Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4w8f34zmkVC9Mpu4YhEMNhihnGY.roa
File: 4w8f34zmkVC9Mpu4YhEMNhihnGY.roa (raw, json)
Hash identifier: c22d7XciaXT4nM+gnuNAjAv2bKdn9/0nSMl3FIjSOBA=
Subject key identifier: E3:0F:1F:DF:8C:E6:91:50:BD:32:9B:B8:62:11:0C:36:18:A1:9C:66
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01856FB11BC3F4F81BBB0FB0A70F5A128B91
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4w8f34zmkVC9Mpu4YhEMNhihnGY.roa
Signing time: Sun 01 Jan 2023 23:35:56 +0000
ROA not before: Sun 01 Jan 2023 23:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44066
IP address blocks: 5.183.95.0/24 maxlen: 24
45.86.163.0/24 maxlen: 24
46.30.189.0/24 maxlen: 24
46.30.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:1b:c3:f4:f8:1b:bb:0f:b0:a7:0f:5a:12:8b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 1 23:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e30f1fdf8ce69150bd329bb862110c3618a19c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:79:59:d8:bf:e6:3c:8a:8f:8b:2d:dd:74:
3c:25:51:fd:f6:8b:09:63:0b:1b:89:67:07:18:aa:
bf:b0:c7:79:7d:c1:3d:36:f4:89:bb:10:ab:72:b7:
04:f8:ac:ce:c0:c8:3e:9c:13:3a:c3:fb:7b:3e:6f:
ba:d0:49:a3:9d:4d:bd:15:06:d4:e7:24:eb:67:d4:
1d:71:3f:4b:b5:43:17:98:5a:90:89:7a:21:b7:1c:
63:0d:b1:ae:df:01:55:a4:83:66:ed:f7:5a:78:d7:
6b:8a:0f:4b:ec:a5:c4:83:3f:74:f4:20:6c:60:82:
05:60:d4:51:cf:7c:45:2b:d5:aa:a9:10:07:80:70:
4c:a3:fb:9f:64:df:73:b0:87:cf:a0:9a:fa:67:4b:
6a:f0:a2:12:1c:14:7d:90:8f:24:14:9c:b2:d6:49:
69:3e:f7:a9:e2:7b:04:3d:90:99:34:e5:4d:30:a8:
57:e7:dd:44:cc:63:05:7e:38:24:c8:f6:1b:9e:64:
62:42:26:17:80:d4:2f:14:af:a9:48:f4:f0:3d:9c:
5c:88:84:80:8f:9d:ba:60:ac:a6:29:7b:15:5a:e1:
ca:27:c3:14:ce:ef:64:58:72:85:29:8d:dc:8b:61:
9f:af:81:3e:1e:73:4b:98:4d:c1:47:03:7c:4e:fa:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0F:1F:DF:8C:E6:91:50:BD:32:9B:B8:62:11:0C:36:18:A1:9C:66
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4w8f34zmkVC9Mpu4YhEMNhihnGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.95.0/24
45.86.163.0/24
46.30.189.0-46.30.190.255
Signature Algorithm: sha256WithRSAEncryption
6d:0f:d9:06:e8:e4:ea:f7:37:13:35:ef:77:fc:a8:c5:61:04:
37:38:48:fa:f9:f4:2e:a2:c1:d0:24:17:40:14:a5:68:62:b0:
49:6c:6a:2e:ae:97:8d:3a:e4:39:9b:05:8d:90:9c:75:2c:94:
d9:81:a3:0c:18:7e:83:d9:15:ac:dc:c6:b2:e0:9d:07:66:64:
80:2f:fc:93:05:ec:bb:c4:66:de:94:bc:52:db:b6:83:17:76:
98:fc:83:48:ca:f5:c7:4b:be:1b:a2:6c:9e:96:2d:59:64:43:
ae:70:11:d9:84:06:15:0e:95:94:96:d4:17:80:c3:09:3c:a9:
ca:1a:d0:6c:b6:0e:91:42:39:bb:18:11:ed:28:e1:01:c8:24:
51:97:d8:4a:59:b8:6a:30:80:40:28:08:0c:7b:cb:06:6e:52:
70:e4:ee:ea:f6:75:0a:4a:b5:c5:b7:00:f5:b6:31:bc:bd:62:
bb:b0:73:cc:32:37:eb:bb:95:ce:42:a3:f1:69:0d:cc:6e:a1:
3e:7c:8d:e3:4c:e9:e3:3e:7a:2e:d3:05:47:0f:07:91:cf:f0:
da:24:fb:b7:c9:d8:b3:f5:23:6d:e4:3a:9d:45:2f:ca:e7:3b:
13:1f:6e:94:6b:79:31:a6:83:bb:b4:d3:e1:4a:af:f7:f4:26:
48:90:a1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:48 2024 by rpki-client on console-fra.rpki-client.org