Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/1-TxY1y0fQidEcxDIMnRh9Gyh5-8.roa
File: 1-TxY1y0fQidEcxDIMnRh9Gyh5-8.roa (raw, json)
Hash identifier: Ivue8BWf71CHQH59c+zeg/qor55dc0D+fwTtVKUVIaQ=
Subject key identifier: F9:3C:58:D7:2D:1F:42:27:44:73:10:C8:32:74:61:F4:6C:A1:E7:EF
Certificate issuer: /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Certificate serial: 018CCA2A55CB6305A2A556066F409E12D2C8
Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/1-TxY1y0fQidEcxDIMnRh9Gyh5-8.roa
Signing time: Tue 02 Jan 2024 12:33:41 +0000
ROA not before: Tue 02 Jan 2024 12:33:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59869
IP address blocks: 45.84.132.0/22 maxlen: 22
81.22.176.0/20 maxlen: 20
178.22.224.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 26 Apr 2024 11:43:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:55:cb:63:05:a2:a5:56:06:6f:40:9e:12:d2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Validity
Not Before: Jan 2 12:33:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f93c58d72d1f4227447310c8327461f46ca1e7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4f:28:fb:31:4b:29:05:3e:cb:9a:26:6e:5d:
5e:9f:1f:59:7d:4b:38:34:74:ec:a3:b8:83:44:e2:
2e:39:c0:af:96:c8:b4:13:43:d1:d1:df:f1:5e:a4:
9d:39:5a:7b:ae:79:dd:d0:60:81:23:36:27:ac:a1:
1f:af:14:b2:df:30:19:9e:b7:14:c4:b1:1d:88:8a:
6b:5d:91:c2:8a:c8:3d:26:18:7e:92:39:3a:69:ac:
4a:5e:cc:43:b4:33:8f:99:a6:6a:8e:81:07:10:69:
b1:a3:9d:ce:c4:1e:59:b0:78:7c:2b:a6:97:95:c0:
33:ad:83:aa:98:6a:f3:88:49:c1:f0:e3:f2:d6:1d:
77:97:81:65:f8:76:b2:d1:6c:62:48:a7:7d:9e:a8:
26:bd:2c:91:52:bf:88:76:fa:6f:75:18:42:8e:cb:
f7:60:2c:5f:0a:5b:6a:46:4e:76:32:a7:95:31:8d:
d2:0e:57:3e:cd:66:d6:e4:34:0f:20:96:cc:c7:ae:
b3:bf:8d:51:3b:8e:16:f2:17:0f:24:88:76:72:4b:
02:6c:50:31:8b:1a:f4:5e:bd:74:11:1f:88:75:85:
24:7b:60:43:8f:03:25:a9:68:fc:f7:0f:76:21:98:
5e:30:5e:ba:f8:05:0e:26:93:6a:57:25:70:01:3a:
fc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3C:58:D7:2D:1F:42:27:44:73:10:C8:32:74:61:F4:6C:A1:E7:EF
X509v3 Authority Key Identifier:
keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/1-TxY1y0fQidEcxDIMnRh9Gyh5-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.132.0/22
81.22.176.0/20
178.22.224.0/21
Signature Algorithm: sha256WithRSAEncryption
b4:31:1b:d9:d6:aa:8b:86:2a:aa:dc:3d:77:00:bc:7d:9b:0b:
c0:f1:a5:38:9c:50:28:af:cb:4e:53:9b:55:54:7b:30:45:c2:
ec:bb:ae:e5:8d:d6:c6:98:4a:36:45:d6:96:75:d1:a9:97:04:
a7:8c:37:85:35:fc:af:fb:c5:53:d1:c9:9d:fc:f3:4d:58:d1:
f5:7a:b7:65:49:8a:fb:cf:f2:b2:72:e3:c2:3f:9e:0f:be:15:
bc:d4:9b:3c:93:c8:b9:a5:fe:0d:54:1d:88:55:26:87:4b:6b:
b2:00:40:b6:b2:78:c7:20:af:eb:bf:5a:2b:c3:0a:72:94:b8:
ab:16:69:7d:d3:bd:c9:fb:b8:a3:aa:aa:52:13:dd:5b:68:9b:
b2:84:6f:8f:2d:fd:20:e5:12:fe:dd:28:c0:ba:11:a3:e5:ed:
c2:bb:75:0b:4f:65:65:85:3a:ab:fe:1b:de:5a:27:07:20:f1:
b7:28:09:d9:d6:71:b0:3f:27:c6:17:8e:89:1c:9f:a7:35:e3:
ed:ea:e9:02:96:d0:e2:28:80:4e:fa:1f:80:5f:f7:14:17:77:
f3:c7:9e:51:ae:a1:3d:cf:ff:38:d9:bf:54:db:9d:2a:2c:49:
36:47:b8:1e:5b:f6:c8:83:e9:36:cc:fa:b1:7c:6d:1c:3c:f0:
ef:1f:72:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:41 2024 by rpki-client on console-fra.rpki-client.org