Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/yvDV0N2jZ7ihyK-PWIZtEZUQU_M.roa
File: yvDV0N2jZ7ihyK-PWIZtEZUQU_M.roa (raw, json)
Hash identifier: 5E0f0AM2BosQtz4f5YhfWoEdFQLXpllFY7zIjgkigbE=
Subject key identifier: CA:F0:D5:D0:DD:A3:67:B8:A1:C8:AF:8F:58:86:6D:11:95:10:53:F3
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018D886CEA51097A757E200880F36A2B9DF5
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/yvDV0N2jZ7ihyK-PWIZtEZUQU_M.roa
Signing time: Thu 08 Feb 2024 11:14:15 +0000
ROA not before: Thu 08 Feb 2024 11:14:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57844
IP address blocks: 45.83.180.0/24 maxlen: 24
45.83.181.0/24 maxlen: 24
45.83.182.0/24 maxlen: 24
45.83.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 14:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:88:6c:ea:51:09:7a:75:7e:20:08:80:f3:6a:2b:9d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Feb 8 11:14:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=caf0d5d0dda367b8a1c8af8f58866d11951053f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:20:76:48:c9:d7:51:c5:5f:e2:fc:a8:1c:
c8:4a:e3:70:b3:68:46:0d:73:d2:e0:3d:16:60:48:
fb:48:b1:73:08:a2:41:f7:15:90:4c:cd:23:99:e8:
03:b2:96:d5:65:b1:28:03:0a:d2:db:cc:b0:93:8e:
bb:c6:09:7d:a8:1f:9e:73:da:02:cd:64:f5:cb:73:
9b:dc:f7:90:fa:3b:f8:b2:26:72:04:d4:d2:07:78:
ea:0b:87:ab:f3:d1:50:e8:66:c6:3d:28:0e:15:83:
b5:78:60:75:93:86:5b:09:cb:09:39:3c:f0:18:c2:
dc:44:89:2f:11:99:9f:74:43:ed:68:0c:06:cf:85:
38:aa:ca:97:77:fc:e7:93:29:c9:a4:b0:75:a8:d6:
c2:29:3e:ac:da:96:fc:a8:23:2a:f6:62:71:05:f0:
9c:8c:fb:6d:f8:44:f0:34:01:24:c2:7b:fe:e1:36:
81:0f:89:fe:55:66:f7:5a:cd:5f:e9:96:d1:06:64:
2a:33:ed:85:d2:19:15:a1:13:65:ae:50:aa:48:a4:
36:44:fa:8c:75:00:eb:f2:f1:71:7a:a9:3b:95:c7:
bf:aa:19:b9:48:60:54:aa:8b:8a:f3:c0:70:59:1d:
4e:a7:b4:8f:6f:aa:fd:ee:08:fe:1a:ef:ae:71:6d:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F0:D5:D0:DD:A3:67:B8:A1:C8:AF:8F:58:86:6D:11:95:10:53:F3
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/yvDV0N2jZ7ihyK-PWIZtEZUQU_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.180.0/22
Signature Algorithm: sha256WithRSAEncryption
79:f4:02:e9:5c:2f:37:a8:b7:cd:bf:7d:ec:54:2e:d5:ce:41:
2d:03:d9:30:df:91:db:c6:31:fd:0a:73:47:5b:75:2f:73:f5:
b9:66:32:ca:95:9b:ef:06:7e:07:3e:39:99:99:48:74:75:e8:
9e:10:47:58:33:da:33:b2:18:ee:ce:27:2b:6c:10:7f:d8:b4:
d7:75:f9:28:98:91:4d:54:ed:80:64:56:12:4d:8a:4d:ee:2b:
4d:5a:8f:35:06:b4:b6:e5:a9:ed:f6:db:11:7b:45:4e:c4:a2:
d8:b3:a6:11:64:5c:d0:51:74:62:18:1c:25:cc:2d:63:4e:30:
eb:91:1a:26:3e:41:7f:71:af:53:02:9f:8f:5a:a4:02:49:5f:
14:09:26:16:51:c0:f0:08:cb:3d:f1:ed:7f:7c:06:60:e9:f0:
6a:06:8f:9b:99:ff:09:09:58:06:5c:4c:7c:68:ef:af:c7:58:
d8:d9:90:30:66:e5:03:d7:57:e7:ab:2d:d7:b4:64:c0:7f:fd:
28:43:4e:f1:15:f4:b8:23:0e:7b:33:ed:08:b6:43:b8:41:db:
79:c5:56:c1:5f:a8:ff:02:b9:c9:6f:71:d6:a6:95:b2:ab:4f:
a9:63:f2:76:a0:55:f0:77:d5:73:2f:9c:47:fc:43:f5:96:d9:
1f:e7:b0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org