Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/81o5C-ppGZUWQgAfol1xp3z6FkU.roa
File: 81o5C-ppGZUWQgAfol1xp3z6FkU.roa (raw, json)
Hash identifier: +EcA/pTCWU33lJhbrwokFMFFOI7xwYw5J0etXdNiCP0=
Subject key identifier: F3:5A:39:0B:EA:69:19:95:16:42:00:1F:A2:5D:71:A7:7C:FA:16:45
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 01901BE471B58BB73074B3595DC0ED172737
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/81o5C-ppGZUWQgAfol1xp3z6FkU.roa
Signing time: Sat 15 Jun 2024 12:34:34 +0000
ROA not before: Sat 15 Jun 2024 12:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200373
IP address blocks: 45.3.32.0/19 maxlen: 24
65.111.0.0/19 maxlen: 24
95.141.242.0/24 maxlen: 24
104.167.24.0/21 maxlen: 24
104.207.32.0/19 maxlen: 24
2a0a:1f40::/32 maxlen: 32
2a0a:1f41::/32 maxlen: 32
2a0a:da40::/29 maxlen: 29
2a13:3f80::/32 maxlen: 32
2a13:3f83::/32 maxlen: 32
2a13:3f84::/32 maxlen: 32
2a13:3f85::/32 maxlen: 32
2a13:3f86::/32 maxlen: 32
2a13:3f87::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 26 Jul 2024 13:08:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:e4:71:b5:8b:b7:30:74:b3:59:5d:c0:ed:17:27:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Jun 15 12:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f35a390bea6919951642001fa25d71a77cfa1645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c7:f3:aa:c0:b8:9c:ca:3c:66:37:cc:79:a4:
9b:79:02:75:5e:e4:08:0a:cf:13:a6:13:2e:c3:98:
5f:d7:f6:e8:c4:d8:63:7a:e0:f3:98:9b:9b:da:8b:
d8:90:fb:6f:1e:8d:d6:72:7b:4e:d7:50:c9:5f:97:
db:9d:38:bd:b6:0b:b9:ac:de:93:7f:26:9b:72:05:
85:ef:5e:0e:c5:9a:7d:e8:47:36:3e:6b:91:62:95:
3a:9f:cd:b3:62:c7:ba:25:e2:17:11:f1:e3:27:31:
2a:ea:de:54:0d:1f:c9:57:31:e7:40:67:1e:da:5e:
94:a4:0b:60:34:d5:6a:80:a6:7c:04:9a:9d:2a:db:
b0:94:4a:e5:b5:27:b9:ae:30:7e:c5:0c:3c:40:ac:
1f:9e:fd:57:61:4d:a9:13:8d:21:10:7e:d7:f1:b9:
50:6e:d6:53:9b:5d:b2:9c:d8:91:51:bb:55:1b:3f:
d3:9e:13:3b:53:61:a9:8f:82:da:e6:d6:08:fc:97:
b5:c1:6d:cf:73:70:f2:fa:c9:f9:ac:1b:73:e5:6e:
b5:6c:85:0e:30:2d:99:60:70:bc:5c:0b:78:1b:9e:
2f:ac:2a:ac:0f:67:e8:cb:0c:94:9b:a0:5a:ab:b9:
10:cb:14:cf:72:11:85:65:a2:41:6d:9c:15:24:b0:
4f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5A:39:0B:EA:69:19:95:16:42:00:1F:A2:5D:71:A7:7C:FA:16:45
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/81o5C-ppGZUWQgAfol1xp3z6FkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.32.0/19
65.111.0.0/19
95.141.242.0/24
104.167.24.0/21
104.207.32.0/19
IPv6:
2a0a:1f40::/31
2a0a:da40::/29
2a13:3f80::/32
2a13:3f83::-2a13:3f87:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
50:fd:c7:d0:42:c6:29:78:5e:40:ca:49:50:81:38:20:80:5f:
04:28:df:1c:c7:db:26:d1:30:e0:25:f7:09:b7:c0:9f:99:f3:
a0:bf:1b:54:7b:b8:94:79:09:c5:bc:24:b7:53:5b:f6:8f:d2:
b4:82:db:81:ec:53:96:ab:2d:0f:78:87:99:cf:55:a9:47:45:
e0:4c:6d:8a:3d:d3:41:1f:a2:69:81:1a:02:ef:a4:03:e4:9a:
fe:bf:e9:25:5f:14:d2:f0:39:c6:6a:fb:b7:36:7a:b1:7a:1d:
10:e7:1e:84:59:fe:15:94:8f:3f:35:b1:70:55:35:9b:2e:6f:
f0:5e:ff:4e:15:91:d6:2d:44:93:bb:b7:1f:d0:b5:e3:c9:9c:
10:dd:21:f4:ae:27:e4:8d:f8:c5:3b:92:80:34:0e:fa:80:f6:
14:78:70:99:b2:de:bf:80:99:4e:03:70:4a:28:46:55:15:d7:
b2:9b:43:80:39:b6:86:1c:78:2d:5f:79:92:17:11:2a:37:b9:
f8:a2:fe:c3:70:b6:a2:81:2f:9c:9f:6d:1b:fd:8f:f2:6e:2e:
95:91:84:46:e1:99:09:ba:b3:7d:a8:f9:50:bb:b9:a5:29:fd:
c6:6a:9d:6b:e3:58:50:cb:5d:a5:f0:6b:1a:5e:0e:c2:de:41:
eb:dc:77:7d
-----BEGIN CERTIFICATE-----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Generated at Fri Jul 26 14:45:33 2024 by rpki-client on console-ams.rpki-client.org