Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/5vtNRh9xQWG1cK6HiZqPt2iBaW0.roa
File: 5vtNRh9xQWG1cK6HiZqPt2iBaW0.roa (raw, json)
Hash identifier: o4MQZXQOYkqZ+PgqsyP9kzF14XidfAcYIu6ZIYRH1hQ=
Subject key identifier: E6:FB:4D:46:1F:71:41:61:B5:70:AE:87:89:9A:8F:B7:68:81:69:6D
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 018EEC6157399EFA9A6BFCEFAF3366A5200F
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/5vtNRh9xQWG1cK6HiZqPt2iBaW0.roa
Signing time: Wed 17 Apr 2024 14:06:26 +0000
ROA not before: Wed 17 Apr 2024 14:06:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200373
IP address blocks: 45.3.32.0/19 maxlen: 19
65.111.0.0/19 maxlen: 19
95.141.242.0/24 maxlen: 24
104.167.24.0/21 maxlen: 21
104.207.32.0/19 maxlen: 19
2a0a:1f40::/32 maxlen: 32
2a0a:1f41::/32 maxlen: 32
2a13:3f80::/32 maxlen: 32
2a13:3f83::/32 maxlen: 32
2a13:3f84::/32 maxlen: 32
2a13:3f85::/32 maxlen: 32
2a13:3f86::/32 maxlen: 32
2a13:3f87::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 17 Apr 2024 16:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ec:61:57:39:9e:fa:9a:6b:fc:ef:af:33:66:a5:20:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Apr 17 14:06:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6fb4d461f714161b570ae87899a8fb76881696d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d6:db:41:4c:c7:3c:b9:37:e2:61:82:ac:63:
e0:98:d6:4d:fd:c2:02:ee:61:61:32:c3:7f:77:05:
17:4f:1e:38:80:cd:9c:fb:73:9e:48:16:f8:b5:ea:
25:58:fe:bf:ee:90:ed:f6:2a:48:93:68:58:9e:bf:
3b:24:66:00:d4:66:71:ec:01:1a:aa:88:07:f0:75:
41:89:b7:dd:79:a7:4a:1e:2c:56:ff:53:f0:9d:3b:
64:ed:58:2b:b0:f9:bb:ab:7d:44:7d:1a:3f:a1:ac:
95:11:16:33:92:07:7c:7a:1f:12:eb:85:77:13:01:
cf:2f:fe:14:00:c8:15:a9:5c:85:de:7d:cb:13:2e:
cc:98:e5:cf:3c:79:f1:dc:fb:60:92:97:48:68:1c:
bb:40:7f:cd:1a:1c:08:4b:bb:4d:50:59:f6:19:1e:
82:9f:05:fa:08:08:ae:c8:e9:4a:4a:bb:e7:1e:37:
81:36:0f:6a:5d:64:fb:c6:74:5a:67:55:94:8a:e2:
68:9f:86:bf:76:e0:3d:30:db:3d:b2:15:50:d7:43:
87:37:da:62:16:e5:e8:dc:a2:bb:0c:d5:5b:2a:06:
da:87:3e:b2:c6:d8:1d:f5:70:fe:7d:b4:93:bf:2a:
e1:70:36:a5:bf:5f:10:72:7d:d6:59:b2:ef:69:88:
93:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FB:4D:46:1F:71:41:61:B5:70:AE:87:89:9A:8F:B7:68:81:69:6D
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/5vtNRh9xQWG1cK6HiZqPt2iBaW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.32.0/19
65.111.0.0/19
95.141.242.0/24
104.167.24.0/21
104.207.32.0/19
IPv6:
2a0a:1f40::/31
2a13:3f80::/32
2a13:3f83::-2a13:3f87:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
06:dc:e5:88:35:3f:ab:30:ea:ae:f9:89:de:49:cd:5b:3a:c5:
d0:50:3d:44:bb:c4:ed:48:cd:49:82:6e:34:4e:63:cb:e4:0e:
61:17:9b:22:b6:d8:f3:5c:8b:c4:c9:1f:92:d6:38:f7:3f:45:
92:dc:b6:be:71:80:f4:97:ab:54:c1:cd:13:3c:29:89:af:dd:
f5:a1:59:48:fe:85:c8:85:cd:ad:04:ea:83:cd:7d:33:13:68:
06:95:15:65:22:0c:4a:69:18:d7:fa:2b:5d:f2:2a:dc:d1:b3:
b0:6e:64:51:ea:55:6f:68:d8:32:25:8a:4d:c4:a8:69:04:3c:
57:81:53:a4:76:b0:de:3b:2f:58:03:0a:a3:f8:9d:b0:86:da:
04:98:a1:42:6b:6d:f8:40:c7:21:54:7d:d3:00:ca:5c:b3:ce:
5d:90:76:d3:38:ef:5f:d5:8d:91:3f:c3:42:f6:1b:7b:65:72:
da:49:79:b3:b9:63:d8:2e:d2:75:0c:52:86:06:e3:f8:cc:c8:
dd:68:1b:27:66:7e:9b:f1:d7:c9:1a:8e:a3:a9:06:85:6a:2f:
1e:cb:2f:a4:75:68:52:60:ce:64:f0:e6:24:4b:ea:b5:5f:50:
86:15:78:76:82:83:06:35:14:f1:27:84:bb:c6:2f:31:c3:cf:
14:7c:f3:81
-----BEGIN CERTIFICATE-----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=
Generated at Wed Apr 17 20:28:56 2024 by rpki-client on console-ams.rpki-client.org