Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/nWlrGsCJZXGjLcegtXfzTF8lFyg.roa
File: nWlrGsCJZXGjLcegtXfzTF8lFyg.roa (raw, json)
Hash identifier: lKMoadYirzbCvghGK+NExWsLSU+MG6ynK/HkeajMecg=
Subject key identifier: 9D:69:6B:1A:C0:89:65:71:A3:2D:C7:A0:B5:77:F3:4C:5F:25:17:28
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0190FEE16DBAF97040A389682BCA20BD6392
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/nWlrGsCJZXGjLcegtXfzTF8lFyg.roa
Signing time: Mon 29 Jul 2024 14:25:04 +0000
ROA not before: Mon 29 Jul 2024 14:25:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42864
IP address blocks: 45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.144.0/22 maxlen: 22
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
92.52.215.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
2a05:f5c0::/29 maxlen: 29
2a05:f5c0::/32 maxlen: 32
2a0c:f1c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 30 Jul 2024 13:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fe:e1:6d:ba:f9:70:40:a3:89:68:2b:ca:20:bd:63:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 29 14:25:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d696b1ac0896571a32dc7a0b577f34c5f251728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:70:93:11:f7:f0:b5:42:9b:97:aa:f9:35:fe:
71:81:a4:a7:5d:e7:cb:f6:f9:e6:ab:03:86:bc:8b:
8c:6c:89:4e:7c:8a:df:52:21:0b:e9:fa:2f:33:e9:
55:e8:7b:c9:6b:78:82:d0:45:c4:ec:25:ca:37:b0:
54:b4:a9:fe:20:7b:43:e0:3c:91:32:02:57:19:6d:
bf:fb:57:1f:97:74:8c:89:24:5f:7d:68:1c:c5:4c:
92:9b:e6:90:e7:a2:d6:44:65:02:e9:fa:3d:4a:53:
86:79:b0:34:7f:0d:ed:fd:95:cf:f2:0b:72:8e:e3:
22:14:65:f3:b0:a9:8c:c0:b2:11:28:c2:44:e0:69:
26:e7:21:da:1a:2d:6a:f1:9c:6b:38:1e:47:72:c3:
91:9a:cb:41:5f:10:98:6d:ae:c1:09:69:2e:1b:ac:
63:93:41:15:aa:bc:f8:c9:5c:b9:84:b0:f1:74:29:
16:bb:c0:0e:84:d5:e8:82:ca:4f:cb:13:a2:a9:cf:
e2:10:9b:c0:89:55:d2:10:aa:0f:bb:d1:d4:a3:15:
f8:d1:2f:41:2b:fc:15:84:6b:b4:82:f2:c6:b1:90:
0a:ae:84:63:bb:73:c1:d5:0c:cb:e4:69:d8:d3:f0:
51:cc:1d:57:a6:1d:c6:a4:4a:ac:0e:43:a4:ca:89:
04:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:69:6B:1A:C0:89:65:71:A3:2D:C7:A0:B5:77:F3:4C:5F:25:17:28
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/nWlrGsCJZXGjLcegtXfzTF8lFyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.246.0/23
92.52.208.0/21
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
2a05:f5c0::/29
2a0c:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
24:01:f2:49:00:11:9b:19:16:a9:9d:4c:f4:07:10:8b:97:99:
ed:cb:4b:52:77:74:15:6c:3a:84:83:ac:60:96:6c:c4:42:0c:
a7:8d:a5:9e:f9:4b:20:aa:fa:ab:9f:26:78:2b:c8:93:cc:49:
87:59:c4:f2:65:fa:e1:dc:d8:4c:63:b8:7c:1e:b6:78:da:c3:
cf:75:36:2e:c2:02:c4:87:cb:a5:3c:e7:c7:df:60:62:c7:44:
41:cc:0b:a4:36:f6:a2:3c:db:18:6c:59:af:7b:fc:59:1b:ec:
c7:8f:91:bb:d0:84:bf:d6:1d:8f:fd:4d:47:97:38:1f:cb:68:
1a:d1:24:13:de:6f:b7:0c:83:66:82:3c:6a:fa:0f:16:a9:47:
c1:e7:06:38:1e:44:46:f5:13:4e:8a:ff:9f:8e:47:5e:74:6a:
e5:33:f5:64:0c:46:45:64:7f:c7:09:42:14:ce:77:9a:d5:bd:
a3:10:af:dc:23:8d:3b:05:80:a5:1c:59:91:d3:5d:d4:3d:9c:
20:8e:ec:b5:6c:0d:1a:eb:e3:91:d5:08:66:a0:15:ed:04:bb:
12:82:36:a6:6b:4f:9e:f1:fd:2c:e0:bb:f4:91:01:db:19:09:
51:5f:1c:aa:37:de:1b:68:97:cd:f2:7e:3f:8b:89:6e:c8:b4:
73:ee:92:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 17:42:17 2024 by rpki-client on console-ams.rpki-client.org