Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/jHVeQ-nZCkwgmD4Msg7SKHUMU28.roa
File: jHVeQ-nZCkwgmD4Msg7SKHUMU28.roa (raw, json)
Hash identifier: Gg1/NWRYObcJyS5gtM2QU/Y5Vmqxyd5y3z5WcfTispI=
Subject key identifier: 8C:75:5E:43:E9:D9:0A:4C:20:98:3E:0C:B2:0E:D2:28:75:0C:53:6F
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 018A8A6D7AFD9BEBCC1D093C284670725936
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/jHVeQ-nZCkwgmD4Msg7SKHUMU28.roa
Signing time: Tue 12 Sep 2023 17:25:45 +0000
ROA not before: Tue 12 Sep 2023 17:25:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204860
IP address blocks: 194.180.110.0/24 maxlen: 24
194.180.115.0/24 maxlen: 24
194.180.150.0/24 maxlen: 24
45.156.44.0/22 maxlen: 22
194.180.154.0/24 maxlen: 24
45.158.88.0/22 maxlen: 22
2a0f:5880::/29 maxlen: 29
2a0f:2a80::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8a:6d:7a:fd:9b:eb:cc:1d:09:3c:28:46:70:72:59:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Sep 12 17:25:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c755e43e9d90a4c20983e0cb20ed228750c536f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:0b:f6:66:37:73:40:7a:db:f0:a8:87:8f:
27:87:33:84:63:d9:52:49:88:83:b9:bf:2f:c9:73:
00:a3:c8:d5:b0:e2:fc:e9:25:46:18:44:03:74:98:
44:e8:c3:98:7b:41:3b:51:95:66:a3:de:b9:78:53:
ee:7a:9b:a9:f2:8a:83:76:dc:dc:67:ad:2c:65:e1:
7e:f2:8f:e6:7a:80:21:dc:62:87:7e:0a:a3:d1:6b:
4b:97:05:f6:32:ff:e7:77:82:45:0d:84:ab:fb:f0:
b0:eb:16:af:7c:79:f3:69:ea:22:cf:bd:cc:0b:a2:
a0:55:98:36:af:07:3b:f6:85:48:78:9c:11:56:80:
1b:9b:07:8d:4f:ae:56:3c:ee:c2:3f:6d:e9:76:07:
0c:1b:6c:67:82:23:73:76:2a:96:03:bf:63:e7:ff:
44:35:3c:07:fa:84:40:5d:0f:00:61:f2:e8:1a:85:
dc:d0:22:83:63:2c:80:c4:26:4e:1f:6e:64:d2:fd:
8a:ec:d7:ff:53:e8:80:5f:e3:a8:b6:f7:cd:e2:93:
8a:55:81:b2:31:a0:8c:dc:75:7a:9d:1e:cf:55:3d:
cc:13:d3:26:ed:68:14:98:25:dd:32:16:a5:fb:89:
05:5c:ba:54:09:39:36:fe:16:4f:54:bd:c3:6c:79:
9e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:75:5E:43:E9:D9:0A:4C:20:98:3E:0C:B2:0E:D2:28:75:0C:53:6F
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/jHVeQ-nZCkwgmD4Msg7SKHUMU28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.44.0/22
45.158.88.0/22
194.180.110.0/24
194.180.115.0/24
194.180.150.0/24
194.180.154.0/24
IPv6:
2a0f:2a80::/29
2a0f:5880::/29
Signature Algorithm: sha256WithRSAEncryption
23:a6:65:06:38:91:82:e2:ed:96:91:c5:80:50:37:08:1a:15:
0b:ed:6a:93:93:f9:34:76:b4:d3:63:ae:03:62:b0:92:22:25:
33:cd:4d:7c:2c:1f:03:0e:d9:2e:b6:29:5a:79:eb:d1:98:3e:
7a:f7:4b:78:2d:e8:c6:d6:57:02:ef:5d:62:5a:6c:4b:aa:2a:
de:0d:b9:64:78:36:e3:7b:82:16:38:05:56:e3:85:88:aa:e0:
c4:26:01:1f:33:2e:3d:6b:e0:8c:63:04:8d:aa:f8:be:8f:ce:
af:06:f2:73:4d:ce:e2:92:28:bd:4c:1e:4e:6b:52:7e:8a:16:
56:13:03:60:60:dc:a6:e9:76:fe:98:fd:89:28:a9:e9:c7:cb:
3c:66:5d:b9:3c:d8:ca:5a:4c:9b:0d:c7:21:80:26:71:48:0c:
57:83:27:29:0b:26:3d:50:b0:a1:0b:0b:fe:d1:18:79:6f:38:
b2:f8:42:8b:24:15:8b:a4:5b:14:bc:1a:49:27:68:f3:d0:53:
7b:5d:75:72:16:fc:4f:cd:30:58:cb:8c:b0:95:c5:8a:21:00:
2e:aa:a6:a5:73:e1:ec:d5:55:32:32:b0:50:10:99:01:58:7d:
60:3b:d0:6c:35:10:37:36:46:f9:b8:91:84:38:2c:df:e4:44:
78:31:37:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:46 2024 by rpki-client on console-fra.rpki-client.org