Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/6bwpvwrtd2tSb8BHcgpXASPTDwI.roa
File: 6bwpvwrtd2tSb8BHcgpXASPTDwI.roa (raw, json)
Hash identifier: dsijbpP77ReEO2JkgXt0w+cxRw1Dq+BB52c3Vwx/ZmE=
Subject key identifier: E9:BC:29:BF:0A:ED:77:6B:52:6F:C0:47:72:0A:57:01:23:D3:0F:02
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 018F63FE893E8E2EFAA1452EFFA7E0D64677
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/6bwpvwrtd2tSb8BHcgpXASPTDwI.roa
Signing time: Fri 10 May 2024 19:32:56 +0000
ROA not before: Fri 10 May 2024 19:32:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203847
IP address blocks: 45.142.15.0/24 maxlen: 24
62.112.200.0/22 maxlen: 22
185.122.44.0/22 maxlen: 22
185.122.44.0/23 maxlen: 23
185.122.46.0/23 maxlen: 23
185.206.52.0/23 maxlen: 23
193.162.128.0/24 maxlen: 24
2a01:57e0:1::/48 maxlen: 48
2a01:57e0:200::/39 maxlen: 39
2a01:57e0:400::/39 maxlen: 39
Validation: Failed, certificate revoked on Mon 13 May 2024 19:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:63:fe:89:3e:8e:2e:fa:a1:45:2e:ff:a7:e0:d6:46:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: May 10 19:32:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9bc29bf0aed776b526fc047720a570123d30f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a5:01:be:05:db:0b:40:c5:e6:8c:d7:1f:8a:
4f:18:98:5c:be:f3:7b:2b:1c:be:8d:a6:fd:ec:2a:
8e:ba:7e:c0:38:a4:04:7e:96:ec:ac:8f:6f:f6:f0:
28:e0:bf:d5:8e:44:21:b3:8a:53:f9:18:d0:b2:01:
64:7e:e8:4a:f3:8b:98:06:1c:58:25:a3:8b:3d:8a:
91:c7:f3:14:d8:19:1a:5a:7c:75:df:17:d6:ac:f3:
6f:91:87:69:3f:f4:dc:f7:9c:ed:3d:49:05:bf:4b:
3f:09:3f:b3:47:0d:83:11:8c:e8:a0:ff:6b:e6:8e:
48:94:f0:80:1c:cf:07:03:2a:95:85:3c:b0:d4:25:
e9:87:79:6f:e6:02:bd:56:82:8d:2c:5c:93:b0:01:
59:9d:e7:20:b1:47:af:11:04:23:d5:b8:ff:f2:0e:
7d:2d:4b:1b:e0:08:b7:aa:5a:56:68:40:a0:31:3f:
90:9d:c5:39:49:d3:81:42:69:28:f0:21:07:30:97:
a2:90:30:76:fc:f7:f7:45:db:18:41:a6:d8:a6:31:
08:87:66:a1:a7:ed:3a:56:cf:e0:bf:94:6b:94:4f:
51:2a:ed:03:70:18:c4:d6:83:7f:70:d6:e3:15:96:
0e:b4:58:fc:14:5c:5f:b2:60:1b:be:05:04:82:a4:
ec:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BC:29:BF:0A:ED:77:6B:52:6F:C0:47:72:0A:57:01:23:D3:0F:02
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/6bwpvwrtd2tSb8BHcgpXASPTDwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.15.0/24
62.112.200.0/22
185.122.44.0/22
185.206.52.0/23
193.162.128.0/24
IPv6:
2a01:57e0:1::/48
2a01:57e0:200::-2a01:57e0:5ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c3:b7:e5:d3:04:a4:f6:be:64:0c:0d:7a:1a:5c:d3:e7:11:78:
6a:c5:b1:d3:aa:89:8f:5a:33:f8:e3:c6:25:c9:ac:56:c8:58:
b4:3c:14:08:89:8e:5f:26:cb:1b:bd:3a:41:74:d1:4b:9a:2c:
3b:41:9c:03:cd:3a:ef:de:ff:9a:d9:bf:dc:54:d1:64:37:37:
fd:ea:33:9e:a3:7b:a4:c3:29:20:a6:e2:26:c6:4c:00:03:ac:
0c:77:39:6d:f8:dd:6a:db:d5:ba:8b:53:7b:ae:0a:c9:eb:e2:
27:26:08:0b:fe:f5:8a:83:48:7d:e3:d9:e6:02:19:7b:a3:39:
57:54:f1:6d:ef:32:67:f7:13:44:46:c8:6d:01:17:6c:45:1a:
28:65:76:09:82:d4:5e:17:96:44:62:8b:8b:23:7d:ca:6d:fe:
ff:82:f8:f4:f6:d3:22:86:ab:c9:e8:c0:0f:ab:a9:70:9b:e5:
ce:46:ad:22:e8:20:e8:a8:78:6e:e0:f4:71:b9:de:c7:a7:31:
95:c7:86:35:a7:6c:71:92:e3:50:36:83:f1:b0:c7:3f:0d:ff:
db:bf:96:63:b6:ae:ae:c7:6d:b8:12:cf:e8:9e:fd:73:ef:d8:
73:9a:93:f0:c9:7d:24:9d:19:d2:dd:19:5c:00:0d:ec:14:1c:
87:a4:a8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:19 2024 by rpki-client on console-ams.rpki-client.org