Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/2gV108DQJGATrme6tiRlTjvdLG4.roa
File: 2gV108DQJGATrme6tiRlTjvdLG4.roa (raw, json)
Hash identifier: AuheBIRG5HQlZrdw2Wc9tharnqvDJvWNdyFl3HOeoAE=
Subject key identifier: DA:05:75:D3:C0:D0:24:60:13:AE:67:BA:B6:24:65:4E:3B:DD:2C:6E
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 018A0444FD31F569D5CA6C08ADCA87666FC0
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/2gV108DQJGATrme6tiRlTjvdLG4.roa
Signing time: Thu 17 Aug 2023 16:12:24 +0000
ROA not before: Thu 17 Aug 2023 16:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206119
IP address blocks: 185.169.183.0/24 maxlen: 24
185.169.182.0/24 maxlen: 24
45.133.37.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Sep 2023 15:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:04:44:fd:31:f5:69:d5:ca:6c:08:ad:ca:87:66:6f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Aug 17 16:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da0575d3c0d0246013ae67bab624654e3bdd2c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:08:d0:0a:90:0f:8f:e1:7b:d6:a5:3f:1b:
fd:38:5e:f9:aa:8f:ad:e9:6c:d4:f1:5f:02:77:f9:
08:6e:c5:7d:07:57:6c:ef:5f:ee:88:34:31:d3:c1:
c4:02:c1:45:72:67:df:f1:9b:15:4f:3a:ef:f9:38:
38:46:0c:27:40:87:af:fe:62:be:ab:a0:2d:49:bc:
61:88:2f:94:be:88:2a:07:45:0f:f3:b4:e0:04:dd:
b5:b9:da:ae:05:d4:6b:a3:56:79:58:ed:a8:04:9a:
6d:07:2c:bf:62:46:74:ee:6e:d5:8f:51:82:01:b1:
10:bd:2d:49:1c:8e:af:55:bb:f0:17:3e:5b:c7:9d:
8a:01:d9:df:32:68:6d:63:8a:d9:2b:8e:02:ec:fd:
8c:60:ae:ec:3c:64:52:80:d0:25:78:ef:24:0f:4d:
69:af:8a:46:28:a2:24:5a:9b:03:cd:84:be:89:c0:
0a:e9:6d:84:22:92:c0:35:82:a3:98:19:6e:3a:81:
2c:ed:b1:38:7c:15:77:a4:f8:e0:4d:e2:20:6f:39:
3b:8b:ba:ae:7f:c9:d3:da:64:e2:0c:1a:fc:26:2e:
eb:b1:14:a0:fe:14:77:a4:78:2d:8b:ed:34:3d:c2:
d3:cd:28:83:d3:97:ef:08:de:3a:04:02:89:fc:75:
84:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:05:75:D3:C0:D0:24:60:13:AE:67:BA:B6:24:65:4E:3B:DD:2C:6E
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/2gV108DQJGATrme6tiRlTjvdLG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.37.0/24
185.169.182.0/23
185.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:4e:50:eb:2f:af:ad:cc:80:b2:24:84:0e:ae:b1:c3:99:8d:
25:04:8a:d8:3e:ab:c6:90:13:9b:71:ef:d4:2f:ce:19:59:6a:
63:6e:cc:32:78:94:af:77:4e:5a:0d:36:fc:73:39:13:83:44:
79:79:b1:bb:16:95:85:7e:c5:38:38:11:79:a8:f1:a0:2f:81:
ac:ea:95:ff:55:c9:46:4b:d4:f8:29:73:08:b1:2e:ca:48:e3:
8f:c4:ff:82:f7:df:f8:f0:58:ca:37:0b:19:67:d0:a2:1c:df:
5f:58:f9:dd:e3:f7:b0:7c:a5:83:16:70:d5:bd:34:d0:73:eb:
5c:50:06:50:c1:b1:fe:bb:a3:af:bf:32:66:7e:0d:10:46:de:
6a:4d:b7:eb:ea:56:79:1e:ef:f7:de:46:68:b9:5b:bb:ff:50:
ba:ac:5f:86:cf:c0:39:bc:ee:af:5e:ad:20:0c:6a:77:06:cf:
22:7d:2a:a9:7d:c2:00:2b:82:aa:f4:34:c4:db:99:c0:78:a7:
58:90:d1:fb:41:66:0a:43:da:fa:83:62:7a:0b:ae:30:aa:67:
35:86:cd:23:c5:2e:0e:85:63:00:4f:f2:00:b6:66:4c:7e:ab:
2e:df:ac:9b:4e:58:d6:3c:ca:2e:59:a9:4c:db:cf:ab:71:6b:
3b:45:88:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:49 2024 by rpki-client on console-fra.rpki-client.org