Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/S9Kf5WN3mTMl_PwQa9t-Er-HAr8.roa
File: S9Kf5WN3mTMl_PwQa9t-Er-HAr8.roa (raw, json)
Hash identifier: kjw0H869VO+sKLS6ItisEXDzl6n6UnHh+YHNwy+93Rc=
Subject key identifier: 4B:D2:9F:E5:63:77:99:33:25:FC:FC:10:6B:DB:7E:12:BF:87:02:BF
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 0187982FCA25AD95899F8FE60A3EE7B0C2B5
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/S9Kf5WN3mTMl_PwQa9t-Er-HAr8.roa
Signing time: Wed 19 Apr 2023 06:24:41 +0000
ROA not before: Wed 19 Apr 2023 06:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 45.83.180.0/24 maxlen: 24
45.83.181.0/24 maxlen: 24
45.83.182.0/24 maxlen: 24
45.83.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Apr 2023 08:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:98:2f:ca:25:ad:95:89:9f:8f:e6:0a:3e:e7:b0:c2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Apr 19 06:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bd29fe56377993325fcfc106bdb7e12bf8702bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:b2:70:62:08:d8:6a:63:7f:c8:cf:1a:55:
bd:4a:15:f2:86:0f:40:13:50:6b:f2:7a:a2:a5:78:
37:3b:42:42:df:2b:b1:5b:b1:d5:67:ec:f8:7e:38:
a2:7c:ef:f3:4a:ff:1e:dd:7d:d1:78:c2:cf:35:33:
83:7c:69:66:e5:2c:e8:3a:2b:f1:13:49:6a:4d:4d:
64:32:dd:53:6f:98:58:bf:94:02:71:be:88:07:b5:
d4:3c:ed:93:d1:41:f6:cd:0f:a6:13:15:13:81:c8:
f4:61:e4:60:c4:77:84:27:0a:b9:8c:80:d3:2d:78:
ed:82:84:78:48:2b:a3:c1:74:9e:22:26:e1:69:8f:
d1:62:b9:82:ee:eb:49:95:5d:5b:02:93:25:96:e9:
c2:7d:d4:86:16:98:1a:e6:a4:e5:ea:44:7f:73:be:
bf:20:5a:b9:9e:d6:ed:29:af:23:d3:ec:4c:38:f9:
e2:51:ec:8f:2f:12:74:2f:f8:c5:5f:e1:b1:32:b6:
6f:f5:4c:48:1b:1f:17:02:f4:b7:1a:7d:48:48:40:
1a:a2:8c:26:fa:49:c9:ec:d5:29:b9:62:3e:db:4e:
80:06:ab:95:7f:fc:ce:83:c5:39:29:87:49:a5:b9:
39:54:a9:2f:bf:9f:b2:9b:a7:54:f4:3d:e6:7e:dd:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D2:9F:E5:63:77:99:33:25:FC:FC:10:6B:DB:7E:12:BF:87:02:BF
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/S9Kf5WN3mTMl_PwQa9t-Er-HAr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.180.0/22
Signature Algorithm: sha256WithRSAEncryption
80:7d:cb:e5:02:bf:82:d2:1c:ac:90:a9:bd:40:75:d5:4f:d9:
be:56:dd:38:52:5b:ea:a5:31:5a:a9:58:9c:11:29:68:ec:b1:
92:9e:43:ae:f7:c9:54:00:c0:3a:6d:0d:cc:15:09:8e:84:2e:
2e:d0:e0:ec:fb:86:25:76:a0:05:55:17:61:0d:20:66:2d:6b:
c5:36:aa:92:e4:16:5b:7e:63:c8:55:b8:b5:33:97:a4:51:a2:
9c:77:84:8c:8b:05:64:f4:2b:2d:a0:46:67:f2:33:0a:36:df:
79:0e:ae:e0:2e:2f:21:73:04:d0:b1:d5:df:ec:f2:98:87:0e:
e5:62:d2:8c:c2:99:6c:82:97:9a:25:51:80:2a:55:8c:0d:19:
a2:97:6c:05:7c:ee:8b:b5:f3:ab:80:b6:72:2a:63:43:11:86:
75:c7:89:4a:12:a5:4d:48:65:68:ba:23:07:8c:cc:d2:70:93:
15:b9:be:ce:7b:6b:91:a8:9a:35:4a:2c:25:d8:b8:a3:5d:cd:
dd:02:2f:0e:55:88:6f:f1:60:7d:9f:ef:64:f3:2d:cc:84:52:
27:5e:f0:57:f7:ad:26:48:71:47:b2:75:2d:ac:68:43:50:c4:
ac:5a:8d:51:0f:2f:ac:e5:e1:0f:ab:25:4c:ce:c9:06:31:7e:
21:4b:9c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org