Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/D_HiH-ogfxdCSsTH-dcWEEvYuaM.roa
File: D_HiH-ogfxdCSsTH-dcWEEvYuaM.roa (raw, json)
Hash identifier: dcRQc6MTSPHfPnWN11ebx3RjmGn6EqSv9hQ2gyANyQw=
Subject key identifier: 0F:F1:E2:1F:EA:20:7F:17:42:4A:C4:C7:F9:D7:16:10:4B:D8:B9:A3
Certificate issuer: /CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
Certificate serial: 018CC49386E2F6046AC2433157D6C42D5F5A
Authority key identifier: 3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/D_HiH-ogfxdCSsTH-dcWEEvYuaM.roa
Signing time: Mon 01 Jan 2024 10:30:51 +0000
ROA not before: Mon 01 Jan 2024 10:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39305
IP address blocks: 185.151.214.0/23 maxlen: 24
194.247.36.0/24 maxlen: 24
45.84.52.0/22 maxlen: 22
77.75.228.0/24 maxlen: 24
62.106.73.0/24 maxlen: 24
193.57.227.0/24 maxlen: 24
91.211.64.0/22 maxlen: 22
91.238.63.0/24 maxlen: 24
185.88.9.0/24 maxlen: 24
94.24.24.0/22 maxlen: 22
185.182.107.0/24 maxlen: 24
94.24.30.0/23 maxlen: 23
193.57.226.0/24 maxlen: 24
2a0e:9780::/29 maxlen: 29
2a0c:7140::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 11 Jan 2024 10:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:86:e2:f6:04:6a:c2:43:31:57:d6:c4:2d:5f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
Validity
Not Before: Jan 1 10:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ff1e21fea207f17424ac4c7f9d716104bd8b9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:0c:94:84:39:79:09:f7:66:8c:cf:e2:38:
d3:47:3f:53:6e:73:75:a6:14:72:ba:94:7d:f7:0a:
6c:70:6c:72:e8:4a:45:d7:c3:ac:f3:59:e3:7b:eb:
87:45:a8:12:fc:2f:c4:51:3d:20:2d:da:ef:1e:51:
28:c6:26:89:e0:7f:7a:31:54:52:fc:bd:c6:b1:6d:
77:82:15:a1:55:c5:c6:fd:c4:7f:2d:53:f6:be:1c:
cd:51:11:3a:e0:69:b5:35:de:a7:d2:0c:b6:94:4f:
6d:a5:e0:2e:fb:59:53:17:5b:93:c0:f7:d6:e5:c3:
11:34:82:fa:69:ea:73:a1:f3:01:4e:e4:1a:b5:88:
a6:50:82:26:4a:48:e3:68:51:01:7f:9d:dc:43:2c:
e4:19:6f:ed:28:d0:47:0c:7c:09:d7:8d:4c:f6:e2:
05:97:4a:44:21:c4:47:36:b2:37:d0:f3:51:53:62:
b8:8d:84:34:1e:08:24:31:f7:cb:b0:4c:2b:54:10:
e8:41:ba:29:90:f4:40:fa:f3:b6:2d:d8:5b:f7:54:
3b:c0:ed:0d:4b:2f:29:4c:6b:fa:6a:b1:3c:4c:48:
ae:b8:e0:8f:4d:5f:18:4b:0f:a0:39:a0:a3:ed:d8:
38:b0:98:52:43:58:a3:51:11:c2:47:ee:79:0a:8e:
cc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F1:E2:1F:EA:20:7F:17:42:4A:C4:C7:F9:D7:16:10:4B:D8:B9:A3
X509v3 Authority Key Identifier:
keyid:3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/D_HiH-ogfxdCSsTH-dcWEEvYuaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.52.0/22
62.106.73.0/24
77.75.228.0/24
91.211.64.0/22
91.238.63.0/24
94.24.24.0/22
94.24.30.0/23
185.88.9.0/24
185.151.214.0/23
185.182.107.0/24
193.57.226.0/23
194.247.36.0/24
IPv6:
2a0c:7140::/29
2a0e:9780::/29
Signature Algorithm: sha256WithRSAEncryption
19:52:1b:0f:ee:be:42:af:99:18:f1:99:c5:01:6f:d5:4e:8c:
2a:b4:cf:f2:b4:62:67:3f:23:c0:ee:7e:ff:cb:bf:ec:58:55:
2b:f0:1d:55:db:e0:fc:77:f6:63:8e:2c:f9:79:14:3c:8d:bf:
59:3f:b1:01:53:64:c9:23:7a:78:12:84:0d:06:d5:7e:a7:4b:
3c:f7:c5:81:82:db:5e:d8:d8:20:32:ef:84:ed:b8:dd:8e:9f:
0f:57:a5:d2:34:23:03:1e:63:d7:73:22:26:4f:4b:99:6e:2c:
51:0f:06:e5:7d:b8:2c:ac:d6:1f:b2:37:e9:19:5b:c8:37:f1:
a5:73:b7:b9:33:3e:90:77:71:bb:c9:9d:51:a9:ff:22:65:1f:
51:66:44:97:e0:45:3d:9f:eb:c8:cd:f4:29:74:2e:0a:4e:c3:
24:0b:a1:04:85:3b:8d:07:54:03:26:e2:4d:47:49:8c:e6:32:
7e:94:84:0c:30:f0:68:cf:b4:07:db:a2:35:d9:48:22:3f:f7:
55:d0:32:6c:50:b6:7e:3d:c9:3c:46:f9:71:69:34:00:e7:51:
f8:99:09:14:80:dd:9e:41:c5:b1:0b:cf:a4:c6:66:2f:28:50:
ce:1d:e4:87:01:38:4c:16:ac:9c:bb:c9:b0:68:08:47:92:1e:
0f:83:cf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 15:08:19 2024 by rpki-client on console-fra.rpki-client.org