Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/Y4hY0nQ-fXNqkKh1oegneMKb-wU.roa
File: Y4hY0nQ-fXNqkKh1oegneMKb-wU.roa (raw, json)
Hash identifier: eoR7Ggh1co1WRqwad86pAMHH1KCC2f79WQOMosQg+Sk=
Subject key identifier: 63:88:58:D2:74:3E:7D:73:6A:90:A8:75:A1:E8:27:78:C2:9B:FB:05
Certificate issuer: /CN=4540daa4c245a4725f38041402b6bffded15ea78
Certificate serial: 019233155423FB8100107890B54E61068374
Authority key identifier: 45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/Y4hY0nQ-fXNqkKh1oegneMKb-wU.roa
Signing time: Fri 27 Sep 2024 10:44:48 +0000
ROA not before: Fri 27 Sep 2024 10:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201746
IP address blocks: 178.236.125.0/24 maxlen: 24
185.49.168.0/22 maxlen: 24
193.5.150.0/24 maxlen: 24
217.61.224.0/22 maxlen: 24
2a01:9f20::/37 maxlen: 37
Validation: Failed, certificate revoked on Tue 12 Nov 2024 10:06:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:33:15:54:23:fb:81:00:10:78:90:b5:4e:61:06:83:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4540daa4c245a4725f38041402b6bffded15ea78
Validity
Not Before: Sep 27 10:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=638858d2743e7d736a90a875a1e82778c29bfb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4f:f8:e2:fa:1f:8b:bf:49:4c:15:52:5e:ba:
c5:0d:93:6a:05:49:70:69:63:e0:83:30:3c:3f:a2:
ed:68:13:91:2f:06:97:0e:2f:9b:64:89:04:98:e3:
f3:c7:19:54:0a:4c:5d:3a:5d:31:ba:45:1d:ce:47:
dd:4b:ab:4d:4b:1e:de:b2:b2:ab:db:6a:d4:6c:7d:
f7:32:9c:4d:99:81:ba:b0:5a:60:d1:8c:2f:db:29:
d1:cf:98:df:4c:08:76:d7:a1:f9:bc:37:25:f5:0f:
47:16:4b:a9:8b:d1:37:56:8c:f8:34:b4:9c:b3:8c:
31:73:9a:d0:7f:7a:15:dd:7a:9d:dd:92:45:bb:1d:
61:a5:36:d2:2e:3e:e4:d7:6a:ec:07:73:f9:8a:fe:
09:82:05:ae:70:19:06:e5:2d:fb:03:03:d5:f7:e8:
bd:aa:90:40:00:84:9f:ce:fb:9c:e7:6e:2d:fb:a4:
a1:a3:1e:89:96:02:95:b3:c7:55:32:f5:1d:59:d7:
9e:d4:b9:68:22:7a:0c:a4:bb:d0:da:de:04:4c:29:
5b:62:b6:7a:2b:ed:ab:30:55:8f:f3:3f:f9:3f:31:
3f:1f:8a:0d:25:9a:e4:f5:9e:25:89:01:bb:5a:f9:
2c:45:b4:42:d3:de:c2:07:a8:19:04:71:8d:73:51:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:88:58:D2:74:3E:7D:73:6A:90:A8:75:A1:E8:27:78:C2:9B:FB:05
X509v3 Authority Key Identifier:
keyid:45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/Y4hY0nQ-fXNqkKh1oegneMKb-wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.125.0/24
185.49.168.0/22
193.5.150.0/24
217.61.224.0/22
IPv6:
2a01:9f20::/37
Signature Algorithm: sha256WithRSAEncryption
8e:f3:5d:0c:84:a3:27:1d:71:94:78:41:4f:25:77:f3:5c:ca:
b8:14:59:b3:43:1c:4c:d9:3c:4f:2f:5a:7f:64:a7:84:ef:94:
84:ab:6e:94:8f:e6:c8:3a:33:32:47:a9:5f:76:8a:95:d6:e8:
17:8d:f8:57:19:71:cc:91:d9:51:ac:70:9e:d0:27:c1:64:aa:
48:78:55:11:b5:a3:d6:42:e7:c7:f6:8c:c7:29:e0:bd:e7:66:
f7:9c:dc:18:0b:02:3b:a6:b9:4e:9f:6c:90:1a:06:18:ca:da:
0c:5e:52:8d:b1:92:8e:37:8f:3c:8a:55:e3:18:26:5d:8c:da:
9c:27:36:88:b6:d1:be:d8:fe:02:74:33:a3:3b:22:b4:4d:2c:
4c:bc:db:c0:26:f8:65:d4:44:d9:92:1a:4d:ba:4a:13:25:ff:
28:46:0a:22:32:a2:a8:33:c2:cc:0f:07:4a:e5:36:c1:70:6b:
6e:32:f3:87:21:26:c3:a9:1f:c0:0e:06:14:a9:f3:17:9e:6b:
89:cc:e5:bc:23:93:9f:03:cc:f6:4f:4b:25:8d:16:70:cd:41:
97:70:51:98:5e:8f:15:7d:c1:bc:1f:d5:17:92:2b:8d:f0:96:
f8:d2:b4:00:e8:8a:77:24:78:f1:b1:bc:16:ec:49:2e:a4:a9:
cf:55:26:8d
-----BEGIN CERTIFICATE-----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Generated at Tue Nov 12 13:08:38 2024 by rpki-client on console-fra.rpki-client.org