Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H5-6QyAr5p0D8nMp2K56dTghc-k.roa
File: H5-6QyAr5p0D8nMp2K56dTghc-k.roa (raw, json)
Hash identifier: XpB/VdTdezQvvqXyN9P9RYYvRz/3B9t8o+ZTQk5BOf8=
Subject key identifier: 1F:9F:BA:43:20:2B:E6:9D:03:F2:73:29:D8:AE:7A:75:38:21:73:E9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01907DAE61C0DA842682DB076BF4B79B65D3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H5-6QyAr5p0D8nMp2K56dTghc-k.roa
Signing time: Thu 04 Jul 2024 12:18:18 +0000
ROA not before: Thu 04 Jul 2024 12:18:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.86.12.0/24 maxlen: 24
45.152.198.0/24 maxlen: 24
2a0e:15c4::/32 maxlen: 32
2a0e:1a84::/32 maxlen: 32
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a13:18c0:2::/48 maxlen: 48
2a13:18c3::/32 maxlen: 48
2a13:2b40::/29 maxlen: 32
Validation: Failed, certificate revoked on Wed 31 Jul 2024 13:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7d:ae:61:c0:da:84:26:82:db:07:6b:f4:b7:9b:65:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 4 12:18:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f9fba43202be69d03f27329d8ae7a75382173e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:66:b7:6f:2b:e9:c4:71:d3:91:a1:05:48:
f5:92:05:68:28:4d:1c:ec:3c:6f:d0:43:c1:36:c6:
68:65:69:d8:2c:65:a9:f3:4b:83:d0:1a:7a:83:e9:
62:63:aa:40:cc:d3:55:52:cf:59:1f:c4:1e:5b:b9:
a8:97:44:d0:4b:43:3d:7f:ac:6c:3d:83:7c:08:b3:
fe:a0:89:90:1e:ea:5f:11:44:5a:1a:13:49:91:2a:
4e:24:ec:39:b4:51:d4:85:95:aa:42:89:ea:78:cf:
40:20:71:be:85:6d:83:b3:05:7b:2e:2c:f0:ab:13:
31:31:d7:19:5d:bc:c7:c7:eb:6d:bb:63:ab:64:e9:
20:a1:b2:14:9c:ed:6b:a7:70:8f:72:e5:c4:57:f7:
71:e9:f6:4f:90:d9:4d:8e:8c:cc:19:17:af:6d:ae:
f2:e3:9f:cd:79:2a:85:62:1d:cd:2f:32:46:be:df:
bc:38:cc:52:15:6b:78:64:ce:21:80:66:94:c1:d8:
db:6f:bb:04:39:55:3e:75:d4:a9:51:37:7c:4b:b5:
9e:9e:64:1f:e5:93:ec:10:11:57:fb:e1:72:8a:8f:
8c:34:ad:26:d9:0b:97:ca:35:df:43:17:74:b4:7f:
3b:70:45:38:32:f9:d4:20:f1:54:d6:cc:75:86:d2:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9F:BA:43:20:2B:E6:9D:03:F2:73:29:D8:AE:7A:75:38:21:73:E9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H5-6QyAr5p0D8nMp2K56dTghc-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.12.0/24
45.152.198.0/24
IPv6:
2a0e:15c4::/32
2a0e:1a84::/32
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a13:18c0:2::/48
2a13:18c3::/32
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
8a:dd:77:b2:a8:2c:f4:9f:20:9a:8c:b9:c0:e5:e4:93:77:39:
d1:a0:2d:2c:53:20:00:88:7c:ce:a2:18:bc:b6:ec:1a:b8:db:
b7:78:f3:fe:7c:d4:e8:56:80:e3:34:49:46:b3:2d:00:a0:0d:
95:4e:46:28:4b:a5:45:b2:f7:9a:6a:24:26:6e:80:2e:08:c0:
f4:1e:a8:25:b0:52:1e:c7:90:02:ae:b6:99:b8:d6:2f:c0:df:
2b:17:d6:82:eb:ce:91:01:6d:5d:c9:d7:b7:76:94:41:5c:ad:
17:6a:0c:74:86:7e:52:de:5e:b1:d2:17:70:8e:12:81:f7:d8:
a8:a6:5f:c9:f8:37:05:84:ec:d9:36:f7:b8:16:10:1b:1d:e0:
7a:6c:7b:a2:f3:9f:bf:a8:df:3d:8f:66:81:35:6d:d0:00:0d:
74:b6:84:23:bc:2f:1c:c4:4f:0f:b3:83:78:2d:88:36:9b:f7:
6e:c9:e6:ce:29:a8:fc:dd:8d:81:69:17:30:76:4a:a8:11:14:
7f:46:92:f0:5f:c3:45:37:e0:7a:1d:a5:7a:33:f7:03:b3:4c:
bd:61:aa:69:70:76:9a:ce:da:79:e5:63:2a:47:39:5f:79:1f:
57:f1:43:8a:e5:59:d6:94:ec:d8:81:9c:a1:17:da:db:51:f1:
98:fa:ab:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 16:48:19 2024 by rpki-client on console-fra.rpki-client.org