Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/1-CQRYeZiI2ElkMQzHXZsZ7YZH8c.roa
File: 1-CQRYeZiI2ElkMQzHXZsZ7YZH8c.roa (raw, json)
Hash identifier: lqV3F0mRdDt3G3hiEneQQSmxPvXP9ND3CoKMbParzF8=
Subject key identifier: F8:24:11:61:E6:62:23:61:25:90:C4:33:1D:76:6C:67:B6:19:1F:C7
Certificate issuer: /CN=4419e02f046e1bfb5927fe731ff725e469599171
Certificate serial: 01856FD4F218DDA54AEED32027219B4FF735
Authority key identifier: 44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/1-CQRYeZiI2ElkMQzHXZsZ7YZH8c.roa
Signing time: Mon 02 Jan 2023 00:15:04 +0000
ROA not before: Mon 02 Jan 2023 00:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51013
IP address blocks: 185.87.12.0/22 maxlen: 24
37.9.168.0/21 maxlen: 24
195.210.28.0/23 maxlen: 24
45.13.137.0/24 maxlen: 24
45.138.184.0/24 maxlen: 24
2a00:4b40::/32 maxlen: 64
2a0e:bb40::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 08 Jul 2023 12:58:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:f2:18:dd:a5:4a:ee:d3:20:27:21:9b:4f:f7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4419e02f046e1bfb5927fe731ff725e469599171
Validity
Not Before: Jan 2 00:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8241161e66223612590c4331d766c67b6191fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:77:46:fd:57:9e:46:73:62:d2:7d:25:b5:
76:57:d9:67:dd:49:78:5f:c4:5b:03:59:ef:eb:f0:
37:00:59:36:7c:89:f9:fc:c4:9d:ee:1e:82:1b:87:
9f:28:ec:62:90:c0:36:26:3e:2d:53:8a:37:bc:9a:
6e:42:5f:67:aa:7d:88:0d:d5:82:ec:5a:2e:ff:ed:
68:47:bb:a7:46:4a:25:f7:96:01:da:ca:17:c9:d4:
6e:2b:00:4d:37:ee:79:ea:8e:7c:00:cf:1e:93:2a:
ab:7b:8c:22:ed:d5:c2:f1:bf:27:84:48:d2:c5:22:
b0:cb:56:d0:6d:8e:53:d1:bf:a4:3a:b1:b2:2b:09:
26:54:84:35:1e:10:3d:64:3b:eb:18:dc:61:18:dc:
49:71:bd:04:da:32:0c:88:79:01:da:3a:0f:38:19:
14:ba:d5:51:54:a2:58:58:3c:f1:a6:6e:b6:94:89:
bd:be:63:8a:c2:07:d1:68:6d:1d:ba:11:30:d1:e3:
fd:a0:00:36:d7:5d:6c:22:a0:e4:ee:fe:33:4e:eb:
41:81:2a:52:4e:69:d8:e5:5d:86:03:c6:68:8b:ff:
96:32:8b:b8:58:7d:8c:16:40:46:33:3e:42:0c:d7:
27:6f:8d:34:77:79:7c:de:9f:23:49:f3:3b:6d:6c:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:24:11:61:E6:62:23:61:25:90:C4:33:1D:76:6C:67:B6:19:1F:C7
X509v3 Authority Key Identifier:
keyid:44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/1-CQRYeZiI2ElkMQzHXZsZ7YZH8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.168.0/21
45.13.137.0/24
45.138.184.0/24
185.87.12.0/22
195.210.28.0/23
IPv6:
2a00:4b40::/32
2a0e:bb40::/48
Signature Algorithm: sha256WithRSAEncryption
8b:2e:f2:49:e3:3b:72:52:db:90:72:d4:b9:7a:27:59:8e:9c:
1c:69:be:6f:80:27:37:be:f8:70:32:ed:f6:d9:c6:50:c6:a6:
4b:c6:35:42:4d:8f:cd:5f:2a:f0:26:36:b8:1d:2f:7b:dd:59:
26:38:09:db:a3:0b:36:3c:62:a3:ac:9f:71:56:44:8e:29:9b:
ee:56:17:17:ba:6a:38:32:0b:49:4b:f2:01:f7:52:dd:df:18:
a7:0b:a1:03:17:01:9a:40:21:df:81:96:b3:0b:12:2f:a8:32:
07:03:c7:64:58:d7:23:50:d9:22:26:c2:63:25:5e:9d:73:c6:
8b:e2:ec:1d:08:86:f6:89:cb:d8:e9:ce:4f:1f:eb:73:a9:5e:
25:37:1f:d9:24:59:56:74:b5:f0:08:60:94:82:b2:1d:13:d8:
cc:2e:b2:c2:38:97:04:13:4f:5c:f4:d3:be:c5:45:50:e3:95:
93:9e:b1:15:9a:0a:79:ee:e9:1e:bc:44:32:e6:5f:7e:71:82:
0c:4e:41:a1:94:14:e1:70:e9:3e:b8:3f:bd:1f:d5:7f:36:04:
76:21:b7:ad:47:5c:0b:63:68:9a:7c:6a:a5:aa:88:c5:40:f5:
29:e2:ac:8d:15:fd:32:e5:52:48:a5:85:b4:eb:9b:30:1c:6d:
7c:a9:a8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:54 2024 by rpki-client on console-ams.rpki-client.org