Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/mi39g2roS97Gc0lJnblD1poAfuE.roa
File: mi39g2roS97Gc0lJnblD1poAfuE.roa (raw, json)
Hash identifier: q/rcmfJHZVfyMz2/DfN/vSGFD4+d/u2YoCK/y++8ab0=
Subject key identifier: 9A:2D:FD:83:6A:E8:4B:DE:C6:73:49:49:9D:B9:43:D6:9A:00:7E:E1
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 018EBE2DBDC39C7D6B4EA82924232CC95B83
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/mi39g2roS97Gc0lJnblD1poAfuE.roa
Signing time: Mon 08 Apr 2024 14:47:32 +0000
ROA not before: Mon 08 Apr 2024 14:47:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203059
IP address blocks: 45.91.120.0/24 maxlen: 24
45.95.211.0/24 maxlen: 24
91.218.77.0/24 maxlen: 24
134.255.242.0/24 maxlen: 24
185.53.33.0/24 maxlen: 24
185.231.228.0/22 maxlen: 22
185.234.101.0/24 maxlen: 24
185.253.62.0/23 maxlen: 23
194.156.132.0/23 maxlen: 23
194.156.150.0/23 maxlen: 23
2a13:5080::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 16 Apr 2024 17:09:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:be:2d:bd:c3:9c:7d:6b:4e:a8:29:24:23:2c:c9:5b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Apr 8 14:47:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a2dfd836ae84bdec67349499db943d69a007ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:62:83:02:74:85:c2:a8:cc:7f:25:1c:85:35:
06:d4:02:1f:9e:fd:e0:95:ce:04:5b:ae:5e:fa:58:
de:94:6b:f7:ac:2d:c5:04:de:05:34:7e:35:32:c5:
c3:78:82:22:dc:6c:be:8f:9c:74:91:84:60:d9:ba:
16:1d:2f:5c:16:eb:51:51:d2:e5:c8:47:7d:7c:85:
41:e5:78:d4:22:ca:24:a1:78:55:9f:69:e8:65:f7:
2a:38:09:a8:bc:99:9a:98:e2:51:b4:ba:08:b9:02:
95:3d:e0:ae:9c:0d:52:c4:5a:bb:b8:b4:5f:aa:d4:
a3:fb:2c:93:34:a0:3f:bb:31:b8:60:2f:c7:45:81:
ab:59:86:b0:9e:9c:03:51:29:da:70:5c:fa:39:47:
2a:ca:e4:bb:39:38:c9:e8:83:5f:d4:99:0e:a4:ad:
6c:94:42:3a:f7:12:63:eb:53:b8:e8:ba:74:30:f8:
33:29:95:71:37:8d:df:35:2f:28:05:10:47:02:bc:
d7:80:fd:79:27:c4:b0:ac:01:96:21:c9:84:2f:56:
49:51:91:64:c4:15:bc:5c:bb:bc:5f:32:bf:60:2c:
44:86:9a:06:60:da:d4:77:8e:60:34:75:52:fc:30:
df:a2:4e:b5:d8:41:25:2e:57:8f:89:37:79:29:61:
dd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2D:FD:83:6A:E8:4B:DE:C6:73:49:49:9D:B9:43:D6:9A:00:7E:E1
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/mi39g2roS97Gc0lJnblD1poAfuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.120.0/24
45.95.211.0/24
91.218.77.0/24
134.255.242.0/24
185.53.33.0/24
185.231.228.0/22
185.234.101.0/24
185.253.62.0/23
194.156.132.0/23
194.156.150.0/23
IPv6:
2a13:5080::/29
Signature Algorithm: sha256WithRSAEncryption
a8:0a:c4:c4:9a:0a:88:f5:98:d2:36:0e:e7:0e:2c:67:74:d2:
97:a4:25:11:1c:ec:ad:5f:94:47:2d:fe:fc:76:1d:b8:3b:f6:
a8:02:e1:6a:c6:2e:2c:ef:e6:f7:43:cf:30:e9:a3:7c:41:25:
43:5d:68:a5:c9:cd:58:82:bb:d3:46:3e:6e:04:e7:b4:04:29:
2e:bd:ee:24:98:2d:f9:a8:f4:d2:b1:1f:f0:1d:62:f5:02:e1:
86:2a:9e:1d:68:b4:d4:a6:56:5f:59:58:12:11:0a:55:94:34:
c0:95:f1:05:cb:4d:0a:f6:f5:f6:59:f5:80:5a:af:ee:e5:90:
f3:9c:63:aa:54:18:33:65:b7:98:4e:a3:40:88:cb:68:03:26:
2d:fe:74:01:81:73:5e:d7:30:7e:3a:79:d9:0d:cc:b6:80:f6:
1e:a8:9f:2f:5b:b2:29:20:93:f3:2f:26:42:74:85:4a:5c:a4:
c9:93:08:b8:ae:3b:27:62:26:8a:4f:df:54:ad:d8:c9:6b:ec:
98:b3:16:e6:ef:9b:23:43:95:30:a7:f8:4d:30:eb:66:e6:a3:
1f:80:2f:eb:ed:28:00:27:93:82:71:96:6a:46:76:42:41:45:
5f:87:5f:3a:48:f8:12:5d:b0:dd:58:8d:d5:44:4f:08:0d:8b:
b1:fd:d7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:25 2024 by rpki-client on console-fra.rpki-client.org