Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bCM1omMhsN5BwCRElHrFfDQEzwI.roa
File: bCM1omMhsN5BwCRElHrFfDQEzwI.roa (raw, json)
Hash identifier: FZwPN4pikvaqTl2yeo36y2I5LPdakT+Huh6MFpk6Ul4=
Subject key identifier: 6C:23:35:A2:63:21:B0:DE:41:C0:24:44:94:7A:C5:7C:34:04:CF:02
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018EBC720C74FAF6232987FED909BCBFD273
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bCM1omMhsN5BwCRElHrFfDQEzwI.roa
Signing time: Mon 08 Apr 2024 06:42:54 +0000
ROA not before: Mon 08 Apr 2024 06:42:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57844
IP address blocks: 45.83.180.0/24 maxlen: 24
45.83.181.0/24 maxlen: 24
45.83.182.0/24 maxlen: 24
45.83.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 18:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bc:72:0c:74:fa:f6:23:29:87:fe:d9:09:bc:bf:d2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Apr 8 06:42:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c2335a26321b0de41c02444947ac57c3404cf02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3a:8d:73:bf:ce:07:4d:a6:f9:10:6b:7b:1e:
00:96:c9:7a:19:06:fd:c4:39:b2:b1:dc:eb:2e:ba:
00:99:47:3e:da:13:da:b5:a8:c0:dd:4f:9f:dc:02:
53:81:00:f5:a7:bf:bf:29:2e:fd:b6:2e:cb:dc:63:
d8:56:51:cf:57:66:51:70:b6:10:18:2a:39:33:26:
a5:3f:b3:4f:d9:eb:08:c4:75:f7:0a:79:4c:9a:f0:
61:7b:9c:b8:a5:71:87:b9:9a:9d:90:c4:2e:53:e4:
b1:10:cd:d5:06:17:fd:7d:17:c7:3b:08:ba:77:59:
ee:5d:b0:4f:32:4a:87:fe:48:53:ab:71:5f:7d:26:
fb:c8:5c:b7:86:4d:f2:c3:15:c3:f1:26:6b:1b:21:
39:d0:28:86:d9:a6:99:4e:e5:5b:5e:15:6d:e0:72:
d9:66:e6:5b:1c:fc:ae:9c:34:22:2c:b0:6c:29:b8:
2b:cd:ce:34:67:cf:a0:39:52:1d:cf:46:a9:05:2c:
e3:eb:0e:6a:c2:f6:ef:0c:75:3c:95:01:62:65:11:
9f:e1:b9:7c:97:7e:67:65:f9:82:9d:9d:8b:61:4b:
51:ac:d5:d5:37:cb:06:bb:88:8b:2c:41:0c:66:4e:
32:a1:19:50:dc:a7:83:0e:ef:fc:77:ab:80:0a:73:
7b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:23:35:A2:63:21:B0:DE:41:C0:24:44:94:7A:C5:7C:34:04:CF:02
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bCM1omMhsN5BwCRElHrFfDQEzwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.180.0/22
Signature Algorithm: sha256WithRSAEncryption
17:c0:db:c9:c5:49:97:89:e2:c9:d5:17:0b:fd:86:f8:b8:42:
20:e8:16:94:8d:c1:45:23:2d:9a:03:cf:f0:5b:25:ef:ed:e7:
30:2f:ca:04:fc:3a:5e:66:33:53:73:4d:60:9d:05:04:f5:2d:
f8:6d:30:4b:fa:c2:7e:e8:e1:06:88:b6:c5:de:8e:db:92:8e:
1b:4b:ae:65:ef:28:88:c6:6f:5e:e4:4f:fb:1a:3c:b7:c4:25:
3d:7a:c6:6b:cd:21:b8:63:c8:30:b0:34:4a:3f:6c:51:63:4a:
ae:80:30:01:7f:22:e1:f1:5d:2d:bf:40:a0:ae:a1:38:9f:8d:
95:82:db:f6:d8:27:29:e7:df:ad:e2:64:48:b5:01:8f:7d:7b:
c5:fd:cd:60:0a:3d:91:81:b1:da:3b:04:74:91:86:57:5b:cb:
de:bd:c1:b7:c7:18:53:22:76:2c:7e:74:6b:62:96:2f:5b:5f:
22:07:82:ec:b9:ce:f7:aa:56:4b:34:f7:f7:26:6c:da:e7:4f:
88:a0:b3:0d:e1:1c:68:fa:fa:f9:fc:69:d0:a5:98:37:09:e4:
78:52:b8:cb:c0:7f:5d:d2:0f:6a:7d:80:f3:c8:c7:6b:d2:20:
c7:98:47:26:6f:0a:9f:79:9e:d7:51:03:a5:6e:bd:07:a0:35:
dc:bb:a6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org