Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/fxS6g-C1C8FBml9G9K1aTJXNRuY.roa
File: fxS6g-C1C8FBml9G9K1aTJXNRuY.roa (raw, json)
Hash identifier: uz8tBMNsZRLin4rKh/AJoFxQPJLjBVt56JV9twLF7nU=
Subject key identifier: 7F:14:BA:83:E0:B5:0B:C1:41:9A:5F:46:F4:AD:5A:4C:95:CD:46:E6
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018DCFA27D26E150AB4B41D8605C30305C0A
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/fxS6g-C1C8FBml9G9K1aTJXNRuY.roa
Signing time: Thu 22 Feb 2024 07:05:48 +0000
ROA not before: Thu 22 Feb 2024 07:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57844
IP address blocks: 45.83.180.0/24 maxlen: 24
45.83.181.0/24 maxlen: 24
45.83.182.0/24 maxlen: 24
45.83.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 09:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cf:a2:7d:26:e1:50:ab:4b:41:d8:60:5c:30:30:5c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Feb 22 07:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f14ba83e0b50bc1419a5f46f4ad5a4c95cd46e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c3:09:95:71:53:a8:80:4e:ee:0b:1d:7f:c8:
de:88:8c:86:ee:25:c4:2e:98:42:e9:c2:84:a0:9d:
32:85:aa:51:d6:5c:e5:d5:f1:90:26:2b:3b:c3:43:
ea:e7:17:cc:05:8e:7f:d5:1c:81:6d:9f:f1:db:09:
24:31:3a:55:ed:b7:7b:dd:cd:ce:f0:9a:0a:cf:3a:
18:62:13:84:b4:2b:8f:6e:5a:39:4f:4b:f9:8e:b8:
17:ae:f2:9d:d5:5f:11:32:50:94:6e:13:c7:e7:c6:
91:2b:d9:dd:d4:c7:07:b0:eb:e6:21:83:0e:42:4a:
a0:6b:2a:71:d5:0c:7d:d9:0a:2b:46:40:a0:3b:b6:
99:cb:31:57:70:f6:66:21:b9:82:75:ac:76:72:e0:
ce:44:23:36:86:97:62:a9:71:85:24:3b:9e:72:4d:
90:6a:b7:4c:7a:57:65:7d:95:3f:f8:dd:24:18:53:
2d:2b:6f:e7:39:e1:0a:39:01:b6:18:f0:e7:fd:90:
e1:93:99:87:0c:bf:b0:28:26:b2:fc:d1:bc:81:79:
6a:34:53:f9:7d:f9:43:2a:9e:56:bc:51:57:c3:15:
72:6f:01:1d:56:99:cd:c3:31:5c:83:4a:07:ba:e7:
35:a5:cf:55:d2:3b:b8:e8:46:f0:a7:4c:a4:f1:8d:
b7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:14:BA:83:E0:B5:0B:C1:41:9A:5F:46:F4:AD:5A:4C:95:CD:46:E6
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/fxS6g-C1C8FBml9G9K1aTJXNRuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.180.0/22
Signature Algorithm: sha256WithRSAEncryption
01:9d:5d:d8:ca:cc:68:19:2b:13:c8:69:46:e3:9c:e8:23:63:
0e:b6:a6:6e:a3:25:a6:b0:5a:f8:4c:e6:ae:c4:af:c8:fd:e1:
cb:02:f4:c5:ea:5b:3e:61:97:37:de:4a:31:38:be:30:35:be:
f3:b0:0c:4d:5a:ff:da:2b:0c:d7:ae:df:6b:54:be:9e:61:be:
9d:df:5d:82:44:b1:38:4e:e8:1c:a3:14:7b:26:c1:f8:97:12:
14:42:e7:cc:65:53:fa:bd:9e:ff:64:43:23:bb:35:08:37:2b:
21:8f:a9:17:f0:a1:1f:4b:18:38:e9:58:a0:98:f9:c1:2f:7b:
57:e7:23:b7:15:e3:55:41:d6:0a:11:06:80:1b:fd:72:fe:1a:
26:63:8c:b9:a7:d5:01:21:85:b7:8e:0a:51:b0:3e:95:84:7c:
4b:fa:04:f2:8c:f5:72:81:25:01:72:86:12:30:45:f9:c9:fb:
87:42:2c:89:be:47:67:e2:ef:00:34:3a:02:7b:c0:07:9f:c1:
af:60:f2:6e:b5:4d:bf:55:8f:d0:40:e0:90:b2:1e:7f:42:5c:
f1:b1:d2:a1:b7:dd:10:c6:92:30:86:a1:d7:42:ab:36:93:e6:
0b:40:9e:17:a9:df:e1:af:25:db:00:2c:94:a2:02:93:64:a9:
52:46:5b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org