Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/5kRhdlRqhRn_8psXINfSmXHZ97I.roa
File: 5kRhdlRqhRn_8psXINfSmXHZ97I.roa (raw, json)
Hash identifier: u+wWMinqG6uTLHvWchjWPxyijwHqBsOI8/2KqKIF3vw=
Subject key identifier: E6:44:61:76:54:6A:85:19:FF:F2:9B:17:20:D7:D2:99:71:D9:F7:B2
Certificate issuer: /CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Certificate serial: 018B58F4BD73438E61828889FE899CF8E449
Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/5kRhdlRqhRn_8psXINfSmXHZ97I.roa
Signing time: Sun 22 Oct 2023 19:55:16 +0000
ROA not before: Sun 22 Oct 2023 19:55:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 91.188.219.0/24 maxlen: 24
91.188.216.0/24 maxlen: 24
91.188.217.0/24 maxlen: 24
91.188.218.0/24 maxlen: 24
45.81.142.0/24 maxlen: 24
45.81.143.0/24 maxlen: 24
45.81.140.0/24 maxlen: 24
45.81.141.0/24 maxlen: 24
185.182.190.0/24 maxlen: 24
185.182.191.0/24 maxlen: 24
185.182.188.0/24 maxlen: 24
185.182.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:58:f4:bd:73:43:8e:61:82:88:89:fe:89:9c:f8:e4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Validity
Not Before: Oct 22 19:55:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6446176546a8519fff29b1720d7d29971d9f7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b2:7d:89:28:36:f7:53:07:21:98:fc:10:3d:
db:ed:fb:c8:d3:83:fd:f5:b2:a2:ee:d2:26:43:7f:
99:ae:02:c6:e3:da:22:7b:73:37:ba:b6:61:86:7f:
48:71:e5:1d:25:44:4a:30:b9:8a:8d:80:74:7e:16:
5c:1e:af:61:9f:12:40:5f:3d:c0:4c:6b:ac:80:1b:
54:93:7c:78:ad:35:14:6a:1b:f2:72:4e:84:5c:09:
69:b7:56:6d:f4:2f:1a:bd:4b:01:b7:75:be:07:d9:
4a:b7:a1:48:0a:44:75:52:5e:31:f7:c8:8b:b9:4a:
9b:91:d8:12:4b:69:74:a5:a0:5d:55:79:df:e2:3f:
4a:d6:5c:67:b5:68:a4:f6:aa:1e:ca:6d:3d:82:83:
2c:22:43:95:ad:14:bc:b8:76:57:d7:47:fd:c8:37:
55:d5:a7:a7:4c:46:7a:58:09:1c:cd:76:47:83:f9:
25:e9:84:3b:3f:e1:ae:e5:09:97:69:74:ff:98:a0:
0e:44:5e:2a:4c:eb:51:c0:2e:73:95:1d:21:9f:9b:
38:48:df:84:ab:d7:10:1c:4c:06:3a:fd:d8:ad:39:
08:37:4c:31:2e:41:33:1a:82:7f:6e:11:a8:18:a7:
63:a9:83:e3:9a:a3:9c:7e:b8:bc:0a:09:3f:fb:fc:
45:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:44:61:76:54:6A:85:19:FF:F2:9B:17:20:D7:D2:99:71:D9:F7:B2
X509v3 Authority Key Identifier:
keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/5kRhdlRqhRn_8psXINfSmXHZ97I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.140.0/22
91.188.216.0/22
185.182.188.0/22
Signature Algorithm: sha256WithRSAEncryption
08:a4:1e:ed:2e:97:18:0d:e0:16:9f:b4:1c:29:90:d6:31:af:
13:14:af:ab:d2:92:97:36:41:56:7f:5f:63:4c:79:eb:ad:da:
33:b6:83:9c:b8:63:3f:b2:2b:71:8a:e4:a8:71:c7:6d:c4:51:
a0:d7:b9:68:43:da:74:dc:15:2b:3c:47:ad:8d:0a:37:26:3d:
91:e3:7d:21:33:99:3b:fb:63:00:64:fe:f3:69:bb:eb:f5:33:
c9:11:c6:68:83:22:d5:70:49:1a:08:f0:a1:0e:50:51:6f:3a:
fe:f3:36:3b:3b:55:27:96:4d:59:02:03:20:09:30:ef:7e:c0:
91:02:54:7a:c3:64:b0:60:e3:b8:69:12:94:e5:c1:85:80:d5:
80:0a:9e:dd:23:c4:fe:91:bf:ab:e1:e3:2e:36:c1:09:0b:4a:
8e:83:db:89:5c:62:12:ac:77:82:b4:62:f0:f5:a1:57:71:e1:
a9:35:f2:b8:2f:6d:cd:fd:9d:ce:c3:2c:5d:d9:fa:cd:59:b8:
96:0c:2c:b7:22:fa:92:e0:64:1d:3a:92:2a:12:4d:3b:e3:54:
8b:cd:63:48:1f:14:5e:34:37:96:2a:25:cf:64:b6:f8:47:9d:
4d:c9:19:80:8e:1a:32:31:44:95:ff:bb:28:85:93:32:74:26:
61:be:74:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:44 2024 by rpki-client on console-fra.rpki-client.org