Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/k6aKxTewFJkcV1JvAo8U3q68P8g.roa
File: k6aKxTewFJkcV1JvAo8U3q68P8g.roa (raw, json)
Hash identifier: g47ivEar+BvXNGzIXLbpb0xveEPdv1+M9Bc0kKgrqPw=
Subject key identifier: 93:A6:8A:C5:37:B0:14:99:1C:57:52:6F:02:8F:14:DE:AE:BC:3F:C8
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018CC5003E9785E5C9741C80845656195A3B
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/k6aKxTewFJkcV1JvAo8U3q68P8g.roa
Signing time: Mon 01 Jan 2024 12:29:36 +0000
ROA not before: Mon 01 Jan 2024 12:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57844
IP address blocks: 45.83.180.0/24 maxlen: 24
45.83.181.0/24 maxlen: 24
45.83.182.0/24 maxlen: 24
45.83.183.0/24 maxlen: 24
139.28.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 18:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:3e:97:85:e5:c9:74:1c:80:84:56:56:19:5a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 1 12:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93a68ac537b014991c57526f028f14deaebc3fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:57:f1:c9:7d:30:7a:37:af:2b:18:08:64:de:
c5:39:32:e7:00:60:69:e3:15:78:53:c4:f8:d1:a6:
c5:a6:5d:85:f2:15:c8:bc:26:4c:0b:ea:27:a1:5f:
a0:f9:0c:74:4a:2d:77:fb:67:88:01:f8:06:a7:25:
b5:91:93:cc:e4:a6:1b:bc:5d:4d:f1:89:c3:7e:51:
53:e9:2a:53:11:18:bc:2d:93:7b:0a:30:5a:92:01:
d2:b5:02:89:45:e3:18:e9:e8:b1:03:e4:8b:a3:29:
2d:6b:e1:6a:d7:b5:ce:76:be:76:17:7d:72:b9:74:
dc:bd:ba:a6:86:4e:f6:04:8a:be:66:2d:16:1c:78:
96:0d:33:af:25:df:79:1c:c6:b8:2e:ca:46:33:3d:
af:0b:0f:b9:03:65:14:40:ea:20:a6:3e:79:24:7c:
43:3a:6e:80:bd:56:97:49:f1:8a:13:c9:ab:50:1b:
2c:c8:61:7d:31:a7:74:56:78:42:8e:a3:04:ea:86:
1c:a7:84:69:3a:24:f1:12:c0:dd:e2:61:1d:34:16:
e9:bb:75:67:c2:5d:db:99:8b:5d:35:0c:b0:5d:56:
c8:41:de:1f:bc:c9:6e:21:b1:bd:26:16:e9:89:7e:
27:3a:44:80:48:01:35:0d:d5:e3:45:8f:66:d3:22:
c9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A6:8A:C5:37:B0:14:99:1C:57:52:6F:02:8F:14:DE:AE:BC:3F:C8
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/k6aKxTewFJkcV1JvAo8U3q68P8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.180.0/22
139.28.72.0/22
Signature Algorithm: sha256WithRSAEncryption
14:19:b0:e1:16:68:ea:b4:da:64:1b:a5:11:c8:ea:61:49:0a:
2e:81:98:a2:e2:e9:aa:f3:90:a1:23:4a:d8:0e:3c:e4:e1:7c:
d3:19:b9:00:54:3e:00:d7:78:bc:89:74:65:0c:47:91:0b:17:
2e:82:aa:c1:a8:ea:a4:22:91:e2:c2:80:4a:3b:3a:a2:1a:7d:
bb:59:80:0d:ed:90:7b:5b:be:07:b1:a4:fb:ac:9d:d8:43:92:
66:fd:4c:2c:c8:7e:4d:ee:17:e8:b0:50:22:11:df:82:ac:7e:
b9:08:56:f9:62:9f:f2:e8:c6:8c:c3:b7:31:a7:f3:1a:63:11:
9c:ed:1c:f7:54:0e:aa:c0:ad:03:db:d8:0f:f5:24:53:04:13:
b7:3b:9a:4a:2a:b8:6a:21:38:9c:54:e8:62:24:1d:01:96:60:
5f:eb:77:c7:6f:49:cd:77:9a:50:19:6c:d4:97:5e:dc:6b:ba:
f9:b0:5e:8a:18:5e:e8:08:8a:f4:5a:df:e0:5c:7f:cd:5d:49:
7f:3d:62:72:aa:78:0a:07:37:22:21:64:4b:39:03:0f:67:92:
69:7d:31:71:bc:ce:88:43:4e:fe:39:25:3c:7e:5d:69:3d:e1:
85:a2:3e:84:2f:6c:e6:99:f6:07:3f:05:58:ef:44:c0:1c:68:
c5:30:a3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org