Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/Rk2t7PQfTAvjyYfpfABss76FPMg.roa
File: Rk2t7PQfTAvjyYfpfABss76FPMg.roa (raw, json)
Hash identifier: TPBvgr380ZXYzLPZKAOuW3nJp3u33DoKONqrZY1eg5k=
Subject key identifier: 46:4D:AD:EC:F4:1F:4C:0B:E3:C9:87:E9:7C:00:6C:B3:BE:85:3C:C8
Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial: 018CC5006103440F3B9672C2A035F17DA6A1
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/Rk2t7PQfTAvjyYfpfABss76FPMg.roa
Signing time: Mon 01 Jan 2024 12:29:45 +0000
ROA not before: Mon 01 Jan 2024 12:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49100
IP address blocks: 185.129.230.0/23 maxlen: 23
185.129.228.0/22 maxlen: 22
185.129.240.0/22 maxlen: 22
109.125.128.0/22 maxlen: 22
109.125.128.0/19 maxlen: 19
185.129.184.0/21 maxlen: 21
185.129.197.0/24 maxlen: 24
185.129.196.0/22 maxlen: 22
185.129.200.0/22 maxlen: 22
185.129.212.0/22 maxlen: 22
185.129.216.0/22 maxlen: 22
185.82.28.0/22 maxlen: 22
2a03:54a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 03 Apr 2024 11:17:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:61:03:44:0f:3b:96:72:c2:a0:35:f1:7d:a6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Validity
Not Before: Jan 1 12:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=464dadecf41f4c0be3c987e97c006cb3be853cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fc:9d:9a:0f:21:99:10:05:6f:4d:d4:52:20:
9e:7e:10:55:84:aa:0d:04:49:fe:1d:cc:34:3f:64:
8c:3f:91:42:c5:dd:f6:ec:f0:37:9e:ad:3b:33:a0:
5b:ca:4f:97:39:d3:c8:11:0d:28:e1:af:56:fc:d6:
f9:ae:ea:35:cc:e8:cc:e8:f7:18:35:5f:86:68:d1:
99:87:29:d2:8d:35:f1:6f:45:73:22:69:2c:74:60:
87:6c:6f:60:7f:50:9b:e5:4f:22:1f:a6:a4:ea:ea:
92:27:eb:53:56:72:08:7c:74:f6:a5:8d:b3:03:e7:
af:33:59:1d:45:e4:59:b3:ce:2d:82:85:f5:ab:51:
6b:6a:7e:8c:c2:44:3b:e4:6e:ee:d5:03:3b:e2:1a:
78:68:d4:64:b0:76:30:1e:f4:93:21:92:01:d9:cb:
c8:0a:2e:94:14:41:a7:7f:d0:b3:b9:50:0f:fc:02:
08:08:a0:91:a1:8a:20:81:30:35:78:54:9d:6e:7a:
7d:8b:21:be:bd:43:3b:e9:cf:4f:ef:0f:30:4e:9c:
87:2f:55:f3:d3:f8:18:23:5c:64:0e:8d:fd:f0:71:
32:76:26:fd:a3:02:5e:a0:9d:d6:87:fd:2e:ef:a8:
c4:de:c9:b2:2b:1f:4a:87:17:40:bd:05:c3:0e:c8:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4D:AD:EC:F4:1F:4C:0B:E3:C9:87:E9:7C:00:6C:B3:BE:85:3C:C8
X509v3 Authority Key Identifier:
keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/Rk2t7PQfTAvjyYfpfABss76FPMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.125.128.0/19
185.82.28.0/22
185.129.184.0/21
185.129.196.0-185.129.203.255
185.129.212.0-185.129.219.255
185.129.228.0/22
185.129.240.0/22
IPv6:
2a03:54a0::/32
Signature Algorithm: sha256WithRSAEncryption
49:6c:2a:b0:d6:2a:09:ef:93:bd:10:b5:7a:b2:dc:01:74:c0:
a6:bd:4f:e3:0b:69:53:a9:7b:7b:59:a6:30:7b:86:4d:45:27:
f7:0e:ae:6d:7f:d6:45:2e:1b:f7:61:fa:9f:64:f0:72:18:a2:
2a:90:00:37:56:d5:17:2e:6f:71:40:62:e7:b6:f2:54:04:17:
30:2a:f6:e4:93:17:db:0d:0f:da:74:41:df:9f:b0:22:d5:ce:
ce:9d:d9:20:a3:d6:4c:32:75:d3:89:3b:1f:7e:ae:0c:e6:4a:
84:31:41:51:18:3a:ec:d0:f3:20:19:c6:68:90:a1:c3:1d:4f:
de:3c:0a:72:18:63:6d:3e:36:1e:30:77:bc:46:b7:5d:e1:1b:
ee:11:37:4a:54:3d:5d:b4:f9:d6:e4:88:4e:e6:6a:ce:6f:3b:
86:04:ac:ff:a8:38:29:0b:4f:7f:2b:4e:03:1d:06:94:df:41:
46:93:fb:83:31:aa:b1:d8:37:a2:18:26:c6:76:54:24:6e:bf:
bb:dc:88:64:30:0c:a5:90:34:81:4c:b2:18:92:a1:52:02:7c:
e1:ce:a7:73:6a:e4:28:8a:a0:ef:04:fc:35:e7:a9:d9:f5:c3:
cf:72:3b:03:27:c5:cc:bf:69:76:19:66:6a:92:7c:55:49:81:
19:79:66:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:10 2024 by rpki-client on console-fra.rpki-client.org