Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/1-lPNvWgQuewuE26nPXVnO08wxBA.roa
File: 1-lPNvWgQuewuE26nPXVnO08wxBA.roa (raw, json)
Hash identifier: mNA/NBLyVHVJoYEjwrak8Loc811iiVb0v5pASZfs5gU=
Subject key identifier: FA:53:CD:BD:68:10:B9:EC:2E:13:6E:A7:3D:75:67:3B:4F:30:C4:10
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 018CC348E52E7C7E16D61A5952B978B9CE2C
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/1-lPNvWgQuewuE26nPXVnO08wxBA.roa
Signing time: Mon 01 Jan 2024 04:29:43 +0000
ROA not before: Mon 01 Jan 2024 04:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43915
IP address blocks: 87.117.68.0/23 maxlen: 23
194.105.134.0/23 maxlen: 24
194.145.242.0/23 maxlen: 24
195.206.172.0/22 maxlen: 24
185.147.184.0/22 maxlen: 22
147.189.214.0/24 maxlen: 24
217.14.184.0/21 maxlen: 21
109.224.226.0/23 maxlen: 24
178.248.128.0/21 maxlen: 21
109.224.234.0/23 maxlen: 24
109.224.240.0/23 maxlen: 24
147.189.156.0/22 maxlen: 24
185.161.4.0/22 maxlen: 22
87.117.64.0/22 maxlen: 22
144.178.104.0/23 maxlen: 23
144.178.118.0/23 maxlen: 23
94.154.184.0/22 maxlen: 24
193.35.146.0/23 maxlen: 23
176.116.116.0/22 maxlen: 22
212.59.72.0/21 maxlen: 24
91.239.57.0/24 maxlen: 24
194.146.160.0/22 maxlen: 24
213.225.224.0/22 maxlen: 24
217.20.244.0/22 maxlen: 24
79.135.122.0/23 maxlen: 24
185.231.136.0/21 maxlen: 21
185.23.254.0/23 maxlen: 24
45.66.36.0/22 maxlen: 22
144.178.252.0/23 maxlen: 23
2a07:5940::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 12 Jan 2024 09:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e5:2e:7c:7e:16:d6:1a:59:52:b9:78:b9:ce:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Jan 1 04:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa53cdbd6810b9ec2e136ea73d75673b4f30c410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:af:2a:cc:7b:ff:3a:77:24:a9:28:03:3f:01:
6f:03:01:38:e9:7a:e7:27:61:6a:63:94:55:67:f3:
16:8b:d2:a4:59:f1:52:d6:0b:9b:0f:56:d7:88:11:
c4:4f:ad:0d:ba:bc:f2:09:d8:4d:b3:dd:01:e4:38:
a0:a6:20:21:75:03:11:20:19:21:c0:ce:c0:d6:a0:
07:cb:92:12:53:bd:c2:c6:5d:5c:d9:1c:d4:10:06:
13:3b:0f:19:94:53:4e:8c:c1:24:34:b0:be:ce:8e:
57:08:f2:13:91:16:e6:df:7e:2a:43:c8:ce:e1:23:
2a:4c:b2:7a:79:58:1c:83:ca:7d:28:39:22:8a:d1:
77:13:05:40:bf:3a:26:2e:99:a8:80:81:fa:84:db:
66:b5:03:94:9b:c3:11:d3:4b:b3:d7:0a:b0:5d:e1:
ea:d9:a9:93:3e:0b:c1:cd:04:40:36:37:20:58:4b:
a7:86:c1:ad:29:63:6d:a0:7c:23:b6:4b:e4:95:a9:
89:03:dc:9e:9a:1e:86:18:c0:5f:36:4a:65:10:d0:
39:5f:41:9d:fc:07:99:c3:c4:95:1e:3d:74:55:2b:
2c:dc:36:2f:76:fd:0a:21:16:de:cc:bf:ba:ff:d3:
f8:ed:76:5a:e4:65:5a:12:2c:03:1d:c1:d1:4c:b0:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:53:CD:BD:68:10:B9:EC:2E:13:6E:A7:3D:75:67:3B:4F:30:C4:10
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/1-lPNvWgQuewuE26nPXVnO08wxBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.36.0/22
79.135.122.0/23
87.117.64.0-87.117.69.255
91.239.57.0/24
94.154.184.0/22
109.224.226.0/23
109.224.234.0/23
109.224.240.0/23
144.178.104.0/23
144.178.118.0/23
144.178.252.0/23
147.189.156.0/22
147.189.214.0/24
176.116.116.0/22
178.248.128.0/21
185.23.254.0/23
185.147.184.0/22
185.161.4.0/22
185.231.136.0/21
193.35.146.0/23
194.105.134.0/23
194.145.242.0/23
194.146.160.0/22
195.206.172.0/22
212.59.72.0/21
213.225.224.0/22
217.14.184.0/21
217.20.244.0/22
IPv6:
2a07:5940::/32
Signature Algorithm: sha256WithRSAEncryption
96:c8:74:bb:ca:aa:ad:78:cf:5a:44:a3:2e:ea:4b:5a:be:ba:
ee:d5:fa:99:96:f2:c3:fc:94:d3:ea:13:d3:b2:9f:e2:5b:cc:
53:c2:3c:db:8e:72:93:a2:72:6a:d9:43:5c:d5:97:1a:06:51:
a9:7e:2c:53:f8:d8:30:4f:b4:81:b7:9f:44:35:3e:f1:3c:9a:
ce:b7:d5:be:ca:e2:27:77:bd:58:b8:6a:fb:67:e9:f7:86:a4:
f0:d7:ca:75:f4:10:37:fa:db:51:14:74:64:f7:24:10:48:9b:
27:17:94:b5:95:47:82:c5:a1:67:fb:37:cd:93:b3:77:38:b9:
aa:48:86:03:4f:a6:de:81:75:3c:58:dd:f3:dd:7c:5d:11:95:
20:81:b9:bf:09:2f:8b:9b:94:56:7d:3c:1c:7a:2a:79:6c:9d:
4c:bd:33:06:8b:e3:cc:a2:9f:6b:63:5d:ba:be:97:19:ab:e2:
7e:18:8d:51:20:ac:52:00:a6:68:3d:01:cf:f5:71:e2:1e:ad:
11:ed:e9:ae:46:1b:43:9d:d2:3d:a4:8a:17:7f:a4:87:30:3f:
d9:2d:6a:65:c5:dc:cb:c8:9c:6c:87:09:20:dd:8f:18:ae:31:
18:ad:fd:d6:64:e5:6b:65:17:c1:48:cb:2a:7f:72:93:02:5e:
3c:c6:5d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:28 2024 by rpki-client on console-fra.rpki-client.org