Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/bAn2AI44CCTm2WXaBSRttw3arHA.roa
File: bAn2AI44CCTm2WXaBSRttw3arHA.roa (raw, json)
Hash identifier: i3TBFO8sxg0UROyfJzumUECCBlgkamFBQsZbs3jOfVk=
Subject key identifier: 6C:09:F6:00:8E:38:08:24:E6:D9:65:DA:05:24:6D:B7:0D:DA:AC:70
Certificate issuer: /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial: 018E1825B7933CB36352111A58942F962A33
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/bAn2AI44CCTm2WXaBSRttw3arHA.roa
Signing time: Thu 07 Mar 2024 09:01:48 +0000
ROA not before: Thu 07 Mar 2024 09:01:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211381
IP address blocks: 45.131.182.0/24 maxlen: 24
213.134.31.0/24 maxlen: 24
2a13:4ac0::/46 maxlen: 46
2a13:4ac0:4::/46 maxlen: 46
Validation: Failed, certificate revoked on Wed 15 May 2024 12:56:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:25:b7:93:3c:b3:63:52:11:1a:58:94:2f:96:2a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Validity
Not Before: Mar 7 09:01:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c09f6008e380824e6d965da05246db70ddaac70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ea:0b:ee:86:eb:e5:e7:e8:7a:f2:36:bd:bc:
e5:45:2a:c5:1d:47:bd:c4:53:e9:f7:8a:57:df:6a:
cb:4a:16:67:0b:5f:ea:ac:88:9b:69:ee:8e:87:9b:
54:27:e5:14:f0:cc:6c:30:5a:5b:7c:93:c5:fc:18:
d5:75:63:57:cf:6c:4f:88:32:8a:b6:6a:83:c3:8f:
cd:a2:d2:05:a7:01:8a:e4:ec:e4:b9:03:6a:16:34:
f8:ce:10:58:ba:ef:e2:9a:20:36:ad:87:d8:21:ab:
9f:86:e2:2f:b8:df:ab:2e:a6:90:26:d2:b1:1c:46:
de:a8:dd:2d:9f:4f:03:74:7b:87:48:10:ed:94:be:
ec:56:af:19:ea:14:78:a8:9d:32:c6:c5:1a:30:53:
58:b6:47:8c:e8:8b:89:0f:18:ba:75:4d:a2:22:c9:
2f:92:fc:c1:70:28:c4:5d:a6:15:a3:b6:57:64:6b:
d3:0f:77:be:0b:5a:b8:3f:82:23:c0:be:1c:95:69:
17:e9:5b:b3:40:26:84:6a:05:39:01:85:cb:bd:37:
b8:10:84:80:97:32:1e:27:dc:51:b5:31:25:31:6c:
f4:c9:73:f7:32:d1:07:67:e4:a3:29:9a:cc:e1:b2:
b4:4d:ea:db:7e:c6:59:5d:81:42:2a:bc:c6:23:9c:
9d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:09:F6:00:8E:38:08:24:E6:D9:65:DA:05:24:6D:B7:0D:DA:AC:70
X509v3 Authority Key Identifier:
keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/bAn2AI44CCTm2WXaBSRttw3arHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.182.0/24
213.134.31.0/24
IPv6:
2a13:4ac0::/45
Signature Algorithm: sha256WithRSAEncryption
72:5f:be:73:35:b9:69:3e:16:11:9b:94:74:b5:a8:2a:5a:c3:
46:97:f6:97:3b:cd:aa:2d:4f:71:df:ae:e2:9e:07:27:b2:1b:
bf:3d:fd:23:8a:fe:48:12:0b:4e:33:8f:6c:5a:52:b1:70:fe:
b4:7f:75:93:59:86:e4:59:be:9e:b7:f0:16:89:50:17:e2:64:
da:73:74:90:c4:7c:96:b3:83:ae:d1:17:6d:dc:bd:30:32:e4:
ff:5d:25:34:7d:51:0f:b9:88:e1:66:d3:c0:bf:08:98:65:96:
32:5b:65:1c:d3:10:bf:de:f0:dd:fc:51:f1:39:83:19:3f:04:
f1:fd:70:86:19:39:7f:24:7c:04:bf:08:a6:7d:dc:7a:77:e0:
57:1c:eb:ab:ce:b4:44:1f:32:5e:a5:9c:84:09:0a:23:5a:1f:
90:e7:fe:31:01:05:30:6c:c8:ef:ca:e7:c7:f9:30:1b:a7:62:
36:18:de:b3:af:8a:76:02:d9:07:01:4c:ab:fb:61:88:5a:89:
fb:d2:51:68:03:04:9b:7d:4c:d7:69:cf:b9:82:0a:6e:83:ba:
e3:d4:95:50:62:fc:43:55:13:ad:f6:29:9b:42:31:84:5d:0e:
ce:67:b0:b3:20:d3:0c:82:9f:22:22:98:5c:b0:ba:d4:6c:e9:
23:83:67:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:52 2024 by rpki-client on console-ams.rpki-client.org