Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/u8_M0iGCjCEXp-dGJSsIcOSW7oo.roa
File: u8_M0iGCjCEXp-dGJSsIcOSW7oo.roa (raw, json)
Hash identifier: 8edARg4eIBqTVdI8L4SsWZT0y8kIcWX2WuZ+r7jlY9s=
Subject key identifier: BB:CF:CC:D2:21:82:8C:21:17:A7:E7:46:25:2B:08:70:E4:96:EE:8A
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018AA773104D0457634D657376A3BEF9B4A7
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/u8_M0iGCjCEXp-dGJSsIcOSW7oo.roa
Signing time: Mon 18 Sep 2023 08:40:50 +0000
ROA not before: Mon 18 Sep 2023 08:40:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 45.140.10.0/23 maxlen: 23
45.138.2.0/23 maxlen: 23
45.141.124.0/22 maxlen: 23
213.185.88.0/21 maxlen: 23
45.130.54.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 18 Dec 2023 08:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:73:10:4d:04:57:63:4d:65:73:76:a3:be:f9:b4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Sep 18 08:40:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbcfccd221828c2117a7e746252b0870e496ee8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:58:cc:fa:c4:c3:4a:97:67:95:26:87:94:
85:de:57:91:48:35:2c:40:8e:2d:cb:97:c8:af:1b:
1d:43:33:d1:fb:a5:46:2f:9c:3b:bb:57:60:6b:84:
0d:b6:2a:95:ae:13:86:bf:aa:72:54:40:35:25:36:
54:26:fe:26:13:1c:67:ec:b7:87:bf:19:01:13:b6:
47:aa:ec:9f:1a:bf:ac:60:69:69:3d:a2:33:fa:f2:
99:e0:94:3b:6c:f0:71:bb:de:d1:00:30:dc:67:82:
22:fc:05:20:73:a0:58:d1:ef:6a:cf:5c:4d:21:d7:
8c:c6:47:07:e6:0e:75:4c:23:ea:78:88:77:ff:39:
0a:cd:d4:1c:f0:d3:d2:d8:b6:a8:9b:42:1d:0a:a2:
71:77:b4:e7:08:71:9d:76:05:bd:47:1f:b8:d8:eb:
36:3c:e4:39:18:4c:3f:16:bd:e2:35:a1:bd:d9:11:
4a:d7:92:ea:91:54:53:64:5f:25:92:76:ac:37:dc:
05:ce:0f:e5:15:e2:12:4e:48:d9:6e:38:b4:f7:13:
67:ee:71:07:0b:35:e6:c8:38:43:fb:87:41:a5:44:
1b:30:36:cf:fb:c9:6e:2c:72:b7:81:3d:d9:9c:c0:
99:43:2d:2e:ac:4e:cb:35:e3:a1:47:c2:31:01:77:
ba:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CF:CC:D2:21:82:8C:21:17:A7:E7:46:25:2B:08:70:E4:96:EE:8A
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/u8_M0iGCjCEXp-dGJSsIcOSW7oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.54.0/23
45.138.2.0/23
45.140.10.0/23
45.141.124.0/22
213.185.88.0/21
Signature Algorithm: sha256WithRSAEncryption
50:1f:fd:83:15:ca:06:34:e6:51:8a:d2:10:1b:5c:fa:a3:45:
18:51:3d:4f:78:30:e9:7d:c7:3c:8d:cb:ef:03:32:86:79:66:
d9:88:b2:24:ff:51:ef:d0:4c:97:0f:e3:17:ad:68:22:32:e5:
9b:13:62:8f:6e:bb:d4:46:49:dd:0f:de:be:3c:bd:38:c7:ef:
23:b1:a3:4b:78:3f:c0:c2:ca:24:44:e1:d1:ba:b3:61:d7:2f:
be:ce:fc:19:ef:e7:31:10:34:d7:e8:c9:dd:8a:9e:70:92:3b:
73:cd:aa:d9:c4:ff:9c:23:f6:e9:fe:3e:28:1e:99:c0:7d:39:
26:98:28:28:e5:6b:68:f3:c0:d3:e8:04:fc:8b:5e:55:2e:bf:
5b:81:57:5e:05:f8:fa:9d:be:87:a9:c4:ea:4c:ac:e5:e2:1e:
03:89:45:0f:97:18:39:63:2f:7d:51:e3:b7:f0:32:2a:c0:58:
87:70:49:36:39:44:bb:20:a2:9c:de:ab:07:1e:0a:98:e3:f9:
5e:a4:4e:c0:b5:b5:ed:6a:b6:1a:ae:69:cd:d1:08:6d:9d:62:
a5:22:27:80:ee:f7:97:3b:4e:85:0c:b8:ce:a6:e0:60:21:64:
8f:70:7e:08:bf:c1:12:58:02:8f:03:ae:a1:e2:b4:ff:07:02:
92:47:de:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org