Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/V1hrkAllrKqRBBSzHE4UzxNnekw.roa
File: V1hrkAllrKqRBBSzHE4UzxNnekw.roa (raw, json)
Hash identifier: KTHTj8VJmvVwQWe2q1ehrVoPq4TErkJ0mzw2ta8v834=
Subject key identifier: 57:58:6B:90:09:65:AC:AA:91:04:14:B3:1C:4E:14:CF:13:67:7A:4C
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 018D5AF36F3F9C5283D65AB7608AE68AFB12
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/V1hrkAllrKqRBBSzHE4UzxNnekw.roa
Signing time: Tue 30 Jan 2024 15:18:39 +0000
ROA not before: Tue 30 Jan 2024 15:18:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25540
IP address blocks: 45.81.212.0/22 maxlen: 22
77.81.49.0/24 maxlen: 24
89.37.107.0/24 maxlen: 24
93.114.176.0/22 maxlen: 22
94.177.28.0/24 maxlen: 24
94.177.144.0/24 maxlen: 24
130.93.0.0/17 maxlen: 17
130.93.128.0/18 maxlen: 22
185.9.248.0/22 maxlen: 22
185.12.0.0/22 maxlen: 22
185.120.176.0/22 maxlen: 22
185.122.160.0/22 maxlen: 22
185.133.128.0/22 maxlen: 22
185.137.72.0/22 maxlen: 22
193.84.89.0/24 maxlen: 24
195.68.224.0/22 maxlen: 22
2a02:ec00::/29 maxlen: 29
2a0e:4180::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 08 Mar 2024 09:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5a:f3:6f:3f:9c:52:83:d6:5a:b7:60:8a:e6:8a:fb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Jan 30 15:18:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57586b900965acaa910414b31c4e14cf13677a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a0:36:b1:62:0a:63:02:0c:3e:21:00:51:ff:
93:84:eb:6d:ac:2f:e4:93:1b:4b:d6:50:3d:24:07:
d7:09:96:8e:56:f8:ee:39:ed:af:ef:c9:eb:7a:ee:
3b:29:e3:c0:de:81:21:54:80:0e:60:b4:ac:ba:fe:
00:d4:b0:a5:c2:d1:d6:c9:39:5b:c1:ce:15:ae:ca:
a7:83:43:13:f8:a4:cd:b0:a1:8d:fd:2c:aa:55:17:
5d:f2:f4:4a:3c:9a:4d:40:1a:5a:02:f3:48:92:9c:
8b:3f:28:f4:50:1e:24:20:74:ea:0b:21:f2:59:ff:
5d:58:89:7d:07:1d:cf:08:62:40:90:35:9c:6d:d9:
02:76:45:e6:8a:71:ab:cd:b8:c6:27:27:f1:05:3e:
b0:69:42:35:93:a4:d3:37:2a:a0:cf:2a:79:0e:0e:
ff:c2:54:c9:1c:81:88:b7:6d:ac:83:0b:fe:18:86:
f3:0a:c9:3c:1d:65:57:bf:df:4e:d3:99:d3:d4:9b:
ec:f8:32:df:a5:38:2b:7a:3d:c8:af:22:ff:7b:16:
73:e3:df:ca:39:84:97:0a:26:95:23:c4:77:a2:48:
17:4f:39:16:54:db:d7:86:64:89:b7:c6:ec:e6:15:
2b:d4:84:de:c8:8f:83:36:76:43:e2:25:d8:ce:5b:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:58:6B:90:09:65:AC:AA:91:04:14:B3:1C:4E:14:CF:13:67:7A:4C
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/V1hrkAllrKqRBBSzHE4UzxNnekw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.212.0/22
77.81.49.0/24
89.37.107.0/24
93.114.176.0/22
94.177.28.0/24
94.177.144.0/24
130.93.0.0-130.93.191.255
185.9.248.0/22
185.12.0.0/22
185.120.176.0/22
185.122.160.0/22
185.133.128.0/22
185.137.72.0/22
193.84.89.0/24
195.68.224.0/22
IPv6:
2a02:ec00::/29
2a0e:4180::/29
Signature Algorithm: sha256WithRSAEncryption
44:7e:fd:7f:06:d7:b5:ec:4b:8a:d3:a3:49:89:fc:2e:fb:de:
44:91:88:a9:bf:fa:d8:58:45:8f:15:50:6c:8d:6f:77:ba:69:
b1:ce:2a:db:91:84:d8:a8:90:58:b2:51:27:9e:ea:9c:9b:9b:
21:13:23:3a:2c:49:27:04:d5:c5:89:3b:b2:39:8c:a3:66:f1:
f0:7b:e5:5d:5a:82:87:87:3b:90:51:5b:29:02:80:d3:90:a5:
bd:f7:b8:dd:41:20:15:9d:2c:59:6c:0b:4a:bb:df:51:94:8f:
97:6e:6a:86:8c:fd:e1:53:17:b3:51:6a:8b:1c:8a:c6:cb:37:
62:82:cb:ed:88:e3:5e:9c:d4:c4:eb:2f:92:94:64:a1:d9:ff:
77:89:a4:ec:46:9d:3b:ea:79:7d:a6:da:49:a0:40:b8:96:ce:
8a:6a:46:1e:17:69:3e:7e:9b:99:13:9f:b5:34:bf:01:6d:75:
d7:4d:c8:d0:84:d6:ad:8c:33:1d:8a:c4:20:09:ed:d8:99:85:
f4:6e:64:55:1d:30:a5:17:26:d1:56:25:ca:63:13:d9:08:23:
81:d7:1a:98:7d:e9:97:87:ca:86:14:67:b6:cf:45:0f:89:ab:
e2:c7:6e:c1:47:9a:f3:66:4c:b8:f4:fc:05:3e:6d:27:16:ce:
11:0c:dd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:10 2024 by rpki-client on console-ams.rpki-client.org