Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/o-4i1rzjfn483Ip141bTd58HClE.roa
File: o-4i1rzjfn483Ip141bTd58HClE.roa (raw, json)
Hash identifier: Vtav6XDbUJmWuXCGKagmCERZiHqMzE+j6tpqRIPIv1E=
Subject key identifier: A3:EE:22:D6:BC:E3:7E:7E:3C:DC:8A:75:E3:56:D3:77:9F:07:0A:51
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 018E9F0D2F3E5503197B0F98B1062EC73F55
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/o-4i1rzjfn483Ip141bTd58HClE.roa
Signing time: Tue 02 Apr 2024 13:43:45 +0000
ROA not before: Tue 02 Apr 2024 13:43:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136258
IP address blocks: 45.154.204.0/24 maxlen: 24
45.154.205.0/24 maxlen: 24
45.154.207.0/24 maxlen: 24
195.137.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 05:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:0d:2f:3e:55:03:19:7b:0f:98:b1:06:2e:c7:3f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Apr 2 13:43:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3ee22d6bce37e7e3cdc8a75e356d3779f070a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:76:42:14:08:d5:f1:61:3c:86:2d:ed:af:
1f:16:02:ed:2a:10:4a:01:8c:ef:2b:23:8b:d6:e2:
3b:7d:14:97:88:e8:93:ab:f6:b2:ef:eb:73:dd:31:
17:c3:51:0b:03:e2:f2:a4:85:5a:3c:6a:92:12:6a:
ca:d5:78:18:e7:21:f4:71:4e:c1:60:cb:96:5b:11:
c8:f6:2a:85:fb:67:d6:b4:ad:f0:53:f8:c3:3d:f0:
84:eb:d0:09:e1:36:d6:ab:1c:92:8b:1e:ca:c2:0d:
93:22:4f:a5:23:f6:c8:40:45:3e:13:50:e8:74:6e:
eb:a8:3b:af:1d:38:f8:df:0c:5e:7b:64:ac:2e:da:
d5:a4:cb:ea:26:87:cb:73:ff:64:b5:ed:14:b4:af:
75:62:30:19:09:c2:30:7e:c1:a2:15:60:c2:94:5d:
85:82:e6:96:e2:98:8b:2f:dd:71:04:fa:81:c5:bf:
09:2a:ac:dd:f1:89:f0:e4:b0:78:71:2f:22:ef:20:
c8:bd:11:08:e5:de:c0:a2:39:6a:40:37:aa:f9:64:
09:40:b4:cb:8d:0b:f5:2c:35:7a:32:36:6c:02:29:
a2:83:9b:b3:4a:bc:ea:16:94:04:ac:0e:7d:29:ae:
6e:57:00:30:09:51:88:33:91:05:8e:2c:67:ba:e5:
db:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EE:22:D6:BC:E3:7E:7E:3C:DC:8A:75:E3:56:D3:77:9F:07:0A:51
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/o-4i1rzjfn483Ip141bTd58HClE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.204.0/23
45.154.207.0/24
195.137.220.0/24
Signature Algorithm: sha256WithRSAEncryption
37:6d:80:ad:51:76:e9:df:a2:0d:16:b5:ed:cd:fc:4d:87:67:
c4:ea:f7:31:d1:22:67:d4:71:26:51:0b:bb:67:71:82:28:43:
ef:fb:09:48:fa:8c:1d:3a:ca:f5:69:8f:9f:12:2a:d3:88:96:
23:3d:1b:51:f5:95:ec:e3:20:7f:ea:c3:7a:c8:f0:fa:e1:95:
13:7b:ca:90:3d:6b:b1:fd:01:21:9e:a4:d1:ee:26:e5:b1:3c:
c3:1b:5d:24:1e:28:32:43:34:08:1f:72:f4:eb:f5:bd:42:2d:
8d:94:89:45:89:41:bb:9f:c0:58:4e:e2:8b:d7:6c:52:99:87:
07:18:06:cc:45:95:26:1c:83:25:7d:1f:a9:a5:b8:e3:aa:7b:
57:ed:2e:a3:5f:9a:46:1f:96:21:e5:94:fb:77:e3:27:76:70:
46:94:cb:39:c1:62:4f:84:ab:4a:f7:4d:44:5f:f5:e6:8a:e0:
1d:cf:ee:b6:e3:9e:33:13:f5:93:6c:7f:ed:ba:39:10:4d:28:
74:19:83:46:8d:bb:a8:af:5e:74:f0:b6:3c:04:80:86:4c:66:
58:dd:4b:17:5f:e0:3b:e2:19:7d:24:6f:d2:08:9d:d2:03:0d:
0e:a1:ab:e4:dc:39:55:e2:aa:b3:e7:0a:20:df:b2:8b:3d:6a:
b5:a8:61:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:45 2024 by rpki-client on console-fra.rpki-client.org