Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/Im3u0dtSpFk0qhZsAJTsifa4xIA.roa
File: Im3u0dtSpFk0qhZsAJTsifa4xIA.roa (raw, json)
Hash identifier: c7AgGxEbhJT7blQlEW8EbTBh8oJd6uJvEg5Vio9LU3o=
Subject key identifier: 22:6D:EE:D1:DB:52:A4:59:34:AA:16:6C:00:94:EC:89:F6:B8:C4:80
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 018F35167A4495162AE121A5BC910DF3933C
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/Im3u0dtSpFk0qhZsAJTsifa4xIA.roa
Signing time: Wed 01 May 2024 16:56:56 +0000
ROA not before: Wed 01 May 2024 16:56:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211309
IP address blocks: 46.227.152.0/21 maxlen: 21
81.88.64.0/21 maxlen: 21
82.148.168.0/21 maxlen: 21
82.148.176.0/20 maxlen: 20
89.207.136.0/21 maxlen: 21
109.169.112.0/21 maxlen: 21
178.174.112.0/20 maxlen: 20
185.176.244.0/23 maxlen: 23
185.176.244.0/24 maxlen: 24
185.176.245.0/24 maxlen: 24
185.190.36.0/24 maxlen: 24
2a0a:2780::/31 maxlen: 31
2a0a:2780::/32 maxlen: 32
2a0a:2781::/32 maxlen: 32
2a10:d640::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 10 May 2024 11:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:35:16:7a:44:95:16:2a:e1:21:a5:bc:91:0d:f3:93:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: May 1 16:56:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=226deed1db52a45934aa166c0094ec89f6b8c480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:48:90:d6:27:d6:6f:8c:f0:33:32:3d:28:
05:02:90:f8:3a:b9:32:18:37:08:52:4b:84:dd:51:
a4:0b:09:74:1a:37:e7:2f:60:47:75:f2:9c:6b:a5:
82:2d:53:f0:52:87:5f:32:1a:8e:49:ae:57:f2:8b:
d7:7b:6c:fc:ed:63:1d:19:d4:f1:cc:73:5f:66:10:
2f:a9:87:16:1c:de:d2:99:f1:82:35:7d:4a:21:a1:
32:9e:54:1c:af:f2:be:a7:38:77:be:70:12:c1:34:
b2:3a:9c:90:95:07:22:47:3e:4f:30:90:ea:a7:43:
4f:9f:56:bc:13:3e:ba:40:66:a8:02:81:1d:cd:99:
9a:1f:16:5a:ef:67:33:38:84:e3:fb:9d:d1:07:cd:
0c:4c:1d:bb:bb:27:2c:46:7a:f2:b7:bf:aa:c3:e0:
52:0b:c9:9d:95:94:20:d7:17:a2:02:41:9b:f9:af:
73:c0:e0:79:43:5f:3d:2c:21:06:0b:8d:5e:d4:1d:
a1:76:0e:8e:80:8d:cf:11:b7:69:1e:a5:89:62:25:
a6:b1:69:3d:83:df:4d:0c:48:65:02:eb:dc:f8:60:
a1:c4:d8:21:b8:8f:94:7c:51:b3:33:cc:bd:ab:b8:
19:7c:5b:2e:b3:bf:61:c4:86:52:45:2d:18:9d:70:
ee:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6D:EE:D1:DB:52:A4:59:34:AA:16:6C:00:94:EC:89:F6:B8:C4:80
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/Im3u0dtSpFk0qhZsAJTsifa4xIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.152.0/21
81.88.64.0/21
82.148.168.0-82.148.191.255
89.207.136.0/21
109.169.112.0/21
178.174.112.0/20
185.176.244.0/23
185.190.36.0/24
IPv6:
2a0a:2780::/31
2a10:d640::/29
Signature Algorithm: sha256WithRSAEncryption
3f:5f:32:27:e5:40:7d:a6:20:0f:16:bf:a5:4b:a5:44:08:79:
18:04:3d:1e:50:35:a2:7f:75:6e:70:01:c6:63:aa:c6:b8:0c:
04:5b:b7:3d:41:7d:0a:35:69:39:b8:96:4c:60:20:b7:f6:9f:
4e:99:06:f7:64:a9:87:2a:f3:8b:58:33:89:b4:e2:73:3c:2d:
64:e4:ed:e5:df:77:69:1c:03:a7:7f:eb:5c:ef:c2:7a:f8:57:
77:1b:58:85:b0:a2:46:38:62:e0:f3:d0:84:b8:6e:00:29:48:
8c:11:e2:15:b8:77:69:53:fb:a8:72:6d:ef:18:fd:56:75:44:
59:f3:14:9b:5b:ae:41:f7:9a:ab:35:68:0f:24:59:38:11:ff:
82:7f:93:db:a9:8d:9c:78:4d:d0:c5:bd:6e:c8:08:92:30:fd:
bc:a7:88:09:a7:6e:e1:d2:12:8d:a4:57:34:34:7b:17:d7:fe:
a7:58:e1:1c:57:e5:24:3d:f7:9f:9f:ed:2d:20:34:5d:ae:d8:
ef:4e:c5:58:86:f8:f1:0a:ad:f1:80:87:f1:ce:a9:fe:93:4a:
2c:4a:ce:70:e4:cb:16:92:a1:ba:21:dd:f8:32:03:92:f6:45:
36:1f:2e:54:e8:82:8b:c0:da:5a:3d:40:f6:ac:94:e2:ce:1f:
d6:80:a9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:28 2024 by rpki-client on console-ams.rpki-client.org