Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/2UC1m0-Tdd84klkbB83FfZaBDII.roa
File: 2UC1m0-Tdd84klkbB83FfZaBDII.roa (raw, json)
Hash identifier: fQx9u3C4/LDo5da3a3FvTADMdvmC1Vc+sei573FSD8c=
Subject key identifier: D9:40:B5:9B:4F:93:75:DF:38:92:59:1B:07:CD:C5:7D:96:81:0C:82
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018CC50118F44D771B7D6A9A619EBF857B09
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/2UC1m0-Tdd84klkbB83FfZaBDII.roa
Signing time: Mon 01 Jan 2024 12:30:32 +0000
ROA not before: Mon 01 Jan 2024 12:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39521
IP address blocks: 45.138.2.0/23 maxlen: 23
45.141.124.0/22 maxlen: 23
213.185.90.0/23 maxlen: 23
45.130.54.0/23 maxlen: 23
213.185.94.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 18 Jan 2024 13:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:18:f4:4d:77:1b:7d:6a:9a:61:9e:bf:85:7b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 12:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d940b59b4f9375df3892591b07cdc57d96810c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f7:d2:68:36:16:7b:27:ab:8d:f3:8d:df:c1:
9d:9e:c3:05:65:ac:b8:ab:67:ed:a6:91:c8:74:8d:
00:6d:78:cf:ab:ce:39:d1:32:da:1f:2d:aa:68:52:
a3:7c:f7:4f:05:68:ab:2c:c1:47:f7:5a:f0:82:3a:
8f:4e:2d:f3:f4:01:65:8a:05:e4:04:1d:bf:c6:2c:
1a:ba:d6:dd:65:2d:1c:ff:82:35:cb:ca:2e:4d:c7:
18:9c:2e:b2:ba:d9:1d:33:0e:a7:48:44:be:68:4f:
96:f4:2b:af:71:25:09:bc:9a:3b:4f:ed:42:d7:ca:
9d:42:d4:c2:b6:3e:ad:15:2d:de:8e:88:c8:44:de:
37:76:a7:70:2e:31:97:87:d9:f7:95:fa:e6:e5:29:
24:1d:e9:16:6e:90:c0:22:6b:72:22:c7:a2:9a:6f:
1d:1d:4a:e5:44:93:78:ab:dd:51:de:a1:19:fa:28:
d0:99:53:74:e0:4f:08:2a:70:c9:b9:21:19:2e:41:
5b:94:be:22:a5:9d:1f:38:ef:52:75:d2:dc:43:27:
ad:92:72:ea:45:01:73:20:84:c0:e9:08:54:4c:56:
c6:fc:3b:f1:0f:f3:6e:2c:bd:38:6b:20:b6:dc:32:
20:62:64:29:80:66:5a:d9:f8:40:cd:24:c0:e8:69:
58:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:40:B5:9B:4F:93:75:DF:38:92:59:1B:07:CD:C5:7D:96:81:0C:82
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/2UC1m0-Tdd84klkbB83FfZaBDII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.54.0/23
45.138.2.0/23
45.141.124.0/22
213.185.90.0/23
213.185.94.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:46:c3:62:b6:d7:59:40:6b:e0:28:6c:f3:5e:e2:d5:0b:c9:
e8:f3:33:00:66:ed:9f:e5:2b:b3:ef:ad:a0:ff:72:eb:e0:e7:
ad:a8:12:b7:57:f9:ea:d9:07:79:8c:c2:82:be:dc:11:e0:45:
7b:4e:07:fb:3a:d3:bc:53:7c:02:98:07:c1:4c:e5:84:4d:35:
29:9c:68:ca:6f:49:7a:4f:30:09:a9:41:6a:86:99:03:32:65:
45:89:f9:d9:30:5f:57:3c:7c:4a:4b:66:39:53:af:e7:19:a8:
8a:b7:cf:2b:29:a6:68:1f:a2:b6:1b:15:59:ac:eb:6e:a3:31:
3f:87:24:ce:99:aa:0a:a2:9a:a8:50:a3:94:04:63:b7:98:f6:
37:d3:05:54:29:34:49:6d:99:64:98:49:68:cd:2c:48:68:8d:
81:89:1f:51:bf:35:e1:7f:44:47:c0:f8:c2:20:46:c9:98:36:
38:5c:e6:cc:d1:05:c6:0a:39:36:da:42:83:20:f3:4e:26:4f:
98:f0:61:00:43:16:b2:db:c3:55:48:bf:33:9e:64:ab:39:af:
9c:ae:9a:f5:53:a7:a1:51:83:7c:7e:bb:1c:60:9a:56:74:a4:
a1:0f:31:75:85:cc:c4:c3:19:b0:8e:cc:3c:88:a9:36:26:62:
85:64:2a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org