Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/41jvhJX0IIZqL50sFHp4RTTUzZk.roa
File: 41jvhJX0IIZqL50sFHp4RTTUzZk.roa (raw, json)
Hash identifier: iR+IqraCMB+VM9OX9o4DVyUDOJxMhvfF4+WvbtgaP1s=
Subject key identifier: E3:58:EF:84:95:F4:20:86:6A:2F:9D:2C:14:7A:78:45:34:D4:CD:99
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018D5DAD96A50D206D376B4D9A3BAAE9794C
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/41jvhJX0IIZqL50sFHp4RTTUzZk.roa
Signing time: Wed 31 Jan 2024 04:01:13 +0000
ROA not before: Wed 31 Jan 2024 04:01:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8038
IP address blocks: 46.229.255.0/24 maxlen: 24
91.190.107.0/24 maxlen: 24
185.150.0.0/24 maxlen: 24
185.165.44.0/24 maxlen: 24
185.217.118.0/24 maxlen: 24
193.26.114.0/24 maxlen: 24
194.5.84.0/24 maxlen: 24
194.76.134.0/24 maxlen: 24
194.242.3.0/24 maxlen: 24
203.25.124.0/24 maxlen: 24
203.159.82.0/24 maxlen: 24
203.159.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 12:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5d:ad:96:a5:0d:20:6d:37:6b:4d:9a:3b:aa:e9:79:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 31 04:01:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e358ef8495f420866a2f9d2c147a784534d4cd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7d:1b:7a:6c:86:f8:9c:cf:9a:5f:8f:14:3c:
af:93:17:0b:bc:6f:11:f8:43:c7:75:bd:e9:1e:a7:
c6:46:56:ba:e3:1b:88:50:36:65:87:f0:68:88:d0:
5d:44:65:ea:f0:e5:85:f3:61:70:0d:c5:3c:25:11:
c2:67:fd:db:7d:42:45:d1:05:b8:87:68:59:3d:d3:
ee:b1:37:b8:da:b7:81:8e:b7:07:0e:03:79:0c:4c:
19:33:0e:dd:b4:ef:31:86:80:11:67:bd:98:4f:e1:
79:d7:e1:23:aa:6e:e5:23:3e:64:ab:8f:14:58:b4:
e9:07:5a:8f:cb:bc:d2:ce:a9:48:8b:77:29:44:12:
89:6e:de:e5:f1:10:e3:2a:91:d9:67:00:11:c2:52:
ca:a3:5f:5d:6b:65:31:6e:54:8d:31:5a:f8:74:af:
5d:7d:a6:d0:1a:57:63:67:4d:93:7f:36:1e:8a:69:
68:71:99:89:b7:b9:75:b2:bc:89:86:25:eb:d6:1c:
11:c0:07:d7:cc:a1:1d:fc:73:12:6e:49:cb:9c:d8:
b3:b0:1c:38:e1:de:d2:f5:46:81:e1:61:75:e0:46:
75:4a:dd:4c:8e:84:2b:5e:e9:4f:76:56:5e:11:60:
c9:08:d3:42:82:b4:6a:56:03:6c:d9:bf:ad:d8:de:
ce:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:58:EF:84:95:F4:20:86:6A:2F:9D:2C:14:7A:78:45:34:D4:CD:99
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/41jvhJX0IIZqL50sFHp4RTTUzZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.255.0/24
91.190.107.0/24
185.150.0.0/24
185.165.44.0/24
185.217.118.0/24
193.26.114.0/24
194.5.84.0/24
194.76.134.0/24
194.242.3.0/24
203.25.124.0/24
203.159.82.0/24
203.159.90.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:29:e6:bc:8a:9b:c0:5b:32:a1:49:11:c1:08:f9:d1:cd:3b:
38:6a:5e:c0:84:fa:d9:fd:f9:ed:d6:1a:fd:a4:9a:98:60:a5:
c7:fd:ea:1a:1c:e2:11:da:90:3a:24:44:ad:27:a4:3d:92:6c:
a6:9e:97:f7:72:04:28:ff:32:37:f2:0c:bf:30:a2:69:b9:4a:
5c:0a:79:73:0f:4f:f9:54:48:3d:e0:df:9a:e4:56:d3:87:9b:
a6:5f:5c:ea:cc:a1:bf:75:c1:2c:c5:51:fb:3f:f7:5a:58:ec:
d5:77:4d:3b:bb:54:25:9a:95:7a:34:77:87:09:18:6a:ce:28:
4c:dd:0c:cb:d0:82:d2:92:a4:b2:c5:60:df:6f:69:4d:9a:c9:
27:4f:b0:af:bf:5a:40:44:3f:8a:08:b1:96:d0:9b:5e:6c:91:
c6:85:0f:cd:ec:35:c9:9c:1c:1d:3b:61:5e:df:cc:a2:27:42:
ea:39:b6:ca:61:23:85:72:04:2d:74:a6:d4:55:10:22:6d:85:
ac:1e:ef:96:a1:18:a8:52:56:aa:a4:76:ad:4f:4c:a2:7b:e1:
6c:4f:ba:21:fc:d5:0d:34:d7:40:e1:40:2f:2f:23:cc:cb:c0:
c0:42:2e:d2:33:15:6f:90:0d:78:b6:8e:ba:c3:f5:0b:f2:85:
b4:66:f9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 17:38:55 2024 by rpki-client on console-fra.rpki-client.org