Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/4M4h2Zjnt2Qeu2LdeClRy2P31Ac.roa
File: 4M4h2Zjnt2Qeu2LdeClRy2P31Ac.roa (raw, json)
Hash identifier: Vsu9AvFwxWqHA04iTbtiyPjB2k0cLi1upctlpU4gTPU=
Subject key identifier: E0:CE:21:D9:98:E7:B7:64:1E:BB:62:DD:78:29:51:CB:63:F7:D4:07
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 018656B031417E1C3BA86A2EAE999BD1CF0F
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/4M4h2Zjnt2Qeu2LdeClRy2P31Ac.roa
Signing time: Wed 15 Feb 2023 20:07:12 +0000
ROA not before: Wed 15 Feb 2023 20:07:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11426
IP address blocks: 185.45.95.0/24 maxlen: 24
185.45.92.0/23 maxlen: 23
45.158.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:56:b0:31:41:7e:1c:3b:a8:6a:2e:ae:99:9b:d1:cf:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Feb 15 20:07:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0ce21d998e7b7641ebb62dd782951cb63f7d407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:27:07:80:2d:02:8b:c5:18:73:d2:ed:1b:5d:
cb:fa:85:5c:fa:43:bd:b7:1b:f6:ee:95:eb:86:a4:
2c:c4:32:56:f3:b2:b7:95:f7:7a:a2:70:69:f0:33:
53:aa:2b:eb:a1:3a:de:d8:3a:4c:61:60:1c:f9:22:
f1:1a:13:c8:d4:b3:00:87:d2:54:6c:9f:3a:b3:08:
5a:e2:66:b0:97:ab:e8:72:e1:19:f1:10:6e:36:b2:
77:33:c0:9a:fa:f4:a8:5e:5b:d1:70:cf:6f:ca:80:
2d:fc:6e:1d:0a:c1:36:83:e5:37:17:13:39:1d:b7:
78:b8:f8:38:1f:24:bf:8f:c4:d9:9a:5c:4b:af:74:
12:a5:3d:15:75:a4:38:c4:b0:c4:c7:64:83:df:f1:
1c:b8:17:53:09:31:a5:65:96:b1:a0:ad:c2:a9:78:
10:91:0c:55:65:ce:ee:ff:73:c9:c0:a6:68:c9:26:
c1:49:2f:22:12:fb:dc:d8:fb:e2:fe:75:fb:1a:1e:
29:62:57:20:bb:81:79:86:bc:78:10:22:9e:ad:29:
53:68:f1:49:51:49:f9:7e:b3:e6:2f:8e:90:ea:8f:
38:82:9b:1d:a7:62:e4:2b:98:20:09:1c:7c:4c:6e:
c0:2a:99:a6:df:d7:4a:05:3e:f9:ad:a6:ca:7b:70:
0b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CE:21:D9:98:E7:B7:64:1E:BB:62:DD:78:29:51:CB:63:F7:D4:07
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/4M4h2Zjnt2Qeu2LdeClRy2P31Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.192.0/22
185.45.92.0/23
185.45.95.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:32:7a:ca:04:60:b8:74:79:d3:b5:eb:01:64:1f:ed:40:58:
90:71:80:ce:21:f4:15:62:26:e7:bd:2b:06:6a:fe:8e:a1:7d:
6f:b8:f7:1e:de:06:e4:b5:c0:e9:14:c9:15:7f:35:cd:92:2c:
9c:9c:a5:43:c2:45:bc:4f:f3:f8:59:a5:e1:a4:d4:7b:09:f3:
a2:36:87:3b:ef:14:47:07:38:b1:8b:99:c4:54:95:bc:76:0e:
f6:f7:04:0c:66:43:14:6f:82:ad:17:ff:14:60:e2:f3:0f:db:
92:9b:89:f0:a2:f6:e7:4d:33:69:ee:be:d6:0c:7d:bb:d8:df:
fd:71:70:5d:26:29:fe:e6:b1:6b:9a:a4:0f:64:a7:72:7c:fa:
c7:9f:85:8f:0f:61:9c:27:2d:07:27:fd:9c:e2:4c:41:c8:54:
eb:a4:4e:45:0a:e4:e1:e2:ef:24:80:2b:09:40:e4:53:56:fd:
ab:05:68:3a:c8:6b:f5:cb:e5:0f:2f:c6:55:ff:dd:a7:ba:d2:
00:20:31:cb:e3:89:35:0b:d6:a6:1a:29:d5:a3:04:63:49:aa:
a7:93:72:19:70:41:89:65:a3:51:c9:8a:b4:30:df:be:9d:c6:
d7:b9:8e:51:2c:82:8c:71:e3:39:4f:4d:2d:5f:1f:b7:6e:f7:
99:a0:2d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:24 2024 by rpki-client on console-fra.rpki-client.org