Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/IIOMZNwkiK2P1jFeOxdZ86fI6ZE.roa
File: IIOMZNwkiK2P1jFeOxdZ86fI6ZE.roa (raw, json)
Hash identifier: 0xVnFHcyfWAXWOp12pGV9DWPbDP4mKkC55r1UhgZQRU=
Subject key identifier: 20:83:8C:64:DC:24:88:AD:8F:D6:31:5E:3B:17:59:F3:A7:C8:E9:91
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018D892D2C11D39773197A7374D297CA5B46
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/IIOMZNwkiK2P1jFeOxdZ86fI6ZE.roa
Signing time: Thu 08 Feb 2024 14:44:15 +0000
ROA not before: Thu 08 Feb 2024 14:44:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57844
IP address blocks: 45.83.180.0/24 maxlen: 24
45.83.181.0/24 maxlen: 24
45.83.182.0/24 maxlen: 24
45.83.183.0/24 maxlen: 24
139.28.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 07:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:89:2d:2c:11:d3:97:73:19:7a:73:74:d2:97:ca:5b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Feb 8 14:44:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20838c64dc2488ad8fd6315e3b1759f3a7c8e991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:f1:34:f7:17:1d:88:34:a4:5a:b8:8b:eb:
7b:b0:5a:3a:97:c3:20:d1:f1:d2:0e:17:21:5f:b9:
83:61:6c:0f:85:a2:76:37:20:5f:f3:cf:ef:fb:de:
22:2f:d7:3b:05:96:38:fa:4c:e1:6c:6a:86:e6:f8:
d9:a7:60:52:72:bd:70:ad:86:b4:95:54:63:8e:1b:
10:8f:45:29:d4:dd:d4:3f:06:7b:04:58:ae:e6:66:
d4:42:0e:c0:79:2f:de:34:d5:3d:bb:33:24:92:a2:
a5:51:0c:b9:b6:df:f4:c1:85:da:60:ac:26:c7:d5:
cf:ac:fe:d7:c1:52:2d:bf:2b:60:65:e7:08:be:46:
f3:a4:4c:70:e1:34:b8:31:4c:97:f1:f7:cf:0b:7e:
d7:f1:48:92:21:11:7a:cb:1b:bb:b9:b2:b0:8e:d6:
b2:29:eb:bd:ff:3e:b9:7e:ee:fa:4b:dd:48:68:b0:
2b:4e:76:71:75:34:24:8a:a3:43:0a:2f:23:15:21:
a5:e3:7c:77:26:b5:1a:f8:99:89:1f:0b:e7:41:5c:
b4:3b:c1:50:e1:6e:59:8f:08:a9:4a:e2:95:f4:1f:
f7:c1:bf:77:90:ae:b9:d3:31:16:71:d7:46:11:00:
13:50:9d:1f:11:df:e1:ad:d2:4b:5e:ae:9c:eb:0b:
48:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:83:8C:64:DC:24:88:AD:8F:D6:31:5E:3B:17:59:F3:A7:C8:E9:91
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/IIOMZNwkiK2P1jFeOxdZ86fI6ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.180.0/22
139.28.72.0/22
Signature Algorithm: sha256WithRSAEncryption
10:16:51:20:34:45:4c:3e:65:63:98:ba:2a:91:c0:b9:ef:33:
98:9b:57:98:da:54:b7:c4:42:aa:79:32:b4:f5:6e:5f:4b:4e:
73:7c:ba:49:10:f6:3e:9c:c1:3f:80:f5:40:0d:17:78:c0:50:
58:c5:85:b3:2c:a1:36:1b:68:61:84:b7:6d:fd:8a:78:d8:68:
5d:89:9d:0a:35:22:25:c7:44:3e:82:da:af:09:53:ad:21:b4:
6e:22:9d:25:6e:58:8e:b4:73:36:e9:2c:b8:88:d1:ef:52:9a:
48:b2:f5:eb:a0:5f:45:82:38:b5:78:8c:d6:10:c9:11:94:ee:
35:92:4e:f4:8c:4b:d4:37:ec:32:db:76:a2:87:8d:b9:cd:88:
09:3e:82:10:94:cb:61:92:ad:65:f0:cd:6f:25:b5:db:51:72:
fd:34:cb:dd:a8:fb:40:4c:91:5e:6a:e8:51:3d:74:ab:b4:9a:
50:26:c1:b3:01:3a:15:ba:db:a3:23:20:57:f2:d6:78:46:b8:
5e:9c:d0:22:39:cb:66:86:26:5b:5b:26:b8:3b:3e:6b:9d:58:
c4:6a:65:9b:2b:99:a4:c3:cd:b1:e7:de:0c:42:e1:44:5b:1e:
a7:59:a1:da:58:95:13:a5:2c:49:fd:d6:3a:23:ac:2c:cc:9e:
27:95:0f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org