Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/kjhgZhow7A94jSSD7BfcABGFxyA.roa
File: kjhgZhow7A94jSSD7BfcABGFxyA.roa (raw, json)
Hash identifier: qoWPWfxC6nRuM11JuNyzEj+J4PRJV19RuLGIzySnFIA=
Subject key identifier: 92:38:60:66:1A:30:EC:0F:78:8D:24:83:EC:17:DC:00:11:85:C7:20
Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial: 018CC94D33EC3D8B454379D46E26B3725EBF
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/kjhgZhow7A94jSSD7BfcABGFxyA.roa
Signing time: Tue 02 Jan 2024 08:32:09 +0000
ROA not before: Tue 02 Jan 2024 08:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1241
IP address blocks: 46.12.0.0/16 maxlen: 24
193.92.0.0/16 maxlen: 24
79.103.0.0/16 maxlen: 24
212.54.192.0/19 maxlen: 24
212.251.0.0/17 maxlen: 24
130.43.0.0/17 maxlen: 24
194.219.0.0/16 maxlen: 24
77.49.0.0/16 maxlen: 24
62.1.0.0/16 maxlen: 24
188.4.0.0/16 maxlen: 24
195.74.224.0/19 maxlen: 24
213.16.128.0/17 maxlen: 24
46.246.128.0/17 maxlen: 24
2a02:2148::/29 maxlen: 40
Validation: Failed, certificate revoked on Thu 04 Apr 2024 07:18:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:33:ec:3d:8b:45:43:79:d4:6e:26:b3:72:5e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
Validity
Not Before: Jan 2 08:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=923860661a30ec0f788d2483ec17dc001185c720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e9:93:f0:54:4b:f0:78:e1:95:a4:9e:22:f6:
42:44:fc:4a:e6:0c:4f:04:70:1d:9b:a3:41:79:11:
69:48:6f:f2:2e:a3:e5:fd:52:ae:19:a1:63:c3:49:
09:6a:75:61:57:de:bb:fc:39:3f:c1:8b:3d:5d:44:
1e:84:1e:43:9d:30:b0:c1:7f:c1:59:42:92:2b:a2:
61:79:45:be:8b:ab:09:3d:0e:ba:6e:20:3c:f5:4f:
18:f3:3a:e1:0b:97:58:e8:68:35:08:19:5a:2e:19:
71:68:1f:a2:d0:43:1f:a9:57:a0:97:db:5d:13:b5:
0e:79:34:c6:73:ce:39:5e:1b:27:cb:23:de:4a:c2:
a7:96:41:23:65:ff:66:33:77:fe:53:93:cc:b2:ea:
ce:e1:d6:31:ce:a1:f9:f1:e3:9c:18:e7:90:28:eb:
30:33:45:36:ab:f3:93:15:54:39:8b:37:6c:8b:a6:
e9:94:7b:27:ba:cd:ac:f1:38:19:a9:38:1b:53:c7:
cd:10:d8:3e:e6:95:91:3a:a0:d7:2d:db:66:00:74:
3b:1d:6b:86:62:55:2a:ff:c5:9d:52:81:24:ae:2e:
83:b0:48:28:fd:ea:99:42:88:67:1c:4e:0e:c3:76:
23:22:6d:7b:ab:65:80:6a:97:8e:a3:0e:32:f8:32:
26:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:38:60:66:1A:30:EC:0F:78:8D:24:83:EC:17:DC:00:11:85:C7:20
X509v3 Authority Key Identifier:
keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/kjhgZhow7A94jSSD7BfcABGFxyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.12.0.0/16
46.246.128.0/17
62.1.0.0/16
77.49.0.0/16
79.103.0.0/16
130.43.0.0/17
188.4.0.0/16
193.92.0.0/16
194.219.0.0/16
195.74.224.0/19
212.54.192.0/19
212.251.0.0/17
213.16.128.0/17
IPv6:
2a02:2148::/29
Signature Algorithm: sha256WithRSAEncryption
b0:ad:1f:90:d9:da:14:04:86:7f:63:6c:79:f9:7b:20:c4:5d:
b4:04:04:70:2f:7d:ad:2d:e1:4d:2f:d1:7b:93:f5:5c:2a:31:
e3:70:76:3c:fb:7b:39:e5:65:97:36:52:cb:aa:dd:99:b0:93:
ec:d1:08:99:43:a4:55:ea:44:ad:8f:b3:02:07:88:36:cb:b6:
7d:1c:73:bc:f4:b7:98:36:20:4e:97:33:d6:8c:13:f5:c3:9b:
b5:57:64:81:d6:8b:89:06:b0:2f:11:12:03:b1:ac:9e:f3:65:
16:00:e2:a5:7c:33:93:aa:bb:ba:dd:87:70:3c:77:1e:80:fa:
00:7d:97:62:f8:5b:d1:18:a5:8f:25:5e:7a:5d:2e:6c:47:f9:
e8:a6:e6:6e:fd:2b:6b:4b:89:fd:10:76:ee:a1:c0:0b:42:04:
ac:81:01:1d:1e:8c:b2:5b:23:42:e5:03:8b:b8:fb:79:10:69:
ec:7e:d5:61:de:d9:90:e9:80:0d:b2:03:38:93:fa:84:71:01:
a7:59:cb:6f:6a:d3:56:c3:54:e0:3c:63:45:d5:ed:bf:f1:ff:
d6:0a:c2:97:08:c5:89:58:11:5d:a3:64:59:76:ee:c6:13:53:
3f:74:57:2d:86:7c:de:7e:67:41:66:cd:6b:fc:6a:05:3d:87:
aa:1f:fa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:06 2024 by rpki-client on console-fra.rpki-client.org