Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/ue2BnjvvkRFSRPsT8djDpczaSdY.roa
File: ue2BnjvvkRFSRPsT8djDpczaSdY.roa (raw, json)
Hash identifier: f6xFKgsSCOzMuMsEjhJTEWSRPf6KINntxN+DM17zhzw=
Subject key identifier: B9:ED:81:9E:3B:EF:91:11:52:44:FB:13:F1:D8:C3:A5:CC:DA:49:D6
Certificate issuer: /CN=ebf385ced090dbf1d044734e12a270ee6b841c96
Certificate serial: 018D65061F9FD20D27F28FF78607D1B9FC8E
Authority key identifier: EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/ue2BnjvvkRFSRPsT8djDpczaSdY.roa
Signing time: Thu 01 Feb 2024 14:15:16 +0000
ROA not before: Thu 01 Feb 2024 14:15:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 45.141.88.0/24 maxlen: 24
45.141.89.0/24 maxlen: 24
45.141.90.0/24 maxlen: 24
45.141.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 11:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:06:1f:9f:d2:0d:27:f2:8f:f7:86:07:d1:b9:fc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf385ced090dbf1d044734e12a270ee6b841c96
Validity
Not Before: Feb 1 14:15:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9ed819e3bef91115244fb13f1d8c3a5ccda49d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:33:9b:e1:bc:f1:74:9b:5d:ac:6e:f8:cc:
71:69:83:a5:13:0a:b2:ce:75:4e:36:bd:1a:61:64:
fa:4e:0a:45:db:30:3f:8a:f0:3b:0f:56:67:22:ee:
08:b5:d9:51:ff:6a:e8:49:75:0d:00:7f:bc:28:94:
67:9a:70:da:38:8a:0d:6c:a2:36:f8:50:6d:d2:df:
a1:e6:57:de:9d:3b:b8:40:e2:d9:c6:3b:5d:d4:20:
a0:5f:6b:0a:50:43:77:dd:25:d1:42:ec:14:54:8e:
28:c2:2d:f1:5c:d4:33:58:85:d3:14:f4:62:c3:7c:
6f:14:0c:d0:b9:b0:d9:dd:d1:03:67:07:10:e8:69:
27:4a:8d:54:99:95:79:7c:a8:5e:b3:9d:37:08:30:
23:1d:3c:23:9d:08:97:35:df:f7:c0:ec:77:21:86:
25:94:62:0b:45:82:32:68:c6:57:15:d2:ba:81:2e:
14:cc:2b:82:15:87:51:e6:18:0a:9f:76:3f:28:7c:
61:49:f4:70:7b:35:a5:44:80:d0:0d:ff:c1:9d:c1:
1a:4a:0b:0e:ba:b4:46:d3:f1:4c:f1:d1:8b:95:34:
73:26:9f:14:d2:55:d0:de:fd:0f:4d:92:8d:0f:b2:
98:3d:a3:31:25:63:a0:b6:84:2c:a5:d4:06:c1:fd:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:ED:81:9E:3B:EF:91:11:52:44:FB:13:F1:D8:C3:A5:CC:DA:49:D6
X509v3 Authority Key Identifier:
keyid:EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/ue2BnjvvkRFSRPsT8djDpczaSdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.88.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:97:ac:ff:2a:14:1f:a1:db:34:bf:3f:61:dd:0a:95:f8:f6:
af:50:ba:c0:1f:1b:11:69:2f:41:c1:1b:e8:5f:8b:44:15:2b:
c9:a8:f3:17:a9:e5:73:b3:60:04:a1:0a:29:f9:b8:af:46:24:
a5:82:6a:44:ca:04:50:03:5d:9f:a6:8e:2a:15:d7:52:d9:07:
9d:46:be:7c:25:16:dd:1f:7a:f1:e3:27:02:3e:0b:94:d3:2a:
d2:73:bd:35:f7:e8:8a:41:1c:2b:be:31:f2:a1:c0:fd:00:70:
9b:2e:f3:04:4a:7a:d2:89:08:73:27:4a:b2:79:9e:5f:b5:cb:
cb:40:4f:e2:f1:da:b7:27:39:b9:79:4f:70:6b:cd:61:12:9e:
78:da:50:60:0f:10:91:dc:0a:47:d7:65:eb:59:96:57:a9:30:
90:b7:82:a0:fb:f2:44:2c:38:3a:08:71:97:95:40:94:79:25:
c2:83:c0:63:80:c5:72:6c:58:9f:72:52:22:fd:da:33:18:02:
2a:d4:ce:53:9c:3e:e5:3b:db:ae:67:85:18:b4:6c:9f:b2:60:
67:bf:cf:f7:57:49:29:28:5f:f2:33:a7:13:5c:a1:a4:cb:4c:
63:d2:64:55:8a:59:0f:05:90:3f:da:e0:d2:ad:f1:06:fc:c7:
7e:15:57:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 17:07:23 2024 by rpki-client on console-fra.rpki-client.org