Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/M45_LzEWmWP1nZyJgobTNGBqeFo.roa
File: M45_LzEWmWP1nZyJgobTNGBqeFo.roa (raw, json)
Hash identifier: BlJ3TLF9gNFEKqeosZACUcd5FgxOzOi8wh6EJByiENU=
Subject key identifier: 33:8E:7F:2F:31:16:99:63:F5:9D:9C:89:82:86:D3:34:60:6A:78:5A
Certificate issuer: /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial: 01856D0179B7B00CC42E49E637629639507E
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/M45_LzEWmWP1nZyJgobTNGBqeFo.roa
Signing time: Sun 01 Jan 2023 11:04:51 +0000
ROA not before: Sun 01 Jan 2023 11:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198968
IP address blocks: 164.138.212.0/23 maxlen: 23
164.138.208.0/22 maxlen: 22
164.138.215.0/24 maxlen: 24
164.138.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:79:b7:b0:0c:c4:2e:49:e6:37:62:96:39:50:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Validity
Not Before: Jan 1 11:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=338e7f2f31169963f59d9c898286d334606a785a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:8f:d5:17:62:61:9d:af:4f:d3:bc:48:00:
93:e5:4c:bf:00:ab:0e:36:6a:31:73:2d:c5:69:01:
93:ea:da:fd:ec:19:b1:42:92:25:d3:d3:81:70:b7:
e2:b4:a6:f2:c9:8c:a4:8b:f1:4f:fe:12:3c:9c:b7:
ab:d5:4d:f8:09:be:c7:2c:ea:79:41:c8:25:91:36:
00:1d:5b:da:bd:ac:d4:e9:2f:7a:ac:96:96:fb:87:
c4:d1:8f:d7:a5:3b:be:7c:de:81:89:98:61:60:4f:
08:f4:86:f8:a5:0c:79:c8:09:8c:91:4b:6a:2b:a2:
1c:86:18:7b:84:83:d1:4d:d1:33:0e:a4:73:37:d6:
59:64:92:c5:66:68:9f:d5:1f:58:9b:64:75:8e:00:
10:c8:f1:4f:63:8d:5a:b3:19:fa:27:57:61:ff:8b:
2a:7d:aa:2a:bc:51:9a:bc:18:3f:47:39:65:bd:1e:
89:63:81:ba:c5:23:0c:66:dd:99:ec:18:8d:7e:8d:
dc:45:d1:26:9d:9e:3e:73:f0:54:4d:f7:5b:ba:1d:
1d:c6:56:b3:6d:99:3b:8c:86:6e:ae:ba:95:12:cb:
5a:1d:3e:08:a8:5c:92:9e:28:f1:96:aa:6d:2d:4c:
5d:ca:72:c1:74:5c:2b:df:f9:20:a5:82:63:7a:d7:
c9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8E:7F:2F:31:16:99:63:F5:9D:9C:89:82:86:D3:34:60:6A:78:5A
X509v3 Authority Key Identifier:
keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/M45_LzEWmWP1nZyJgobTNGBqeFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.208.0/21
Signature Algorithm: sha256WithRSAEncryption
88:b2:d4:ea:85:f1:13:f7:9d:fa:2f:5e:ec:5c:cb:9e:84:b8:
a1:13:a2:fc:77:3e:e9:c4:30:5c:2f:2d:2a:9a:ca:9b:ab:3a:
cd:6f:11:c3:51:bb:ab:67:3f:5d:3f:b0:65:a3:e7:f1:05:0f:
98:2d:2b:b0:d5:92:61:7f:36:86:1b:ee:89:af:ab:bf:c2:89:
79:52:07:d9:3b:f8:52:a0:5d:96:6c:06:4d:28:fa:41:c9:a0:
2d:2e:8f:1c:72:03:b4:d3:de:ad:f0:94:df:66:98:1f:70:c2:
90:e6:fd:d6:11:dd:46:cb:82:19:a1:7b:13:63:0a:2f:06:c8:
68:a4:d7:55:80:90:98:4d:6b:06:2e:12:75:dc:c6:e6:eb:40:
20:05:7c:94:83:b4:7d:c5:96:ea:0e:15:4e:02:ef:9c:94:cd:
f0:af:ed:5d:c7:fa:b5:1e:7d:57:13:d9:22:a9:63:7a:b8:d4:
31:53:72:99:78:a0:c3:3a:ba:e2:f4:08:8c:ad:64:d6:9c:bc:
94:1f:7f:e3:1d:08:f2:62:e1:ad:a1:06:a9:15:2c:bd:66:9a:
3e:c8:5f:4f:4e:9b:b3:a6:95:ea:46:f0:dc:52:06:39:ed:1f:
06:e1:af:91:64:10:94:d9:e4:84:84:89:ea:0c:57:f8:6f:ca:
00:46:81:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:59 2024 by rpki-client on console-ams.rpki-client.org