Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/vr7W67B5OANemRQx0W9nKHAtbVs.roa
File: vr7W67B5OANemRQx0W9nKHAtbVs.roa (raw, json)
Hash identifier: /QF7DSZsjrzAOEAKNdQ5Gzzw/rEjwD3QfMWRT8ra+oM=
Subject key identifier: BE:BE:D6:EB:B0:79:38:03:5E:99:14:31:D1:6F:67:28:70:2D:6D:5B
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018D83B63FAF7274A5FB36B544DE4366BA77
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/vr7W67B5OANemRQx0W9nKHAtbVs.roa
Signing time: Wed 07 Feb 2024 13:16:15 +0000
ROA not before: Wed 07 Feb 2024 13:16:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.86.158.0/24 maxlen: 24
85.117.240.0/24 maxlen: 24
2a09:ff00:8000::/37 maxlen: 48
2a09:ff00:8800::/37 maxlen: 48
Validation: Failed, certificate revoked on Sat 13 Apr 2024 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:83:b6:3f:af:72:74:a5:fb:36:b5:44:de:43:66:ba:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Feb 7 13:16:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bebed6ebb07938035e991431d16f6728702d6d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9f:b8:55:4e:55:7a:e6:b1:b4:de:26:8a:b0:
5a:8c:fc:9e:a1:8d:47:56:7b:34:b8:c4:7c:6d:95:
f2:14:19:fa:3c:21:d6:cf:84:f7:a8:83:df:e5:08:
fa:c7:4f:e8:81:59:93:45:4e:75:90:e9:4c:aa:db:
cc:e6:f9:28:99:02:a3:5e:da:c6:82:d1:c3:0f:f1:
9d:b9:14:cf:97:5b:7b:96:62:fa:68:12:65:2d:4d:
0c:2d:69:56:80:8b:d6:64:74:36:16:4f:ea:63:6d:
e6:20:b8:d5:5f:78:ab:8e:e2:82:37:3c:2f:6b:2b:
2e:a9:25:22:d2:97:80:54:c5:ce:90:ed:85:7f:c3:
69:98:a2:84:6c:a2:28:87:ad:7e:6e:a8:7c:c2:81:
12:5b:b6:d0:ef:c6:fc:f1:00:de:80:8e:28:af:96:
a7:7d:0a:82:9b:4a:b2:48:df:c2:f7:2d:09:52:d9:
2b:ee:5b:76:06:9c:d8:f9:c0:87:1b:d1:ec:92:10:
22:6d:41:33:58:0d:22:00:2d:8e:bd:7e:7e:04:c8:
42:5e:d6:7e:b5:47:f4:82:ea:0a:0b:51:d6:1f:79:
33:03:8f:9a:cb:f6:ea:07:24:72:a2:b3:ec:a2:18:
15:0a:a8:03:be:7c:57:d4:e3:7f:92:ab:03:5e:02:
76:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BE:D6:EB:B0:79:38:03:5E:99:14:31:D1:6F:67:28:70:2D:6D:5B
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/vr7W67B5OANemRQx0W9nKHAtbVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.158.0/24
85.117.240.0/24
IPv6:
2a09:ff00:8000::/36
Signature Algorithm: sha256WithRSAEncryption
0e:86:b1:ba:76:aa:c2:14:1c:ca:7c:5a:30:eb:c2:ff:2e:80:
87:87:68:63:b7:ab:04:67:98:f6:e0:45:5a:e8:1a:63:c6:bd:
ce:61:7f:d3:b8:f0:14:28:9b:e9:f5:80:3e:92:21:bc:41:98:
67:cf:04:8e:4d:c0:4a:74:ee:3a:c1:7a:df:3f:22:93:30:f8:
b5:9b:c8:51:a5:7f:55:53:52:22:6e:71:ab:29:97:34:d3:ff:
3a:e2:55:9f:f4:14:3d:a1:ae:a4:e0:ea:13:18:b2:fa:57:2d:
a4:c6:bc:e4:87:08:a1:da:cc:40:ee:42:78:af:d2:5a:2c:d0:
82:b6:ce:a8:ac:2f:c0:d4:13:ec:78:3a:41:d0:40:63:4e:07:
aa:d4:78:73:5a:f0:97:6b:6c:6a:96:17:a4:47:df:e0:5a:76:
9b:6c:01:2f:bb:86:38:05:25:f3:2d:70:32:a2:15:8b:70:8c:
b2:2b:1f:9f:2d:24:26:88:5a:76:b9:eb:25:5d:7b:f8:f9:3d:
d1:4f:b1:7e:e9:08:56:01:a8:d0:da:d0:a8:19:5f:2d:b8:9d:
f2:2c:3f:e9:0f:bf:d5:42:b6:33:87:33:a3:e1:64:e6:09:00:
4c:2e:03:50:f6:35:6c:48:4d:cd:a1:6e:5e:e9:6c:04:1e:43:
36:e0:c2:21
-----BEGIN CERTIFICATE-----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Generated at Sat Apr 13 18:03:16 2024 by rpki-client on console-ams.rpki-client.org