Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/vLYu0-aiMXgtsvpY4ApUi1JE3dI.roa
File: vLYu0-aiMXgtsvpY4ApUi1JE3dI.roa (raw, json)
Hash identifier: yvWBPnjErub6hvRpPVUgqmrn1BtueR7KFh4ENAr/9GA=
Subject key identifier: BC:B6:2E:D3:E6:A2:31:78:2D:B2:FA:58:E0:0A:54:8B:52:44:DD:D2
Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial: 018CCA9978A69FEB2158C9C6C8D28EB19FDA
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/vLYu0-aiMXgtsvpY4ApUi1JE3dI.roa
Signing time: Tue 02 Jan 2024 14:35:04 +0000
ROA not before: Tue 02 Jan 2024 14:35:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44901
IP address blocks: 185.148.144.0/24 maxlen: 24
185.205.211.0/24 maxlen: 24
185.148.145.0/24 maxlen: 24
185.205.208.0/24 maxlen: 24
185.148.146.0/24 maxlen: 24
185.148.147.0/24 maxlen: 24
109.94.110.0/24 maxlen: 24
94.156.128.0/24 maxlen: 24
45.137.220.0/24 maxlen: 24
185.141.60.0/24 maxlen: 24
45.137.221.0/24 maxlen: 24
2a07:5741::/32 maxlen: 32
2a07:5740::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 May 2024 19:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:78:a6:9f:eb:21:58:c9:c6:c8:d2:8e:b1:9f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Validity
Not Before: Jan 2 14:35:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcb62ed3e6a231782db2fa58e00a548b5244ddd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:eb:a4:af:38:8a:e3:f5:1d:8a:b4:f3:4f:
e6:e7:ac:69:b1:90:f1:31:6c:b8:9d:e0:7a:ef:56:
5d:8d:2a:6d:44:af:b5:cd:f9:d5:fa:4b:af:c2:d0:
78:27:83:14:dd:f6:c5:3d:34:6f:30:00:60:92:41:
72:30:b9:d8:e7:2f:cd:72:c8:73:0a:d0:73:25:d0:
09:6a:c7:d1:bb:c1:8e:22:9d:48:05:00:7b:39:dd:
78:a5:e4:32:d1:f9:13:5a:59:50:d5:fd:0a:ca:4f:
ae:b7:51:e6:23:9d:76:cb:53:83:d9:cd:c7:e1:0b:
09:33:b9:03:ea:aa:e2:72:7f:56:a6:a2:53:8a:99:
f0:c5:37:32:93:d7:ac:a1:f2:c1:9e:b7:dc:0a:6e:
89:3e:01:2c:5a:32:16:10:86:1f:24:05:52:8e:a3:
1d:1e:85:77:85:77:07:ff:ee:4b:91:c5:53:d3:a2:
23:ee:e8:4a:8d:eb:79:12:9f:94:b8:12:8e:0b:2d:
65:64:2c:d7:9f:20:67:45:82:20:d2:09:95:e7:78:
78:ba:13:2f:86:1a:a6:f9:b9:f8:8f:e1:6a:3b:b3:
5e:da:90:40:fe:1c:9e:3a:c0:2a:e6:5a:77:e1:a4:
fe:95:04:69:8b:32:44:97:be:19:3a:68:44:c0:57:
c8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B6:2E:D3:E6:A2:31:78:2D:B2:FA:58:E0:0A:54:8B:52:44:DD:D2
X509v3 Authority Key Identifier:
keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/vLYu0-aiMXgtsvpY4ApUi1JE3dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.220.0/23
94.156.128.0/24
109.94.110.0/24
185.141.60.0/24
185.148.144.0/22
185.205.208.0/24
185.205.211.0/24
IPv6:
2a07:5740::/31
Signature Algorithm: sha256WithRSAEncryption
82:15:90:82:01:41:f3:b4:34:07:eb:9c:49:d2:f7:ab:4d:f9:
0e:65:4d:c0:35:a5:f2:af:48:44:fd:df:90:ff:4d:1a:87:e2:
ab:b1:2a:46:df:e2:19:c2:02:01:dc:e5:4c:06:ae:b7:6f:66:
8a:70:04:1c:d2:cb:c5:40:31:90:ed:2b:87:e9:2b:dd:d1:0b:
83:13:0e:5b:26:cd:fe:93:62:c2:e1:58:26:df:c1:6b:cd:fa:
91:65:c5:ba:09:e2:8f:55:40:82:42:ab:18:8d:7d:c4:db:b4:
4b:29:0f:f1:ff:ab:0d:99:96:08:40:cb:3c:d0:6c:7d:37:e3:
a6:e6:2e:97:dd:88:26:d3:f0:d3:7f:a4:53:d9:5e:60:b8:a6:
44:5a:cd:cf:ca:7c:85:09:95:65:bd:2e:0b:5c:a2:e9:6c:46:
df:83:c9:92:7e:7c:7c:e3:89:4b:d1:cb:78:c5:08:c2:08:99:
e4:0d:3f:5d:6a:d6:ef:a5:e8:34:f4:23:0e:75:c0:0a:fa:f7:
b5:cb:69:1e:cd:26:0c:8d:b1:92:24:8a:db:f2:1e:1b:28:e1:
55:0f:05:33:c6:1e:94:5f:15:19:34:2d:49:e1:75:33:3d:d4:
72:8d:a9:cb:8d:74:27:c0:7d:77:d5:38:f8:a0:7f:7a:24:e1:
36:da:db:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:31:58 2024 by rpki-client on console-fra.rpki-client.org