Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/Rf1Qj2RqIBtpOgWkkujiTB2MQkA.roa
File: Rf1Qj2RqIBtpOgWkkujiTB2MQkA.roa (raw, json)
Hash identifier: Cv1e0sYMuqJkbbOMHJR16aDESoLmu4zrUJNxjZQD014=
Subject key identifier: 45:FD:50:8F:64:6A:20:1B:69:3A:05:A4:92:E8:E2:4C:1D:8C:42:40
Certificate issuer: /CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
Certificate serial: 018CC726F4A5AEA3337DB313CCBFB571021D
Authority key identifier: 4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/Rf1Qj2RqIBtpOgWkkujiTB2MQkA.roa
Signing time: Mon 01 Jan 2024 22:31:08 +0000
ROA not before: Mon 01 Jan 2024 22:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205975
IP address blocks: 212.46.58.0/24 maxlen: 24
176.10.0.0/20 maxlen: 24
80.79.48.0/20 maxlen: 24
147.189.155.0/24 maxlen: 24
2a12:f40::/29 maxlen: 32
Validation: Failed, certificate revoked on Fri 12 Jan 2024 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:f4:a5:ae:a3:33:7d:b3:13:cc:bf:b5:71:02:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
Validity
Not Before: Jan 1 22:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45fd508f646a201b693a05a492e8e24c1d8c4240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bc:ce:f4:f1:ad:eb:b2:0c:14:b0:0e:0c:83:
07:b7:67:f5:0b:54:dd:1e:e6:8e:ba:b1:2f:ea:47:
99:5c:5b:62:51:09:d7:3c:86:c4:17:1b:e6:8e:c4:
d4:ac:92:aa:d8:20:f3:bd:20:48:c2:60:d6:5c:d8:
b6:a3:f0:72:da:36:83:99:13:9d:b4:f8:d2:30:a6:
3d:d2:e0:41:1b:9f:89:5a:c1:24:3c:62:fd:cd:2c:
e6:1b:1c:5b:96:3c:59:70:9f:5a:72:16:20:54:49:
e9:49:a2:8a:b3:be:2b:37:e7:d4:92:6f:24:57:fa:
fa:92:ac:40:c4:a2:4c:d8:e7:41:44:6b:f9:01:55:
c0:e3:9b:4b:0f:47:ad:33:98:ce:5a:8b:ee:f6:e4:
12:d1:58:de:ca:9c:57:4a:80:f0:55:68:ca:a8:1a:
79:ab:f6:8f:34:bd:d8:dd:2a:a9:bf:2f:b8:3f:90:
8b:85:65:00:5d:f2:1c:d3:c9:cf:23:34:6d:9c:26:
1a:56:36:69:20:d9:23:41:1e:8c:1a:32:fa:e5:e8:
c4:e1:35:7c:8a:51:d8:f2:2a:81:15:21:89:cb:61:
45:f3:fe:43:08:62:9c:1a:ef:56:43:01:9b:84:63:
99:7d:ae:8e:70:11:32:8b:60:27:bd:e0:f2:ca:01:
98:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FD:50:8F:64:6A:20:1B:69:3A:05:A4:92:E8:E2:4C:1D:8C:42:40
X509v3 Authority Key Identifier:
keyid:4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/Rf1Qj2RqIBtpOgWkkujiTB2MQkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.48.0/20
147.189.155.0/24
176.10.0.0/20
212.46.58.0/24
IPv6:
2a12:f40::/29
Signature Algorithm: sha256WithRSAEncryption
1e:1d:34:97:39:bf:90:6a:c0:4f:18:f1:79:df:65:96:b0:a2:
43:75:c1:30:a4:0d:c3:bd:1c:46:d8:da:13:7d:6c:27:76:6d:
88:cb:83:08:d0:d3:35:92:61:7b:bf:f1:ee:3a:83:47:a0:32:
74:d8:b0:16:a8:16:39:b0:80:ea:4a:db:4a:73:27:48:03:fb:
23:12:78:54:79:ce:c8:3e:bd:b3:8c:ff:b1:d4:f1:4b:bd:9e:
30:59:9b:77:7a:e3:38:67:37:ec:b7:96:8c:e5:00:bb:36:e0:
b8:e3:45:20:ad:75:8a:66:03:f5:e4:32:dd:e0:83:1d:c5:18:
d7:29:37:8e:8e:9a:e5:02:d2:39:58:60:6b:2f:43:e4:a3:d6:
77:b3:c9:d0:19:19:db:63:00:8f:15:e6:64:89:4f:58:c7:53:
bd:a1:17:5c:40:87:18:4e:2e:2e:30:f2:73:a6:ed:56:57:b2:
71:5b:cd:35:ad:b4:59:29:8a:99:83:5d:76:17:aa:61:ed:f9:
69:23:72:16:c5:9b:26:c8:2f:96:d3:5b:d5:fa:a9:68:f5:db:
05:fb:81:bb:02:a9:e7:0c:33:b2:d5:bf:90:1d:46:41:b7:84:
30:a8:b8:b2:02:df:1e:91:5f:81:cc:76:bf:10:d4:54:1d:81:
db:ba:3b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:45 2025 by rpki-client