Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/bJh3rbe1C3ZozNzv7cPoMa5UhVM.roa
File: bJh3rbe1C3ZozNzv7cPoMa5UhVM.roa (raw, json)
Hash identifier: vC4YpU8eJ23rOAn3s2CJ2nX1Fo5KbtidyxZkNuY38Gw=
Subject key identifier: 6C:98:77:AD:B7:B5:0B:76:68:CC:DC:EF:ED:C3:E8:31:AE:54:85:53
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 0189BF6D9A868ABBCF6DCDC3BE8F23387EBD
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/bJh3rbe1C3ZozNzv7cPoMa5UhVM.roa
Signing time: Fri 04 Aug 2023 07:22:58 +0000
ROA not before: Fri 04 Aug 2023 07:22:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43641
IP address blocks: 91.234.198.0/23 maxlen: 24
91.234.199.0/24 maxlen: 24
195.26.86.0/23 maxlen: 24
194.42.206.0/23 maxlen: 24
45.11.56.0/24 maxlen: 24
45.11.59.0/24 maxlen: 24
91.222.172.0/22 maxlen: 24
45.134.174.0/24 maxlen: 24
45.134.175.0/24 maxlen: 24
195.160.220.0/22 maxlen: 24
185.254.199.0/24 maxlen: 24
2a09:2dc1::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bf:6d:9a:86:8a:bb:cf:6d:cd:c3:be:8f:23:38:7e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Aug 4 07:22:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c9877adb7b50b7668ccdcefedc3e831ae548553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:24:85:1c:53:bd:ef:c6:2d:aa:68:e3:98:09:
63:70:7a:3f:9e:92:ca:f4:c7:d7:43:81:42:7f:88:
ba:d9:3b:aa:1a:cb:f1:2d:db:90:21:43:9e:2a:7a:
a2:be:fc:9a:d0:43:ae:92:61:99:53:3f:d2:1f:2f:
da:10:a2:27:0d:01:5b:92:0f:43:f4:5a:68:2c:13:
a3:98:62:31:0d:72:96:3a:e9:86:6c:38:3d:15:a6:
8a:76:45:1c:ee:72:96:4d:58:6c:6a:45:8d:d7:01:
50:cd:a1:5d:21:34:c7:f6:b1:c6:81:85:4a:ec:69:
b7:a9:17:c5:17:5b:f3:e1:c8:c9:e2:1f:b4:fa:6c:
89:a3:77:61:2e:41:19:7c:0e:d7:76:d1:89:42:66:
bc:89:8f:00:7c:0c:68:75:b6:65:92:45:9b:c8:6a:
ba:ec:1e:62:4c:14:d2:19:3d:1c:2c:ba:0a:73:f1:
2b:73:d8:dc:5c:dc:43:5e:f6:c9:d8:5a:f4:c2:25:
83:99:02:23:57:c7:33:84:ba:b9:ad:f0:33:79:10:
3c:d5:b6:53:66:d3:06:ff:42:0e:6b:e1:83:fc:4d:
fa:dd:72:81:52:e2:b4:fa:37:46:7d:e6:8e:3f:82:
e6:32:0e:98:29:4e:76:e6:62:6b:62:ef:0e:f7:04:
16:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:98:77:AD:B7:B5:0B:76:68:CC:DC:EF:ED:C3:E8:31:AE:54:85:53
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/bJh3rbe1C3ZozNzv7cPoMa5UhVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.56.0/24
45.11.59.0/24
45.134.174.0/23
91.222.172.0/22
91.234.198.0/23
185.254.199.0/24
194.42.206.0/23
195.26.86.0/23
195.160.220.0/22
IPv6:
2a09:2dc1::/32
Signature Algorithm: sha256WithRSAEncryption
71:44:c5:d5:2f:47:89:11:6e:36:0c:87:7d:38:7c:54:11:27:
07:cb:22:33:79:7c:61:30:8b:56:59:d2:91:4a:0b:ca:9e:fa:
d0:19:0c:3a:e0:42:0b:2e:41:48:25:48:4b:8e:1d:93:24:45:
2e:51:24:d7:19:2c:e6:df:2d:0d:80:85:34:03:14:98:c9:ee:
43:d3:a9:ba:8c:47:2c:78:28:36:13:19:b9:6f:ef:df:0f:ad:
47:7a:dc:fa:f7:8c:f2:70:4e:74:ac:77:15:07:7c:b8:06:47:
2d:0c:88:6e:ae:83:cd:60:fb:fe:78:9c:fa:5b:36:d4:40:d8:
e0:d9:79:c8:06:00:f7:76:2d:f4:92:ab:33:6b:8a:ae:e5:fd:
c9:8f:06:bc:3e:96:a3:a5:3b:c0:f3:f3:da:e0:d8:76:00:53:
15:73:29:9d:63:31:c6:c2:b3:24:33:ee:ee:a9:98:3a:cc:28:
2d:0a:bb:84:41:e7:f5:cd:d1:30:9f:85:38:cc:01:10:a9:78:
75:bc:20:95:db:31:41:c1:72:9b:54:ac:07:f2:86:52:15:d4:
06:68:63:4e:4a:83:4a:f4:aa:bd:20:07:62:45:ae:3e:ff:3d:
a1:0b:d8:d4:87:22:a5:3e:65:4d:2b:c8:04:29:ad:c7:ae:01:
ae:c1:e1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:53 2024 by rpki-client on console-ams.rpki-client.org