Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/DsSDWOyPVxQ3l36vtMTJP_80uRw.roa
File: DsSDWOyPVxQ3l36vtMTJP_80uRw.roa (raw, json)
Hash identifier: 3gbbUjzW1pAdCJnctoe/bP47EthRDPcl5sk+ODu5Y/g=
Subject key identifier: 0E:C4:83:58:EC:8F:57:14:37:97:7E:AF:B4:C4:C9:3F:FF:34:B9:1C
Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial: 018C8E35C75F166122F607E0CDF4D96F17EE
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/DsSDWOyPVxQ3l36vtMTJP_80uRw.roa
Signing time: Thu 21 Dec 2023 21:08:58 +0000
ROA not before: Thu 21 Dec 2023 21:08:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 188.244.122.0/24 maxlen: 24
45.14.174.0/24 maxlen: 24
45.80.111.0/24 maxlen: 24
45.80.109.0/24 maxlen: 24
80.94.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8e:35:c7:5f:16:61:22:f6:07:e0:cd:f4:d9:6f:17:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Validity
Not Before: Dec 21 21:08:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ec48358ec8f571437977eafb4c4c93fff34b91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:81:85:9f:1c:5c:45:61:20:ff:f6:2f:f7:
54:85:ee:5d:9e:a7:c1:57:bb:21:ff:8e:b1:d0:3c:
51:80:5a:86:fe:1f:e8:d5:bf:4c:8a:80:b2:cf:84:
d4:0f:24:95:cf:d7:dc:c8:75:4d:5f:ad:9f:d9:24:
c2:34:91:f8:ab:54:7f:9a:c2:95:6a:9d:e9:83:c5:
08:56:44:9c:9e:f3:83:c6:02:eb:bb:a7:85:d0:ea:
92:e3:a3:42:b1:70:b7:4e:e8:fa:8f:d3:ac:8f:73:
65:eb:58:96:c4:61:43:02:ce:52:96:cd:fc:92:25:
4d:04:92:d3:b4:b5:ba:f6:cc:1a:1e:02:a8:f9:1b:
65:38:76:c9:26:08:14:2d:5c:fa:aa:1b:d0:cc:4f:
b0:15:df:51:94:04:b9:bf:69:70:2d:49:81:19:01:
c7:af:52:c6:2a:2c:2d:a2:fa:71:00:3f:2c:a0:4d:
0b:c9:40:a3:10:10:7d:06:ec:b1:13:ac:95:2f:e5:
eb:3a:2e:fb:84:7d:ed:36:fe:e3:b9:fc:b7:ec:86:
40:02:47:ed:77:dc:3a:4e:6e:74:c6:50:98:22:8f:
d3:19:65:0d:83:30:da:08:37:1c:94:07:f8:f0:62:
dc:6f:74:94:36:e6:aa:ba:fb:61:8b:05:22:e8:dc:
1c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C4:83:58:EC:8F:57:14:37:97:7E:AF:B4:C4:C9:3F:FF:34:B9:1C
X509v3 Authority Key Identifier:
keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/DsSDWOyPVxQ3l36vtMTJP_80uRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.174.0/24
45.80.109.0/24
45.80.111.0/24
80.94.83.0/24
188.244.122.0/24
Signature Algorithm: sha256WithRSAEncryption
69:96:c9:f0:a8:3e:52:18:a0:a9:3a:95:89:74:1a:5c:12:30:
01:0a:f5:b7:b4:85:19:1f:e4:e9:15:36:ff:2a:77:45:e1:b5:
4f:b0:a2:d4:54:7b:ee:8c:04:13:9d:fa:94:74:39:30:dc:8d:
2c:aa:31:22:ea:af:b9:82:74:28:31:a5:f1:0c:63:78:f5:04:
88:54:f5:d5:d9:13:38:c3:5b:86:c5:a7:2b:aa:1c:98:45:fa:
f9:24:58:22:80:76:b6:a3:f8:d7:73:c4:1b:ee:25:a3:d7:ee:
39:59:e9:03:fd:00:02:1a:82:ce:af:7b:35:42:03:c4:c8:d6:
67:99:d7:d5:a9:8b:9b:1e:a7:9e:18:06:91:53:21:9e:6e:55:
5c:62:d3:9e:be:71:c2:16:fa:ef:9c:e8:9b:86:b0:38:5a:af:
4d:0c:01:99:94:83:c5:37:86:e2:1f:4a:4a:ab:57:31:85:1c:
0a:2c:81:70:5b:0d:22:30:64:38:63:66:77:df:b9:6f:89:1c:
32:4d:86:95:b9:4e:23:8f:e6:f0:c6:5a:af:b4:bc:19:b6:85:
5f:c7:98:84:7c:8c:b3:9c:87:3f:c4:f1:a1:67:79:7a:b1:3e:
23:d5:aa:cd:64:48:39:70:63:5c:4e:2a:e5:be:e9:74:62:20:
aa:07:6f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:25 2024 by rpki-client on console-ams.rpki-client.org