Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/R2ZnkQNwQWnSHh4XLpPwQ7bt1LM.roa
File: R2ZnkQNwQWnSHh4XLpPwQ7bt1LM.roa (raw, json)
Hash identifier: CHIjQFksuobHzZbSf4l84QKcuYBLJo3q4gEf31AkRM0=
Subject key identifier: 47:66:67:91:03:70:41:69:D2:1E:1E:17:2E:93:F0:43:B6:ED:D4:B3
Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial: 018733C88F7C6A96913285DEAA2844E0A5A6
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/R2ZnkQNwQWnSHh4XLpPwQ7bt1LM.roa
Signing time: Thu 30 Mar 2023 18:29:54 +0000
ROA not before: Thu 30 Mar 2023 18:29:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44901
IP address blocks: 185.148.144.0/24 maxlen: 24
185.205.211.0/24 maxlen: 24
185.148.145.0/24 maxlen: 24
185.205.208.0/24 maxlen: 24
185.148.146.0/24 maxlen: 24
185.148.147.0/24 maxlen: 24
109.94.110.0/24 maxlen: 24
94.156.128.0/24 maxlen: 24
45.137.220.0/24 maxlen: 24
185.141.60.0/24 maxlen: 24
45.137.221.0/24 maxlen: 24
2a07:5741::/32 maxlen: 32
2a07:5740::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:33:c8:8f:7c:6a:96:91:32:85:de:aa:28:44:e0:a5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Validity
Not Before: Mar 30 18:29:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4766679103704169d21e1e172e93f043b6edd4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c2:16:a7:41:8a:32:9f:07:99:d3:5f:eb:64:
8c:1b:4b:13:95:c9:a1:0d:a2:99:49:c7:ec:5e:3d:
fb:64:bb:bd:fe:8e:73:0c:9d:6a:d1:d9:09:e9:e1:
ef:e4:2f:24:bb:97:a1:c2:10:c9:65:5c:8d:9f:22:
1f:33:a8:65:4b:f5:2a:d3:1a:5c:5b:2b:6d:2f:81:
d0:58:ae:1b:a6:37:70:a3:a8:fa:a5:1d:e6:0a:11:
e8:6d:0a:13:15:ce:40:ca:45:72:4a:4a:88:33:83:
7d:f7:28:22:73:ba:ce:c8:c3:4c:d0:cf:6d:91:a6:
5c:d8:d3:0c:11:98:c1:69:c7:54:a6:11:1c:16:bb:
ab:3f:04:af:01:d7:a4:2a:ac:10:3f:da:7a:f3:44:
54:0f:76:9c:61:26:3f:7f:d6:eb:44:97:07:a9:cf:
15:cf:16:b3:4a:44:ab:5b:36:a4:a8:05:78:b3:30:
71:b9:c6:d3:7e:6a:49:c8:8a:78:d6:ea:4f:01:6f:
43:83:1c:d6:d7:94:20:28:67:aa:27:c2:eb:be:78:
bb:e1:c4:93:01:17:bc:6d:97:c0:70:54:f0:26:3b:
62:10:56:ff:52:05:19:71:e3:05:bb:70:65:1b:a3:
dc:3a:be:a7:94:17:a6:52:e7:96:64:d1:dc:f9:1f:
25:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:66:67:91:03:70:41:69:D2:1E:1E:17:2E:93:F0:43:B6:ED:D4:B3
X509v3 Authority Key Identifier:
keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/R2ZnkQNwQWnSHh4XLpPwQ7bt1LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.220.0/23
94.156.128.0/24
109.94.110.0/24
185.141.60.0/24
185.148.144.0/22
185.205.208.0/24
185.205.211.0/24
IPv6:
2a07:5740::/31
Signature Algorithm: sha256WithRSAEncryption
69:6f:ec:72:2c:9a:7f:4d:20:9b:ed:4b:67:f6:ae:e5:a8:31:
ce:24:1d:1d:51:3b:15:b2:f8:cb:b9:8c:6a:2e:15:ea:82:ca:
6d:10:22:e1:22:59:ad:c1:b4:8e:64:d6:21:d7:13:2a:79:5e:
fa:15:35:d8:c5:d2:cc:23:33:73:98:87:4d:3e:3a:19:a5:14:
0a:da:87:30:d1:87:0f:f4:90:64:f7:7e:29:e3:ff:c1:7d:6f:
c9:9f:d5:bd:54:97:1d:3b:ba:cf:96:f8:d8:a3:bc:8f:4e:37:
1d:8e:9e:b3:bc:94:37:0c:ed:6e:51:76:e5:58:fb:2b:25:a9:
c0:ab:4c:8b:11:57:0b:d5:42:63:f5:4c:9b:04:c7:ef:ba:0f:
79:49:7f:76:88:26:c7:fd:4d:76:27:1d:39:e9:c3:21:19:74:
96:4d:fe:02:2d:03:50:4a:ba:21:5d:7c:82:f7:78:fd:86:c1:
60:dc:99:12:ac:39:af:d8:bc:e5:37:4c:15:af:dc:38:fd:ba:
3b:a3:2f:d9:0c:20:8e:96:06:25:8f:46:64:6c:1f:ce:e2:2c:
61:ca:d3:13:42:a0:8b:84:08:41:78:4e:c7:c9:67:5f:fc:d1:
55:db:00:63:a3:93:5c:ef:da:dc:62:f0:43:3f:9f:71:34:53:
64:37:8c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:58 2024 by rpki-client on console-fra.rpki-client.org