Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/4Xb1ScYzkQ8M4D6J07Z_N4cVyVY.roa
File: 4Xb1ScYzkQ8M4D6J07Z_N4cVyVY.roa (raw, json)
Hash identifier: B8fKxVeT29wTDa7zMU3t7pk+Yk/WQllIL2L/VRfVdUs=
Subject key identifier: E1:76:F5:49:C6:33:91:0F:0C:E0:3E:89:D3:B6:7F:37:87:15:C9:56
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 019169A405BE667255689DE5B18697F9CEA6
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/4Xb1ScYzkQ8M4D6J07Z_N4cVyVY.roa
Signing time: Mon 19 Aug 2024 07:57:22 +0000
ROA not before: Mon 19 Aug 2024 07:57:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41313
IP address blocks: 46.35.160.0/19 maxlen: 24
79.110.120.0/21 maxlen: 24
79.110.124.0/24 maxlen: 24
80.95.16.0/21 maxlen: 24
80.95.22.0/24 maxlen: 24
93.152.234.0/23 maxlen: 24
93.152.235.0/24 maxlen: 24
93.175.244.0/23 maxlen: 24
95.158.128.0/18 maxlen: 24
151.252.192.0/20 maxlen: 24
185.18.228.0/22 maxlen: 24
185.40.164.0/22 maxlen: 24
212.21.128.0/19 maxlen: 24
2a00:e200::/32 maxlen: 48
2a00:e200:107::/48 maxlen: 48
2a0d:3b40::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 Aug 2024 08:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:69:a4:05:be:66:72:55:68:9d:e5:b1:86:97:f9:ce:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Aug 19 07:57:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e176f549c633910f0ce03e89d3b67f378715c956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:51:e6:07:4d:ef:cb:92:90:ab:ec:87:e9:
d6:c8:af:4e:d4:83:31:97:48:b1:cd:fc:82:52:00:
69:c1:cd:03:f3:cd:c1:71:df:23:4c:1f:35:62:9e:
24:80:ba:50:c0:9e:28:c9:bd:ac:81:b8:cd:30:60:
cd:ea:97:3c:85:34:43:c9:b5:7c:d1:6a:e7:f6:7c:
0a:80:0f:c7:c2:0c:45:9c:d3:b5:51:ef:77:d1:73:
02:20:02:92:e8:06:22:63:ae:f0:11:ad:88:1f:4d:
3f:bf:f6:6e:7c:70:9a:54:45:0c:a8:e5:31:9e:31:
cb:23:e2:52:4c:d8:84:da:5f:c2:25:c2:ad:99:a7:
b3:29:7a:e5:ed:92:e5:a2:e4:5d:ec:ee:25:cb:95:
bc:fe:e5:c3:da:c9:fb:f3:cc:f4:c2:9c:5b:5d:ef:
ab:be:6c:47:74:08:a6:04:c7:6a:34:99:d0:95:16:
8d:0d:7f:5a:a7:6c:44:92:98:3a:a0:43:5d:31:da:
4a:22:b7:72:59:24:20:01:37:75:94:d4:70:fc:4a:
3f:14:d4:85:12:83:b6:20:22:17:14:d4:23:ed:2c:
db:65:ff:ca:77:1d:32:a4:4f:d5:c2:fc:c3:72:b2:
b7:1e:79:6b:c6:fb:34:63:3b:65:7f:28:25:42:35:
3a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:76:F5:49:C6:33:91:0F:0C:E0:3E:89:D3:B6:7F:37:87:15:C9:56
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/4Xb1ScYzkQ8M4D6J07Z_N4cVyVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.160.0/19
79.110.120.0/21
80.95.16.0/21
93.152.234.0/23
93.175.244.0/23
95.158.128.0/18
151.252.192.0/20
185.18.228.0/22
185.40.164.0/22
212.21.128.0/19
IPv6:
2a00:e200::/32
2a0d:3b40::/29
Signature Algorithm: sha256WithRSAEncryption
4f:a1:a2:e8:c8:29:00:ce:ca:49:39:61:2f:2a:b0:91:8f:f9:
90:1c:9a:58:f0:27:c9:68:16:be:ad:3c:96:04:e3:e0:a8:a9:
86:af:4d:e7:4e:aa:12:df:fb:10:86:6b:eb:69:45:5e:e8:91:
ec:44:6d:b3:95:35:75:6b:1d:61:05:9f:86:4d:41:ee:6b:cd:
a0:e1:f3:0b:d3:46:d1:c5:5f:82:f9:98:17:1d:d9:fc:27:3d:
f0:1b:2a:1f:64:84:fa:06:da:96:8f:ba:7a:db:09:23:56:28:
07:41:15:ba:c5:1e:8c:6f:c7:34:a2:69:8e:2e:4d:0e:18:8c:
2b:a2:60:e1:da:20:7f:55:d1:09:35:d4:d9:6a:be:ff:29:61:
61:d6:1e:24:59:c8:89:2c:06:b1:30:6f:e5:79:1b:0e:2e:d9:
94:fa:b8:a1:f1:4a:15:03:8f:1e:b2:d7:b6:84:ba:33:87:de:
3b:15:e2:b4:ce:f7:1c:d6:55:61:b4:82:3e:d0:77:7e:f3:fe:
bc:50:97:10:90:16:ab:07:ee:90:7f:8f:6b:0f:16:dd:e0:a4:
30:89:1e:ef:e8:6f:84:9c:eb:b0:00:e5:f5:5d:65:0d:c2:36:
a5:48:de:92:9c:d9:ce:6e:c3:9e:c8:35:2a:3d:6f:ee:fa:41:
64:66:3a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 12:44:31 2024 by rpki-client on console-fra.rpki-client.org