Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/apzNOl2BSc88lwmh0GxRQfusSTk.roa
File: apzNOl2BSc88lwmh0GxRQfusSTk.roa (raw, json)
Hash identifier: yyaLq086lS6o1lQ0DcXSRXJxdTkAjVfseboPUtHHBY4=
Subject key identifier: 6A:9C:CD:3A:5D:81:49:CF:3C:97:09:A1:D0:6C:51:41:FB:AC:49:39
Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial: 0192579B9BD4A89A34FF13AFFD1C57382C67
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/apzNOl2BSc88lwmh0GxRQfusSTk.roa
Signing time: Fri 04 Oct 2024 12:57:48 +0000
ROA not before: Fri 04 Oct 2024 12:57:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25472
IP address blocks: 37.6.0.0/16 maxlen: 24
46.190.0.0/17 maxlen: 24
62.169.192.0/18 maxlen: 24
79.107.0.0/16 maxlen: 24
80.245.160.0/20 maxlen: 24
81.92.48.0/20 maxlen: 24
84.254.0.0/18 maxlen: 24
91.140.0.0/17 maxlen: 24
109.242.0.0/16 maxlen: 24
176.58.128.0/17 maxlen: 24
185.3.220.0/22 maxlen: 24
2a03:f000::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 15 Oct 2024 09:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:57:9b:9b:d4:a8:9a:34:ff:13:af:fd:1c:57:38:2c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
Validity
Not Before: Oct 4 12:57:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a9ccd3a5d8149cf3c9709a1d06c5141fbac4939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1e:27:d8:f1:eb:8c:5c:d8:14:18:d9:a3:71:
8a:fc:9b:cc:67:a4:31:19:18:29:aa:0e:dc:9a:96:
b3:42:57:15:63:96:a3:c6:ab:a5:2b:ea:b2:3e:4e:
e2:84:f9:f4:2a:52:ed:2b:67:b5:87:d2:4c:2a:97:
a4:56:0a:ab:bc:82:3c:d2:43:8f:f1:df:0a:15:ca:
ac:00:7a:03:fe:1c:b9:3f:cf:8f:49:b2:20:d2:90:
58:15:d9:a6:55:5d:64:31:5a:60:f1:c0:64:70:e9:
b6:b9:b3:79:eb:2d:02:aa:f3:e6:0e:b1:1f:21:2b:
c8:02:6b:5d:f2:33:56:79:78:f5:1f:25:26:e5:2e:
e3:4b:0e:e8:18:2d:a2:2e:91:84:01:90:43:0a:d5:
d8:d6:59:8a:c6:88:88:86:1e:9b:72:c3:90:65:0a:
f7:06:6c:4f:04:42:bd:ac:3e:aa:7c:2c:da:c3:6a:
99:28:0f:19:f8:5c:e6:b0:3c:1f:5d:a9:ff:cd:10:
c9:8e:55:3b:10:65:af:36:1d:8c:5b:98:61:ca:25:
b0:5f:1c:f7:ab:9d:a0:84:2c:32:6e:f2:a0:69:69:
3b:7b:88:dc:8f:cb:32:bb:a9:6d:99:cd:00:c6:e6:
90:55:48:33:51:6a:05:66:0f:ef:f3:50:74:c6:71:
54:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9C:CD:3A:5D:81:49:CF:3C:97:09:A1:D0:6C:51:41:FB:AC:49:39
X509v3 Authority Key Identifier:
keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/apzNOl2BSc88lwmh0GxRQfusSTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.6.0.0/16
46.190.0.0/17
62.169.192.0/18
79.107.0.0/16
80.245.160.0/20
81.92.48.0/20
84.254.0.0/18
91.140.0.0/17
109.242.0.0/16
176.58.128.0/17
185.3.220.0/22
IPv6:
2a03:f000::/29
Signature Algorithm: sha256WithRSAEncryption
8b:a5:e9:db:ad:7d:0b:a5:d6:30:65:18:11:fa:43:2d:2e:c5:
11:b7:21:76:29:86:2a:01:99:4d:f1:fc:40:7c:57:95:12:8a:
99:53:55:49:a3:af:6c:7a:cf:47:4b:29:2e:e2:6a:b3:96:aa:
26:83:5e:28:e9:0b:36:bf:dd:1d:a4:b7:11:21:9b:75:6b:76:
e3:da:16:c1:f1:c5:54:94:e3:76:20:56:bd:be:c6:60:95:63:
c4:79:ba:15:98:65:8c:cb:f5:15:6c:fb:cf:97:03:08:f4:06:
db:1c:00:0d:c4:6f:84:0f:ac:41:89:d8:20:22:a4:81:38:57:
95:ed:c8:f4:2b:59:33:2c:0b:c9:79:b4:6f:be:c8:85:ab:6e:
77:3e:b9:da:02:c2:64:af:5e:4c:8c:32:3f:9a:2e:f6:aa:d2:
d7:c6:12:50:4a:01:01:5b:84:33:1d:60:b2:f9:71:ff:aa:a3:
ee:5a:8c:cb:72:06:b3:9d:98:70:89:78:6e:da:da:86:31:95:
17:d1:62:2c:f2:9c:83:fe:84:3c:d0:82:7f:21:c1:c3:35:7b:
e5:20:23:1e:35:db:85:ee:a6:c0:5b:e6:84:5a:f6:7f:a7:29:
07:03:3b:f9:c8:c8:2f:2f:b8:e8:78:75:79:0a:d0:0c:52:78:
21:9e:d2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 12:18:00 2024 by rpki-client on console-ams.rpki-client.org