Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/ESGfbn10oywmJaM-AgselsDrVhc.roa
File: ESGfbn10oywmJaM-AgselsDrVhc.roa (raw, json)
Hash identifier: 0IAtrRMdswePcmzExTgeBCi+2sAxnCaD/PCmY9WCOZA=
Subject key identifier: 11:21:9F:6E:7D:74:A3:2C:26:25:A3:3E:02:0B:1E:96:C0:EB:56:17
Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Certificate serial: 018612795ED27B941439DC1C4964B6283F5B
Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/ESGfbn10oywmJaM-AgselsDrVhc.roa
Signing time: Thu 02 Feb 2023 14:13:09 +0000
ROA not before: Thu 02 Feb 2023 14:13:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12859
IP address blocks: 45.153.16.0/24 maxlen: 24
45.153.16.0/22 maxlen: 22
45.153.17.0/24 maxlen: 24
45.153.19.0/24 maxlen: 24
45.153.18.0/24 maxlen: 24
45.146.208.0/22 maxlen: 22
45.146.208.0/24 maxlen: 24
45.146.209.0/24 maxlen: 24
45.146.210.0/24 maxlen: 24
45.146.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Feb 2023 09:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:12:79:5e:d2:7b:94:14:39:dc:1c:49:64:b6:28:3f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Validity
Not Before: Feb 2 14:13:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11219f6e7d74a32c2625a33e020b1e96c0eb5617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:9e:41:1f:be:35:e6:ad:d7:e5:0b:1c:a3:
a4:25:6d:bb:3d:85:c6:22:d4:8b:14:1a:f4:16:50:
f1:7d:24:71:8a:8d:24:f0:7e:a2:6c:b3:bb:76:93:
02:fc:dd:b5:d2:99:81:06:19:e4:a0:18:3f:eb:d5:
86:47:19:72:46:b9:f3:74:77:12:a4:51:cb:42:af:
ee:6e:a2:24:fe:e0:62:f1:c1:2e:eb:68:fa:4b:1b:
cd:0b:67:1d:69:d9:03:60:7e:a4:95:d1:ba:17:d2:
50:d3:b1:24:7d:93:5a:ce:2c:0d:cc:74:d6:ed:4e:
3c:7c:6e:ab:d2:37:55:cd:9d:6d:f9:8e:42:60:84:
5d:3c:91:5a:bb:bf:90:84:f7:f0:32:a3:01:1a:51:
54:4e:05:1d:66:62:27:78:42:e9:38:c4:4a:de:a8:
cf:8a:db:2d:f3:3c:3e:1a:83:07:1e:ac:43:3f:25:
cc:6a:c1:80:5b:09:2d:c0:c1:49:a3:2f:93:49:e9:
5a:58:e3:9a:a9:ae:1d:5f:15:c2:23:e8:bf:96:b2:
cd:de:75:6d:86:0e:74:0d:93:1b:f5:af:01:d1:b2:
95:81:b6:72:a2:f7:b6:04:7a:48:57:01:36:8a:43:
9d:9e:77:7e:d5:6f:bb:3e:12:e8:fc:02:5d:18:31:
69:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:21:9F:6E:7D:74:A3:2C:26:25:A3:3E:02:0B:1E:96:C0:EB:56:17
X509v3 Authority Key Identifier:
keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/ESGfbn10oywmJaM-AgselsDrVhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.208.0/22
45.153.16.0/22
Signature Algorithm: sha256WithRSAEncryption
50:f2:52:fc:a5:3b:bf:2f:88:6a:3b:f5:5c:81:1a:3d:a5:0a:
4e:d1:d6:2d:d3:f3:d6:fc:ae:19:2b:81:03:2b:c9:1e:52:5c:
e2:88:3e:da:a8:87:94:92:50:52:98:3e:18:5b:6e:f6:d0:e3:
d2:3a:2f:ac:64:aa:99:a5:4f:23:1a:3f:10:88:f0:d8:62:dd:
80:33:68:e3:ae:78:e4:83:05:f4:ca:ab:56:a1:cd:a6:60:c8:
fb:f9:78:00:e3:cf:6e:60:51:91:c9:3d:71:10:44:86:9f:e3:
76:0f:96:9c:ce:6e:2d:b8:05:86:bd:79:63:4a:29:62:55:82:
aa:d1:89:6d:27:06:18:c4:dd:77:d8:a7:89:88:77:7f:d8:1d:
2c:ca:83:70:e7:cf:7c:9d:58:0d:bd:aa:4b:91:33:4e:fa:c2:
b4:e4:5b:d4:22:07:de:ca:24:4d:4e:4e:eb:70:ab:3b:48:b5:
0b:28:7a:d0:53:06:c6:4b:12:84:ba:9d:2e:da:aa:e8:fc:29:
e1:8e:1e:6a:83:94:da:69:e0:10:14:d6:32:35:11:58:52:41:
e2:93:6c:1c:e5:29:da:ec:f0:a9:01:61:95:56:9d:4d:65:14:
3a:4b:7c:5d:6e:97:f9:a9:e8:eb:63:ce:67:80:73:81:51:3e:
96:d5:a3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:12 2024 by rpki-client on console-ams.rpki-client.org