Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/1U8c3wVdka9_NVMGUq9javFwFDc.roa
File: 1U8c3wVdka9_NVMGUq9javFwFDc.roa (raw, json)
Hash identifier: F3sF1oEiGnDR79n3ZR2g9fYUG+M9WPidPBtgHMfps7s=
Subject key identifier: D5:4F:1C:DF:05:5D:91:AF:7F:35:53:06:52:AF:63:6A:F1:70:14:37
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018EBEF7281E7BC9AFD211241C2AFC7BDE8E
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/1U8c3wVdka9_NVMGUq9javFwFDc.roa
Signing time: Mon 08 Apr 2024 18:27:32 +0000
ROA not before: Mon 08 Apr 2024 18:27:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57844
IP address blocks: 45.83.180.0/24 maxlen: 24
45.83.181.0/24 maxlen: 24
45.83.182.0/24 maxlen: 24
45.83.183.0/24 maxlen: 24
139.28.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Aug 2024 07:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:be:f7:28:1e:7b:c9:af:d2:11:24:1c:2a:fc:7b:de:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Apr 8 18:27:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d54f1cdf055d91af7f35530652af636af1701437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c7:c6:d8:ba:69:1b:74:31:93:77:6b:33:aa:
bf:33:5c:51:c0:59:ab:ec:59:8e:dd:bb:b4:8f:9f:
de:28:b4:b5:fe:28:b5:dc:a2:9b:25:9d:b8:7b:cc:
15:02:17:c7:cd:db:c3:ec:25:0e:2c:a7:ea:2e:ca:
42:2c:b4:a6:50:c8:84:ea:b2:7b:5f:df:6a:ca:c1:
e2:d9:bc:9b:ed:ee:20:20:5c:c4:d2:01:3d:54:80:
f6:42:ef:08:83:e0:3c:15:95:a6:1f:4b:f8:5d:bb:
59:a0:50:61:0c:70:7a:f0:31:fc:f6:b9:03:b0:e7:
2f:24:eb:18:1e:17:e0:3e:ed:b0:9c:3e:fd:e3:c6:
13:1d:62:6f:49:bf:b3:0a:62:ad:18:3e:6d:75:af:
d4:b1:0b:95:4f:e1:05:09:3c:6d:f8:c2:df:b8:0b:
13:2f:8f:5c:44:81:a2:f8:c6:05:e0:41:b0:3e:e2:
19:6b:c9:b3:23:0f:d6:5f:c6:a3:c9:88:8d:d5:39:
02:76:10:12:7b:b9:a5:1b:54:dc:7d:45:c1:39:eb:
a6:32:4d:2e:49:3b:2b:66:6b:ce:b8:33:d7:97:76:
d9:a1:7a:e5:49:a0:eb:d1:01:13:61:21:75:c9:ea:
38:d3:2c:af:06:05:11:75:41:2d:55:27:29:bb:a1:
19:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4F:1C:DF:05:5D:91:AF:7F:35:53:06:52:AF:63:6A:F1:70:14:37
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/1U8c3wVdka9_NVMGUq9javFwFDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.180.0/22
139.28.72.0/22
Signature Algorithm: sha256WithRSAEncryption
30:a3:ac:87:ca:3e:5d:35:af:67:b3:0c:36:96:44:c2:6f:0d:
36:df:46:30:f5:a2:e6:23:bc:c6:81:f3:5f:42:dc:31:9d:cf:
e1:fe:d8:f4:58:76:51:31:6d:dc:e1:ec:2c:20:c6:9c:4b:16:
d6:6c:d7:64:ad:bd:91:a7:14:b3:ff:14:26:90:54:23:49:08:
c1:74:95:9a:31:2b:90:99:05:49:81:3b:ab:a4:9b:66:18:84:
f8:bc:cd:a4:3e:4a:8a:16:9a:f3:de:42:c7:17:b6:5e:b1:b6:
ed:a5:be:8e:e6:56:41:0e:9b:c1:33:72:59:79:e3:ac:15:1e:
a7:aa:6c:c0:cb:96:e5:25:73:13:8e:f5:d5:05:6e:8f:46:d5:
ea:6b:57:e3:e2:27:4c:e1:aa:8a:4c:bd:b6:6b:76:5c:35:06:
19:ae:90:e5:73:37:9e:65:be:10:27:96:ac:08:86:2a:58:d9:
6d:f8:b8:99:69:6d:ce:78:f5:d2:8e:60:6a:a0:a3:a3:1c:0c:
48:c5:1b:b2:9f:f1:1e:2f:b6:82:6a:cc:17:e1:4c:8e:98:72:
34:db:ae:44:cb:5a:f2:b3:6f:b2:9b:cc:c3:b4:2f:37:d9:44:
64:c8:24:2d:a7:f4:62:91:2a:a1:f9:23:d8:f8:af:06:d8:fa:
98:11:2a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 09:11:23 2024 by rpki-client on console-fra.rpki-client.org