Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/iL4tPPXd5Th1DcMDLQgj6rVmxaE.roa
File: iL4tPPXd5Th1DcMDLQgj6rVmxaE.roa (raw, json)
Hash identifier: U8YNr7dAulj2j/wwY/GyBQ4XBQO41YZlmFdOlZKlOeE=
Subject key identifier: 88:BE:2D:3C:F5:DD:E5:38:75:0D:C3:03:2D:08:23:EA:B5:66:C5:A1
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01859C93A2541072E5714594DE6565D38D85
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/iL4tPPXd5Th1DcMDLQgj6rVmxaE.roa
Signing time: Tue 10 Jan 2023 16:46:39 +0000
ROA not before: Tue 10 Jan 2023 16:46:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 45.140.10.0/23 maxlen: 23
45.138.2.0/23 maxlen: 23
45.148.50.0/23 maxlen: 23
45.141.124.0/22 maxlen: 23
194.156.176.0/22 maxlen: 23
213.185.88.0/21 maxlen: 23
45.130.54.0/23 maxlen: 23
195.62.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jan 2023 23:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9c:93:a2:54:10:72:e5:71:45:94:de:65:65:d3:8d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 10 16:46:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88be2d3cf5dde538750dc3032d0823eab566c5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1d:c1:87:48:9b:78:a1:c8:d9:68:e9:68:f7:
b0:77:70:b1:92:14:2a:6a:33:e3:5e:88:aa:e5:e4:
39:f1:b8:04:1f:3e:5f:d7:73:94:93:8f:dd:17:6d:
e4:7a:48:d6:64:54:df:16:cb:75:08:57:3f:30:28:
c7:dd:29:c0:cd:52:20:61:6b:ba:d2:cb:ec:15:88:
a5:ec:2a:38:d4:d9:12:7f:4e:68:9f:1d:fd:e7:aa:
6a:08:d5:91:57:d6:57:bf:49:06:ef:94:64:27:19:
57:53:16:19:fd:2b:dd:07:73:8c:b8:66:03:39:27:
01:6d:b9:1b:7e:de:0d:2c:72:57:d4:2b:47:32:ea:
7a:79:99:00:ab:55:72:e7:f7:2e:9d:f7:0c:c3:4a:
39:fe:8e:44:df:19:4c:e6:67:c8:02:a5:23:d0:e6:
1e:30:39:7d:3e:e5:98:51:ac:90:d3:8b:dd:f3:ce:
cf:97:50:e6:b3:22:86:d7:e2:21:e7:df:a8:25:28:
88:91:ee:b0:cd:63:27:a0:91:06:54:6d:90:6d:e5:
86:eb:7f:4e:40:a5:7a:07:d3:69:c9:da:33:6d:de:
d8:63:34:dc:cb:fa:f0:e2:6e:f1:5b:c6:ae:27:33:
fa:b3:ec:fd:2d:82:97:5b:d7:8d:db:93:90:8a:f2:
c2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BE:2D:3C:F5:DD:E5:38:75:0D:C3:03:2D:08:23:EA:B5:66:C5:A1
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/iL4tPPXd5Th1DcMDLQgj6rVmxaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.54.0/23
45.138.2.0/23
45.140.10.0/23
45.141.124.0/22
45.148.50.0/23
194.156.176.0/22
195.62.22.0/23
213.185.88.0/21
Signature Algorithm: sha256WithRSAEncryption
76:b6:3e:f6:08:05:99:25:1b:79:d0:05:da:48:1e:26:db:46:
7f:78:c0:e7:4a:52:e5:04:78:af:08:1b:e2:f8:01:99:2c:97:
19:a3:53:f1:40:fd:ca:38:4d:88:ad:93:e3:80:57:dc:c8:c2:
60:06:a3:2b:ce:87:8f:c8:4e:a1:fe:1d:b7:3d:1d:e6:50:07:
79:d8:4f:29:f1:29:73:d5:b6:ef:4d:16:67:09:f9:43:c3:6b:
8b:c7:ed:51:37:d4:47:24:71:7f:39:d1:41:28:b9:67:0b:1f:
19:ee:32:3e:a7:19:11:d5:96:32:0f:28:16:4e:c3:75:1d:7a:
c7:6b:e5:f0:eb:c4:d5:c8:7c:28:eb:03:01:e2:19:38:0f:d6:
6c:8b:2c:7e:60:e3:ef:d4:1f:63:85:36:d1:bf:32:3a:da:3f:
ee:0b:b0:a3:b0:ae:31:4f:f8:c3:5f:d3:1c:bf:22:1b:d0:8a:
01:5d:79:ab:b3:7b:10:c7:e5:bb:de:f7:d5:b7:ac:ff:94:03:
6a:79:15:f7:82:49:49:f3:4f:40:7a:a7:fe:21:0c:c1:82:6e:
6e:cc:de:a0:a2:1d:9e:91:2f:e2:85:16:56:11:29:cb:cd:72:
55:4d:c8:fc:26:80:ae:9b:c5:1b:68:b2:4b:2d:4f:f3:18:bf:
6b:d6:fe:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org