Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/VIoaK99m4YDw_0LlCRLQr7gRZhY.roa
File: VIoaK99m4YDw_0LlCRLQr7gRZhY.roa (raw, json)
Hash identifier: /57KQsARDv8l5YAX62TvTPk7YyBIaElQC6hnkHN3+ms=
Subject key identifier: 54:8A:1A:2B:DF:66:E1:80:F0:FF:42:E5:09:12:D0:AF:B8:11:66:16
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 018EA46D385D565062D3B54D186CB5B09BDF
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/VIoaK99m4YDw_0LlCRLQr7gRZhY.roa
Signing time: Wed 03 Apr 2024 14:46:45 +0000
ROA not before: Wed 03 Apr 2024 14:46:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43915
IP address blocks: 45.66.36.0/22 maxlen: 22
62.169.148.0/23 maxlen: 23
79.135.122.0/23 maxlen: 24
87.117.64.0/22 maxlen: 22
87.117.68.0/23 maxlen: 23
91.239.57.0/24 maxlen: 24
94.154.184.0/22 maxlen: 24
109.224.224.0/22 maxlen: 24
109.224.224.0/23 maxlen: 23
109.224.226.0/23 maxlen: 24
109.224.234.0/23 maxlen: 24
109.224.240.0/23 maxlen: 24
144.178.104.0/23 maxlen: 23
144.178.118.0/23 maxlen: 23
144.178.252.0/23 maxlen: 23
147.189.156.0/22 maxlen: 24
147.189.214.0/24 maxlen: 24
176.116.116.0/22 maxlen: 22
178.248.128.0/21 maxlen: 21
185.23.254.0/23 maxlen: 24
185.147.184.0/22 maxlen: 22
185.161.4.0/22 maxlen: 22
185.231.136.0/21 maxlen: 21
193.35.146.0/23 maxlen: 23
194.105.134.0/23 maxlen: 24
194.145.242.0/23 maxlen: 24
194.146.160.0/22 maxlen: 24
195.184.250.0/23 maxlen: 23
195.206.172.0/22 maxlen: 24
212.59.72.0/21 maxlen: 24
213.225.224.0/22 maxlen: 24
217.14.184.0/21 maxlen: 21
217.20.244.0/22 maxlen: 24
2a07:5940::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 07 May 2024 10:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a4:6d:38:5d:56:50:62:d3:b5:4d:18:6c:b5:b0:9b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Apr 3 14:46:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=548a1a2bdf66e180f0ff42e50912d0afb8116616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:15:62:56:79:18:fc:bf:99:7c:67:ea:ca:
73:fb:95:d4:35:23:61:ea:0e:be:7b:a2:8b:eb:52:
41:95:9f:20:44:b0:7f:32:87:0b:29:d1:25:0f:40:
a6:eb:af:be:23:6d:91:89:6c:a7:4b:c0:30:45:e0:
28:29:7a:40:68:aa:7c:8b:a4:7f:7a:dc:73:a1:cb:
26:a7:13:d6:e0:39:6e:f5:5a:0d:63:1e:b6:04:f3:
2b:5a:35:50:05:b0:07:22:22:21:fd:9e:8e:6f:53:
5d:ff:45:41:ed:db:6f:56:88:0b:00:a3:d8:d1:b4:
c6:62:82:e1:ab:53:8d:ed:68:f4:65:c3:ea:98:75:
99:92:f5:7f:3f:64:3e:85:df:55:6c:ed:eb:f1:db:
f3:ff:35:f4:d1:33:2c:5a:32:4b:b8:7f:8f:d8:d9:
35:cc:23:14:27:20:d9:2e:de:f7:64:08:1b:67:ff:
8d:4f:31:a0:64:17:09:78:9b:30:43:85:fd:d4:58:
61:24:e5:48:2f:3e:bb:e4:2b:39:04:e8:b3:b1:6e:
c0:b0:d9:69:11:83:00:be:29:37:2b:61:99:ad:dc:
6d:18:6b:2f:a2:11:d5:7c:88:46:34:a4:49:50:c5:
72:6f:73:77:ab:1c:72:4e:7a:ed:76:e2:be:ff:f4:
2e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8A:1A:2B:DF:66:E1:80:F0:FF:42:E5:09:12:D0:AF:B8:11:66:16
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/VIoaK99m4YDw_0LlCRLQr7gRZhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.36.0/22
62.169.148.0/23
79.135.122.0/23
87.117.64.0-87.117.69.255
91.239.57.0/24
94.154.184.0/22
109.224.224.0/22
109.224.234.0/23
109.224.240.0/23
144.178.104.0/23
144.178.118.0/23
144.178.252.0/23
147.189.156.0/22
147.189.214.0/24
176.116.116.0/22
178.248.128.0/21
185.23.254.0/23
185.147.184.0/22
185.161.4.0/22
185.231.136.0/21
193.35.146.0/23
194.105.134.0/23
194.145.242.0/23
194.146.160.0/22
195.184.250.0/23
195.206.172.0/22
212.59.72.0/21
213.225.224.0/22
217.14.184.0/21
217.20.244.0/22
IPv6:
2a07:5940::/32
Signature Algorithm: sha256WithRSAEncryption
94:53:bb:24:fc:b9:d1:b8:0e:97:d2:d6:30:b8:ed:b4:c6:41:
09:f3:7d:91:a9:73:05:cd:ce:e1:15:ce:39:07:71:fe:8d:25:
c1:cb:88:cb:e6:12:ff:44:f4:fb:35:e0:20:71:36:d8:9c:0a:
06:8d:0f:a7:73:6a:fc:49:9a:ea:88:bd:ad:dd:44:9c:fd:71:
79:2d:5d:fb:fe:c7:b8:e6:16:b5:c4:9e:2b:b7:c1:8c:5a:e5:
df:4c:f7:4a:17:c4:89:26:67:96:d7:c9:80:82:42:50:37:39:
17:bc:d9:56:8c:56:91:c6:8a:77:27:79:71:75:db:16:cd:38:
6e:77:a2:c9:b6:b2:27:b6:b7:4c:a7:48:30:3b:ad:93:ed:88:
34:9e:53:e5:af:44:a0:43:b8:df:39:3b:80:9d:78:d7:ed:71:
7e:a0:56:2f:90:6b:a7:92:20:64:e5:c5:0b:05:3c:2f:ac:a4:
b3:3a:2f:43:59:ce:11:63:14:af:29:95:97:2b:37:be:77:0d:
c6:90:6d:1d:3a:db:06:e1:70:5a:53:31:26:fb:a0:3f:c1:79:
c4:30:c6:bb:95:55:70:48:57:57:e6:35:c3:f6:cf:46:d8:5b:
b5:60:43:5f:f2:02:09:eb:79:f6:88:69:4d:0c:88:0e:ee:d3:
7d:c7:d0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:08 2025 by rpki-client