Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/4-nl9-BudpsBmjceRXGnLJITvIU.roa
File: 4-nl9-BudpsBmjceRXGnLJITvIU.roa (raw, json)
Hash identifier: pWjddgEkxIL3z0N3dSfKiy4HhtQGtJs4pifJxzhNVdk=
Subject key identifier: E3:E9:E5:F7:E0:6E:76:9B:01:9A:37:1E:45:71:A7:2C:92:13:BC:85
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 018A6FD3EC8812647474946063FD8E160B0C
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/4-nl9-BudpsBmjceRXGnLJITvIU.roa
Signing time: Thu 07 Sep 2023 13:27:54 +0000
ROA not before: Thu 07 Sep 2023 13:27:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31631
IP address blocks: 45.150.140.0/22 maxlen: 22
80.252.120.0/22 maxlen: 22
193.178.112.0/23 maxlen: 23
185.108.168.0/22 maxlen: 22
103.110.208.0/22 maxlen: 22
193.178.54.0/23 maxlen: 23
185.205.172.0/22 maxlen: 22
2a06:e40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:d3:ec:88:12:64:74:74:94:60:63:fd:8e:16:0b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Sep 7 13:27:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3e9e5f7e06e769b019a371e4571a72c9213bc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a7:80:b0:81:1f:06:1e:00:67:b2:8c:bd:a2:
b7:33:87:c0:34:55:72:17:f6:fa:37:26:bc:eb:95:
73:8c:f1:7e:58:dc:7b:bb:34:1b:11:6c:43:9c:14:
96:fd:d1:2d:51:fe:fa:7d:ab:43:db:db:d0:a0:72:
d4:df:b5:4b:cc:5e:52:bc:3c:b2:9b:51:4b:c3:55:
0e:0f:9c:2e:33:c6:f4:39:50:b1:c5:3c:da:c8:c0:
01:45:d8:86:d5:52:24:4c:02:ad:a8:e0:2c:7a:e8:
14:74:9b:58:f7:26:a5:b6:a1:1a:f1:c7:5a:b6:27:
12:83:e3:ab:01:31:c0:a1:4b:16:1a:ad:41:86:57:
40:1f:50:f0:f5:e6:d1:4d:48:82:4c:3f:b6:f2:b3:
42:3e:92:4f:bf:4b:bb:62:1b:6a:c6:9b:6b:57:68:
b3:70:cd:2c:6e:59:81:ff:90:bd:ce:f8:1a:9d:15:
b3:57:f1:a7:9a:6d:21:df:b2:28:51:2e:e0:12:ee:
fd:de:31:45:5d:bc:05:f7:91:d5:42:5c:90:d9:04:
61:31:66:1f:2a:e4:b3:32:27:09:5a:94:b3:43:57:
23:03:fd:67:27:c6:f8:6c:7e:d7:76:15:d4:0c:4f:
7a:ff:1a:5b:43:52:19:a5:68:1a:c7:3e:4a:4c:71:
38:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E9:E5:F7:E0:6E:76:9B:01:9A:37:1E:45:71:A7:2C:92:13:BC:85
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/4-nl9-BudpsBmjceRXGnLJITvIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.140.0/22
80.252.120.0/22
103.110.208.0/22
185.108.168.0/22
185.205.172.0/22
193.178.54.0/23
193.178.112.0/23
IPv6:
2a06:e40::/29
Signature Algorithm: sha256WithRSAEncryption
c6:71:24:a3:a8:04:b4:86:ba:d4:57:dc:c2:22:21:14:02:2e:
1d:0d:88:ab:08:50:62:f1:6c:c3:08:23:32:ff:98:61:5b:a0:
9d:96:87:b3:da:2e:9a:0c:b2:17:2b:ef:fb:ec:bb:7e:b2:e9:
3c:6f:5e:16:39:44:2f:57:78:1d:a3:66:c3:44:39:65:b2:90:
87:db:09:65:2b:f9:a4:58:15:c9:b6:d2:13:d5:e2:0a:5d:0c:
61:8e:86:ef:5b:c7:d6:e8:bf:95:f4:20:e4:27:af:80:db:8c:
7c:92:b9:66:6e:fb:24:ec:3b:6d:79:99:8a:73:b5:0d:f2:96:
af:43:5f:58:1e:66:ac:d9:20:33:ac:a9:e6:62:75:9e:9e:ca:
a2:ce:a1:6b:39:96:0d:f2:b9:52:e8:ef:e6:23:59:dd:75:d9:
10:6d:d8:13:fd:aa:46:b2:88:f8:4c:8f:f0:b9:ee:d9:52:cb:
fc:9d:ea:6b:7d:4c:ce:c9:65:f3:76:de:f4:a5:25:10:de:63:
4e:d5:0f:aa:8c:3a:fb:25:d6:a8:60:51:19:bf:66:08:b3:bb:
33:8f:f2:03:62:66:62:08:49:e1:e1:d7:94:67:b0:e9:d4:0a:
34:4f:33:71:fb:fa:de:0e:ea:fe:42:e8:4f:ba:67:15:9a:86:
4a:ba:35:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:23 2024 by rpki-client on console-fra.rpki-client.org