Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/jPl6VRlE5fxYIOtnWhNVJj2xtLg.roa
File: jPl6VRlE5fxYIOtnWhNVJj2xtLg.roa (raw, json)
Hash identifier: Z7sJpOgCZf49/6GIObvPOCDK3eZl4BtqdSnVQfohVGs=
Subject key identifier: 8C:F9:7A:55:19:44:E5:FC:58:20:EB:67:5A:13:55:26:3D:B1:B4:B8
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 018B1B8BE7FFA26F413CF67EEFE64DC81D87
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/jPl6VRlE5fxYIOtnWhNVJj2xtLg.roa
Signing time: Tue 10 Oct 2023 21:43:55 +0000
ROA not before: Tue 10 Oct 2023 21:43:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 94.199.7.0/24 maxlen: 24
45.150.51.0/24 maxlen: 24
45.150.48.0/24 maxlen: 24
45.150.49.0/24 maxlen: 24
5.181.15.0/24 maxlen: 24
5.181.12.0/24 maxlen: 24
5.181.14.0/24 maxlen: 24
5.181.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Oct 2023 21:44:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1b:8b:e7:ff:a2:6f:41:3c:f6:7e:ef:e6:4d:c8:1d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Oct 10 21:43:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cf97a551944e5fc5820eb675a1355263db1b4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:f8:11:7b:b2:b0:2a:ce:0e:ab:eb:db:a4:
03:2f:c6:d1:b3:72:ca:cb:53:24:b4:a1:d6:be:9c:
c2:5f:1f:03:38:3f:4c:d0:af:33:2e:a8:bc:96:be:
09:22:92:0f:a5:16:75:9d:21:0c:10:0a:22:e1:56:
15:fe:eb:c7:f2:ed:3a:10:90:97:f0:48:8d:64:50:
34:b1:61:b6:d4:db:e9:76:2f:7b:0b:64:19:de:3a:
95:4f:4b:24:0d:a6:31:a7:4b:e9:98:fd:4e:f2:df:
47:41:a0:36:48:f5:7b:3f:75:ab:f8:a8:7e:d3:ae:
b6:3f:5c:f9:ab:2e:8d:03:4c:79:5c:40:18:26:d0:
22:53:b4:4f:08:39:8f:51:08:7f:b3:92:a0:cc:ad:
25:30:13:99:79:ad:61:5d:ca:21:24:93:a0:8e:83:
9a:8e:e3:be:14:53:1e:a5:cb:95:66:13:68:51:98:
82:65:f6:c4:cd:9d:6a:07:45:a5:88:c1:73:9b:83:
c1:6c:37:39:0b:19:d6:c9:53:63:c9:ad:58:6c:e6:
2c:4b:4f:2c:74:f1:72:c2:af:df:9f:46:ca:d6:0c:
f3:71:50:21:35:ad:88:78:4e:af:ef:51:85:e5:a9:
cd:fe:fd:b8:33:39:7e:30:e0:64:78:c1:c6:da:6f:
f9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F9:7A:55:19:44:E5:FC:58:20:EB:67:5A:13:55:26:3D:B1:B4:B8
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/jPl6VRlE5fxYIOtnWhNVJj2xtLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.12.0/22
45.150.48.0/23
45.150.51.0/24
94.199.7.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:24:0e:50:ba:6c:3f:44:0f:ac:50:82:3e:ae:b2:07:6a:db:
e1:a5:36:03:d9:8e:65:a5:f5:3b:84:0f:e2:b9:43:d4:8c:38:
ab:14:43:91:86:5d:20:06:aa:14:db:a8:1e:30:c6:ec:20:ae:
b8:fa:19:75:ec:86:23:22:c2:3e:39:6c:be:c8:1e:e0:d8:17:
7a:7f:e7:e9:52:ad:61:3b:de:ad:0e:2a:36:61:f3:26:df:92:
b2:9f:eb:74:5d:be:5d:18:30:27:1e:01:c9:6a:9a:77:38:fd:
30:fe:56:97:15:c6:fe:12:55:92:35:f6:27:10:a4:a9:44:3f:
7f:d8:df:b8:21:f1:34:9c:2b:f7:1e:6d:4d:0e:85:d1:fb:b4:
d4:eb:c8:49:35:16:eb:5c:7e:8b:55:66:bf:b3:8b:81:d2:6b:
e8:7d:09:f4:22:74:c2:fa:85:15:b1:ef:41:62:d7:59:15:28:
f1:58:50:15:52:1e:da:82:d8:be:7e:43:69:38:a7:05:b7:9e:
bb:9b:01:fc:bd:0e:72:fb:46:35:d9:c9:9c:0d:4d:8b:04:f8:
27:ef:95:74:de:08:5c:21:bb:e5:18:b5:70:78:b8:4a:ef:ff:
41:8d:d0:d0:86:a9:e3:a0:a0:17:7d:34:66:da:48:f4:7b:4a:
91:bc:96:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:12 2024 by rpki-client on console-ams.rpki-client.org