Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/jzUuCM93bLf0TOdIXpqrhi9l9ms.roa
File: jzUuCM93bLf0TOdIXpqrhi9l9ms.roa (raw, json)
Hash identifier: TBg4UcyjhWZeRJR4Klex9JS3/CmtG/3W1ACx6ovfH0w=
Subject key identifier: 8F:35:2E:08:CF:77:6C:B7:F4:4C:E7:48:5E:9A:AB:86:2F:65:F6:6B
Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial: 01856ED4A2237F9B849CDE6FB55FE19F417F
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/jzUuCM93bLf0TOdIXpqrhi9l9ms.roa
Signing time: Sun 01 Jan 2023 19:35:07 +0000
ROA not before: Sun 01 Jan 2023 19:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208854
IP address blocks: 45.140.180.0/24 maxlen: 24
45.140.180.0/22 maxlen: 22
2a0e:c5c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:a2:23:7f:9b:84:9c:de:6f:b5:5f:e1:9f:41:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
Validity
Not Before: Jan 1 19:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f352e08cf776cb7f44ce7485e9aab862f65f66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:51:b8:4d:e3:2c:92:0c:52:4f:26:85:03:
65:33:b8:b9:95:db:89:6c:b5:e8:38:b7:11:37:7a:
03:8f:ad:7c:d1:b1:d7:6c:7a:0c:24:a5:2c:6f:ac:
a7:f8:ed:0b:82:be:19:a4:2e:a2:00:8e:57:17:15:
7c:50:ca:b1:8b:a7:13:05:24:b5:2b:52:de:cf:fd:
94:f1:2f:d8:f4:87:33:7b:da:9c:8d:38:01:ce:1d:
44:a7:45:d1:04:f6:5a:9e:b3:9e:00:8d:cc:06:16:
a5:20:a8:ee:78:4c:73:b1:ce:3a:d8:33:62:b2:49:
aa:35:1b:80:f3:b3:ce:69:43:e2:b9:2b:c7:73:3f:
61:44:b5:81:2f:94:50:8f:cc:3b:e0:78:76:f9:e1:
79:ff:67:ce:21:a6:12:15:c4:ee:41:35:b9:96:4b:
a3:fc:54:32:3a:4c:38:75:da:1a:0b:2d:38:ae:be:
3a:3a:d6:37:cd:60:93:9f:fa:2a:19:45:fb:d1:94:
7c:27:10:96:b7:6e:b9:13:b1:08:80:d0:37:de:4b:
7f:3c:4e:b3:4f:bd:e3:68:36:17:dd:46:74:1d:01:
35:a3:9e:d3:35:b0:7b:a1:37:51:7a:06:22:64:41:
f5:de:1b:25:c7:e3:70:44:d3:3c:69:a5:8f:25:87:
7d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:35:2E:08:CF:77:6C:B7:F4:4C:E7:48:5E:9A:AB:86:2F:65:F6:6B
X509v3 Authority Key Identifier:
keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/jzUuCM93bLf0TOdIXpqrhi9l9ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.180.0/22
IPv6:
2a0e:c5c0::/32
Signature Algorithm: sha256WithRSAEncryption
1d:e9:ed:e0:d3:ff:1f:79:66:05:a1:67:f3:83:b4:4e:92:b8:
72:e0:9a:93:e3:e8:5d:60:97:c1:ba:41:ee:b2:b5:3f:c4:a6:
b6:4d:88:fc:99:8b:e7:c7:93:d9:ca:55:a7:fb:3f:ad:26:dd:
ff:0c:c5:04:82:5f:4e:4a:c1:80:91:13:96:fa:eb:c1:2a:76:
89:de:db:50:0c:6e:31:fc:8a:5f:f2:ba:08:d5:a2:17:6c:c6:
60:03:e1:e3:17:cf:18:fd:8f:f9:9b:08:e8:14:c3:a8:d0:a2:
c8:02:cd:7c:ac:13:cb:ef:30:5e:f8:1a:ec:64:1f:44:23:69:
dc:2f:dc:9b:f7:0e:d5:5f:a1:b0:41:6c:91:b4:7e:52:29:16:
b3:78:03:4e:4d:a9:d5:51:17:b7:31:7b:f7:46:4d:81:bf:e3:
a3:ed:0a:1a:42:9b:c4:26:4c:d3:9e:be:87:b9:2a:81:21:c7:
3e:b4:05:c7:16:6a:c5:ef:e0:40:22:45:c7:46:ec:b6:6e:95:
f7:2d:5b:24:a4:c7:ea:39:79:e7:71:44:ae:b3:54:c4:cd:f0:
62:03:c9:cd:49:c9:ad:67:e5:ed:c3:b6:93:59:e4:eb:74:6d:
ff:ec:97:d5:e2:41:ec:34:fe:ce:ea:47:a9:56:db:a1:b3:7a:
d2:2e:4e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:22 2024 by rpki-client on console-ams.rpki-client.org