Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/j74Jd8qI4KPEvhlwNalAH9wr62Y.roa
File: j74Jd8qI4KPEvhlwNalAH9wr62Y.roa (raw, json)
Hash identifier: wmvbxBnzCrsvvkKQSvByJY7HKVglEPEqs8m6ons9xBg=
Subject key identifier: 8F:BE:09:77:CA:88:E0:A3:C4:BE:19:70:35:A9:40:1F:DC:2B:EB:66
Certificate issuer: /CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Certificate serial: 0185822D41E3D9F1694B897FC59F64050A39
Authority key identifier: 1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/j74Jd8qI4KPEvhlwNalAH9wr62Y.roa
Signing time: Thu 05 Jan 2023 13:44:42 +0000
ROA not before: Thu 05 Jan 2023 13:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20712
IP address blocks: 45.134.249.0/24 maxlen: 24
45.134.251.0/24 maxlen: 24
45.140.69.0/24 maxlen: 24
45.140.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:2d:41:e3:d9:f1:69:4b:89:7f:c5:9f:64:05:0a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Validity
Not Before: Jan 5 13:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fbe0977ca88e0a3c4be197035a9401fdc2beb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:30:9d:90:32:18:2d:06:a1:9b:9e:14:6c:40:
ac:5d:a8:3a:45:4b:3c:62:46:98:e3:e1:60:ad:3f:
a4:58:39:61:67:81:df:24:82:5e:71:6d:6c:4a:3a:
5d:b7:fb:7c:db:c8:12:45:77:16:88:ee:84:c7:1c:
3c:7c:3d:f8:51:c9:22:d0:63:8d:01:90:37:79:58:
6f:c0:05:15:b9:cf:92:b7:73:12:ef:e3:49:39:60:
e9:ca:37:43:18:a7:bd:a4:35:d8:29:ea:de:d8:0a:
f9:ad:53:1d:9e:30:cd:ae:be:18:fe:01:89:4a:c4:
af:8a:c6:93:60:9e:d7:8e:ee:43:f5:ec:0f:60:30:
91:38:da:5c:e0:c2:8d:2a:82:a0:ab:e8:da:f1:f4:
b8:ca:1a:b3:e9:3f:e8:89:e8:06:4a:f8:8c:f4:f5:
cc:40:78:93:46:3e:64:3c:33:cc:1f:ea:5f:02:b6:
c0:74:71:cb:a1:50:91:85:a8:21:d0:ed:f6:be:76:
6b:9b:20:14:d1:c8:5d:ce:94:c2:5d:83:fe:f1:cb:
d0:1d:32:3c:a4:97:ae:29:04:c1:09:cc:da:d3:ea:
85:ce:60:ff:e6:b2:ae:99:cc:ef:d6:e0:86:3e:bd:
0e:07:ac:91:01:65:c6:d4:5a:5d:e1:9a:a7:cd:9b:
fc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BE:09:77:CA:88:E0:A3:C4:BE:19:70:35:A9:40:1F:DC:2B:EB:66
X509v3 Authority Key Identifier:
keyid:1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/j74Jd8qI4KPEvhlwNalAH9wr62Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.249.0/24
45.134.251.0/24
45.140.69.0/24
45.140.71.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a6:67:d8:00:84:67:81:6c:d8:1e:5b:04:80:51:d8:74:a4:
7a:aa:60:c2:50:52:97:fd:9e:de:93:3f:49:63:84:1a:2a:ad:
e9:0f:22:47:d0:df:22:71:3e:66:38:59:2e:80:e8:53:e2:5c:
e9:1c:00:d0:ea:ea:05:51:f6:c9:3d:37:01:df:c0:61:24:d0:
b0:69:eb:00:90:84:02:29:97:06:3e:79:ef:0c:72:21:a8:51:
40:a4:82:9e:e3:f9:01:0e:38:15:99:83:ad:f1:e1:ec:bc:e3:
f0:42:d4:48:14:f2:0f:e8:fa:39:56:b5:90:fb:20:00:88:f5:
d6:aa:47:7f:75:c7:04:3d:d9:27:8c:4e:4f:23:dc:ac:b2:f5:
68:97:3b:80:74:82:46:92:62:6c:f0:b4:82:48:d7:8b:08:2d:
23:24:98:e2:b7:82:8f:e9:a7:6b:e3:40:f5:66:26:3a:bf:db:
c2:c1:34:fd:d7:76:65:56:69:a1:fa:d6:6e:7b:0b:64:26:16:
32:65:fd:11:4f:2f:17:70:ae:5a:4a:56:2b:1e:5e:72:ae:49:
3a:de:0f:87:7e:e7:ed:75:63:62:ae:a6:e1:25:54:6d:82:a0:
25:7f:fd:53:db:85:58:77:d6:dc:27:43:d4:f7:c0:78:b5:ca:
f0:81:b7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:53 2024 by rpki-client on console-ams.rpki-client.org