Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/492X-aTY-4JGZziVQg5DbW-LGWI.roa
File: 492X-aTY-4JGZziVQg5DbW-LGWI.roa (raw, json)
Hash identifier: vOVelya+CBbziqW0NouB1q9rypdxRuufitY2WAjM2NQ=
Subject key identifier: E3:DD:97:F9:A4:D8:FB:82:46:67:38:95:42:0E:43:6D:6F:8B:19:62
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0190ABF58CE25422ED97DEC5953BE69E67F4
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/492X-aTY-4JGZziVQg5DbW-LGWI.roa
Signing time: Sat 13 Jul 2024 11:58:34 +0000
ROA not before: Sat 13 Jul 2024 11:58:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42864
IP address blocks: 45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.144.0/22 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
92.52.215.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
2a05:f5c0::/29 maxlen: 29
2a05:f5c0::/32 maxlen: 32
2a0c:f1c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 22 Jul 2024 11:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ab:f5:8c:e2:54:22:ed:97:de:c5:95:3b:e6:9e:67:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 13 11:58:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3dd97f9a4d8fb8246673895420e436d6f8b1962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:93:92:cc:b9:77:ff:35:99:db:52:71:31:e2:
d5:cf:a6:da:ad:43:71:ca:8a:bd:72:25:c1:8d:d8:
bd:88:53:a7:b2:fb:3c:9b:87:8a:65:07:e6:63:92:
8f:98:9f:33:6a:1d:c1:8d:93:05:6b:01:9f:ec:b4:
a0:10:c0:32:42:f4:23:71:04:cc:0e:08:38:1f:67:
83:46:5b:4b:7c:09:1c:12:78:f6:6f:99:0f:fc:56:
bc:cf:aa:bc:7f:ea:83:8f:93:bd:81:10:0d:79:df:
b1:a5:ec:61:c0:1b:1c:b7:b5:9d:c0:93:77:9e:55:
82:a3:07:e3:b6:f3:cf:ba:b7:73:b0:f7:6c:fd:8e:
43:1d:70:da:7e:86:26:8d:5b:ad:fe:2a:da:32:71:
35:bd:0d:7a:7e:c6:ad:69:d0:26:15:d7:89:64:f5:
5a:5d:60:e4:02:54:41:57:95:60:ce:e6:e3:6c:e3:
e5:af:a6:23:99:fc:27:87:eb:9a:94:80:12:85:e0:
7e:a2:6c:0c:32:6b:ab:18:e1:c0:eb:89:65:12:1a:
6e:a2:ce:37:7f:ba:a2:82:1d:81:e5:d4:aa:1a:3a:
51:92:e3:04:4b:b1:65:00:62:0c:4a:51:26:d9:ef:
0e:2e:25:81:af:80:b2:c3:49:cd:56:18:5a:3b:75:
67:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DD:97:F9:A4:D8:FB:82:46:67:38:95:42:0E:43:6D:6F:8B:19:62
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/492X-aTY-4JGZziVQg5DbW-LGWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.246.0/23
92.52.208.0/21
92.52.219.0/24
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
2a05:f5c0::/29
2a0c:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
0d:ce:b3:b3:89:7a:9a:f8:cd:73:01:b0:fa:93:96:f3:c0:8e:
db:d3:e8:fe:31:75:68:5b:91:e9:f5:40:54:a4:2e:84:1a:9f:
f2:65:2d:be:04:55:9b:a4:9c:11:f8:e3:22:f9:0d:78:d1:b4:
5f:30:21:2f:43:af:4a:51:91:db:fa:79:5e:9f:62:82:ac:54:
be:af:7f:f8:88:b1:00:63:d6:6e:84:28:e7:d7:65:87:44:de:
ab:0a:df:a7:97:92:56:6a:da:bb:7b:83:18:83:2b:86:96:a1:
69:cc:73:78:55:bd:2a:2a:ba:7d:12:66:49:59:19:91:b2:0e:
a3:d3:52:13:4b:da:b7:49:f9:f6:9c:0f:a6:9c:fe:2a:db:4a:
33:45:9c:aa:0c:03:11:7a:c6:82:2b:23:fe:b7:13:93:67:38:
fb:d2:42:07:37:c3:5a:f7:6f:14:9c:54:8f:ff:fc:37:05:ad:
2a:e5:53:33:82:87:9c:dc:c6:4d:6a:51:fa:99:8e:bb:51:8f:
74:e0:fc:84:40:6a:89:49:b9:df:f0:8e:c6:1c:9d:3d:71:72:
29:ea:eb:e6:c0:ab:f9:a0:64:a1:50:93:19:48:54:e5:f5:05:
1e:3e:dd:72:b4:68:ef:1c:f4:49:1b:9a:d6:f2:71:94:9a:f4:
71:2c:20:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 14:12:10 2024 by rpki-client on console-ams.rpki-client.org