Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/kgDEk9ziUHCvhFhXGsqdyoSJmvY.roa
File: kgDEk9ziUHCvhFhXGsqdyoSJmvY.roa (raw, json)
Hash identifier: hRru0grxP4Asl85Vmad8a6YEmrtBrySJ1uN4+dL4y7Q=
Subject key identifier: 92:00:C4:93:DC:E2:50:70:AF:84:58:57:1A:CA:9D:CA:84:89:9A:F6
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0190FD95171B6079BDF22C4D3A80E49348E5
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/kgDEk9ziUHCvhFhXGsqdyoSJmvY.roa
Signing time: Mon 29 Jul 2024 08:22:04 +0000
ROA not before: Mon 29 Jul 2024 08:22:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35196
IP address blocks: 45.9.73.179/32 maxlen: 32
45.9.73.184/32 maxlen: 32
45.9.73.236/32 maxlen: 32
45.89.65.0/24 maxlen: 24
45.89.66.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.136.67/32 maxlen: 32
94.142.139.0/24 maxlen: 24
185.5.248.0/22 maxlen: 22
185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.250.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.206.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.48.18/32 maxlen: 32
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
185.125.216.0/22 maxlen: 22
185.125.218.0/23 maxlen: 23
185.125.228.0/22 maxlen: 22
185.125.229.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
194.67.192.0/19 maxlen: 19
194.67.194.0/23 maxlen: 23
194.67.196.0/22 maxlen: 22
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
195.47.250.0/24 maxlen: 24
2a09:5302:ffff::/48 maxlen: 48
2a0a:9300:1000::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 06 Aug 2024 12:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fd:95:17:1b:60:79:bd:f2:2c:4d:3a:80:e4:93:48:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 29 08:22:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9200c493dce25070af8458571aca9dca84899af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:91:3a:2a:1e:a5:f3:e7:9f:c3:05:69:ac:e1:
e6:8a:1b:c6:e2:72:dd:8c:19:1a:56:5e:67:62:0e:
0f:e0:30:4b:aa:b5:d6:d8:3e:23:a5:fe:c0:63:d5:
97:51:fe:d7:c0:7e:c7:2a:14:2c:e0:6c:d7:bc:bb:
6e:9e:02:0f:91:fc:14:ce:1d:b6:a5:09:9e:af:80:
92:0a:6e:ee:c5:33:c9:7e:c5:ab:ab:7e:cd:6d:6f:
ca:30:17:31:d4:a6:d2:50:90:d0:2f:16:b8:db:82:
7a:68:a1:cd:f3:bb:e6:ba:7a:80:cc:10:54:c2:b4:
72:f5:79:68:e0:d5:b3:37:1a:52:e5:ea:1c:2e:a4:
0a:21:69:f6:72:ea:0d:83:1b:87:c5:49:42:ce:11:
23:7e:65:1d:ec:66:16:87:34:ce:84:bb:59:6d:26:
e1:45:21:07:cf:ac:17:ea:9d:d4:22:36:40:7a:f2:
6c:25:f4:08:26:e4:18:5c:23:dd:11:d9:4b:3a:46:
45:33:59:58:2f:76:57:61:d3:aa:2f:9a:db:a0:7c:
ce:b0:2e:ff:f2:30:40:69:57:ca:16:3b:81:92:56:
9f:40:77:97:05:a7:6d:54:16:8c:ae:7e:c7:57:ac:
34:23:9d:72:57:4d:bf:b3:86:8f:25:b8:56:59:07:
2a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:00:C4:93:DC:E2:50:70:AF:84:58:57:1A:CA:9D:CA:84:89:9A:F6
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/kgDEk9ziUHCvhFhXGsqdyoSJmvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.73.179/32
45.9.73.184/32
45.9.73.236/32
45.89.65.0-45.89.67.255
45.128.176.0/22
91.217.80.0/24
94.142.136.0/21
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.228.0/22
193.124.176.0/20
194.67.192.0/19
195.47.250.0/24
IPv6:
2a09:5302:ffff::/48
2a0a:9300:1000::/48
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
Signature Algorithm: sha256WithRSAEncryption
8f:78:29:81:74:73:23:4d:fe:0c:c1:7c:9f:5b:19:bd:94:e3:
da:38:f4:fa:82:f9:aa:8d:2b:64:59:ce:36:2f:28:64:e5:72:
09:66:8b:48:55:d4:6d:54:86:c9:2a:cd:32:2f:5c:15:84:e1:
ff:29:4b:3a:43:f6:d4:da:3f:92:d7:b9:6f:cd:c2:5f:1b:cb:
a7:3f:16:02:1a:d9:9b:0a:66:ba:7f:ad:bc:01:c1:c0:0d:b2:
08:df:60:27:ea:e8:d3:af:1f:2f:a4:11:ab:37:84:ea:04:b8:
7f:75:39:9c:10:4b:13:9a:06:ed:14:c9:0c:da:40:a0:f1:eb:
72:63:5f:4a:24:7b:be:e6:1d:91:df:c8:0c:bb:f7:c4:48:17:
23:5d:57:1b:ce:95:2a:49:ae:e3:ca:46:1d:cf:b1:02:84:5b:
8d:04:59:01:b7:cc:13:4b:ff:9b:14:c0:9e:61:47:73:d9:46:
c3:12:a6:07:a9:6e:0f:7f:a2:8b:30:44:9e:74:f9:1e:db:11:
e6:ae:20:e1:af:98:01:7b:55:df:32:19:ac:bb:68:8e:d7:87:
37:8a:9d:e8:fa:94:75:fd:7a:b1:ea:77:b1:2b:07:71:0a:63:
bd:e1:ea:c9:c8:5f:98:fc:8d:b3:04:3d:2e:07:11:4e:ff:8d:
c1:71:0e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 14:11:18 2024 by rpki-client on console-fra.rpki-client.org