24
77.81.49.0/24 maxlen: 24
89.37.107.0/24 maxlen: 24
130.93.0.0/17 maxlen: 17
185.137.72.0/22 maxlen: 22
130.93.128.0/18 maxlen: 22
193.84.89.0/24 maxlen: 24
45.81.212.0/22 maxlen: 22
93.114.176.0/22 maxlen: 22
94.177.144.0/24 maxlen: 24
185.9.248.0/22 maxlen: 22
185.133.128.0/22 maxlen: 22
185.122.160.0/22 maxlen: 22
2a02:ec00::/29 maxlen: 29
2a0e:4180::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 30 Jan 2024 15:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:6c:c0:a7:71:75:29:db:9b:19:ce:be:74:e2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Jan 2 00:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49b682c5f0df25bbe6b39e105c569b5733d6538d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:36:79:67:f4:e1:bd:7e:4d:b2:ae:39:09:9b:
05:8d:5c:20:1b:e7:52:fc:70:d5:ae:71:3c:d5:cf:
1c:28:14:61:9e:4b:ab:39:ab:30:49:ea:7a:81:44:
de:f1:2f:59:97:16:98:0a:11:86:2c:68:03:4c:61:
ba:51:1c:32:b5:96:a6:1b:a8:d9:8e:4a:60:2f:6d:
f0:3d:c9:ff:fc:fc:37:54:ff:8e:07:14:9a:37:e6:
04:a0:df:83:0b:4e:bb:bc:72:27:34:a9:17:58:52:
23:cb:f1:25:0d:88:33:94:e7:67:57:6c:38:38:c5:
54:a5:35:90:72:a8:40:f8:40:de:3f:6f:29:05:5b:
4c:02:3d:47:24:d2:8e:13:ce:80:0a:c5:4b:7e:8c:
47:c7:08:2e:cd:d2:8a:34:ff:bc:8e:28:d2:12:3c:
44:a0:eb:af:d3:a1:dc:9c:5a:8e:e9:97:21:44:4f:
af:f3:63:07:20:a8:01:d1:27:d4:5d:b9:f4:9a:f9:
05:65:4a:8c:ec:1e:8f:7d:d9:2d:7e:14:f5:0e:ec:
81:b0:aa:19:56:62:90:00:74:cc:b4:02:e8:13:fe:
c1:3e:2e:20:97:c1:be:cf:81:50:04:d4:e2:05:60:
f1:a3:e2:dc:05:d1:de:b6:0d:0e:f9:dd:71:d3:59:
20:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B6:82:C5:F0:DF:25:BB:E6:B3:9E:10:5C:56:9B:57:33:D6:53:8D
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/SbaCxfDfJbvms54QXFabVzPWU40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.212.0/22
77.81.49.0/24
89.37.107.0/24
93.114.176.0/22
94.177.28.0/24
94.177.144.0/24
130.93.0.0-130.93.191.255
185.9.248.0/22
185.12.0.0/22
185.120.176.0/22
185.122.160.0/22
185.133.128.0/22
185.137.72.0/22
193.84.89.0/24
IPv6:
2a02:ec00::/29
2a0e:4180::/29
Signature Algorithm: sha256WithRSAEncryption
b4:ce:49:91:de:39:88:7a:b0:5a:c9:4a:82:23:da:d6:6b:35:
20:e0:de:38:0c:5b:fc:73:82:aa:38:b2:cc:81:f6:59:d9:fa:
72:3c:28:16:9b:6a:a4:0d:22:2c:47:6f:2d:e8:e9:a0:3a:26:
c0:b7:6c:6e:ea:88:9c:ca:ab:77:96:3d:fe:d7:9b:bf:0e:10:
5c:f4:17:4f:4d:81:5c:de:4e:8e:78:55:48:0b:68:c6:00:1a:
1b:6e:20:74:55:5e:31:04:d9:11:f2:32:36:af:ea:10:c6:bc:
12:92:b2:f5:c8:c7:32:c4:61:54:cc:cb:3b:87:01:d8:e0:45:
10:fa:d6:63:66:8e:83:27:35:fa:5f:95:43:64:66:76:44:a4:
fc:a7:cd:50:7f:f1:24:25:30:8b:f3:e1:02:ff:b1:88:9e:87:
b1:dc:2b:94:2f:28:d0:62:41:3d:6a:bc:07:b0:d4:41:d0:fe:
88:c5:9f:34:b8:49:ce:ac:a0:79:58:0b:3f:33:ed:ee:4d:1e:
d2:52:a2:e9:c0:7a:9b:4b:fa:32:b6:b2:3b:4d:18:c2:13:af:
33:45:b0:76:f5:ac:21:e8:27:8d:57:ff:93:79:a5:54:b7:81:
d3:ad:4f:cb:b4:aa:4b:b5:6a:36:ab:32:bd:52:6b:13:93:39:
b0:e0:52:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:10 2024 by rpki-client on console-ams.rpki-client.org