Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/VRdwGAsX7h2y_EedMDm6DdVtR3Y.roa
File: VRdwGAsX7h2y_EedMDm6DdVtR3Y.roa (raw, json)
Hash identifier: 4Szyq4YhG07qxv7Qjck1L103LD2wYdZV6mWUKdgIIoc=
Subject key identifier: 55:17:70:18:0B:17:EE:1D:B2:FC:47:9D:30:39:BA:0D:D5:6D:47:76
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 018F2986FB4C2621DC60E17009EE10B37DEE
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/VRdwGAsX7h2y_EedMDm6DdVtR3Y.roa
Signing time: Mon 29 Apr 2024 11:04:23 +0000
ROA not before: Mon 29 Apr 2024 11:04:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 45.13.108.0/22 maxlen: 24
45.133.140.0/24 maxlen: 24
45.133.142.0/24 maxlen: 24
91.212.20.0/24 maxlen: 24
91.212.27.0/24 maxlen: 24
193.39.246.0/24 maxlen: 24
195.80.230.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 04:13:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:29:86:fb:4c:26:21:dc:60:e1:70:09:ee:10:b3:7d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Apr 29 11:04:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=551770180b17ee1db2fc479d3039ba0dd56d4776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2a:7d:10:47:5d:fd:fe:05:0e:32:cb:15:a4:
11:6d:c7:5e:31:9c:1d:19:5e:ee:df:36:9e:76:f4:
26:00:e4:c4:10:1f:8a:e0:25:02:71:13:19:e3:28:
ba:4f:35:e6:22:6c:49:9b:1e:3b:be:ff:3e:54:22:
66:8d:76:87:99:61:34:33:85:a4:83:bc:1e:88:bc:
54:0e:e7:cd:1d:e0:af:af:08:59:47:91:78:8c:2e:
82:65:fb:c1:dc:b3:cb:72:61:ad:4d:9e:b8:c1:17:
a9:3f:46:df:5d:07:95:9d:1e:00:b9:e9:6d:67:cc:
c3:25:4d:2e:f2:af:19:77:96:7f:5d:2b:17:b3:04:
a2:94:e3:5a:a9:b5:c4:32:1d:bc:d0:9e:87:53:ad:
53:b4:08:28:91:94:52:87:2c:b3:ea:ab:f3:ca:60:
b0:78:9a:40:a5:2c:c4:fd:be:ee:13:31:66:0d:b5:
b1:5d:97:bf:4a:61:88:84:0f:f0:1f:bc:89:63:6c:
40:f4:b7:73:4c:03:8c:b6:81:24:80:d4:0b:63:08:
8a:0f:9d:67:3e:30:e0:01:08:ac:c1:22:e8:4d:08:
f0:13:a1:b7:56:2d:39:8c:8d:59:df:89:03:a4:81:
56:93:44:65:b8:9d:cb:83:ec:6d:48:c5:53:ce:47:
a0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:17:70:18:0B:17:EE:1D:B2:FC:47:9D:30:39:BA:0D:D5:6D:47:76
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/VRdwGAsX7h2y_EedMDm6DdVtR3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.108.0/22
45.133.140.0/24
45.133.142.0/24
91.212.20.0/24
91.212.27.0/24
193.39.246.0/24
195.80.230.0/23
Signature Algorithm: sha256WithRSAEncryption
99:59:61:f5:56:65:f9:cf:4a:38:f7:33:7a:97:cd:8d:5f:79:
76:e2:3a:a5:5d:e1:91:cb:50:ca:64:1e:4c:68:90:70:a5:cb:
8b:eb:80:d4:dc:73:24:e0:2f:bc:7a:81:5f:5b:d2:d8:03:02:
aa:bb:47:cd:04:39:74:30:fc:e0:49:48:9c:b3:8a:d1:9f:33:
9b:2c:57:86:cf:0d:96:27:85:be:b8:38:40:94:5f:a2:07:28:
e7:35:95:6d:9c:02:1c:f6:7a:33:77:ec:c4:7b:36:1f:f7:56:
63:f9:7a:c3:eb:18:35:10:54:1c:05:0e:47:f0:cf:90:5c:84:
9b:af:90:48:4a:e0:65:89:5b:0d:1a:6f:b6:fa:07:a2:32:6c:
5e:38:c5:66:d4:1f:12:c3:1c:5a:59:be:0c:e4:70:37:79:88:
e1:95:13:fd:8a:6f:8e:ca:6a:5c:29:0e:c6:ea:2f:e6:ab:fd:
e5:7c:69:e0:31:54:b0:97:79:19:02:d2:8d:0c:e3:a0:db:95:
53:80:52:78:5a:16:bb:ec:86:5d:37:d2:83:37:8a:2c:36:67:
a9:b7:83:76:ec:06:2c:90:4c:46:4c:8a:78:dd:8d:2e:f2:1a:
31:0b:0c:ad:96:0b:09:02:6f:93:e3:5e:6f:a6:25:a6:db:8f:
d2:b1:c6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:27 2024 by rpki-client on console-ams.rpki-client.org