Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/8DS3sFUVFZ94akIow1I8gDm2aUo.roa
File: 8DS3sFUVFZ94akIow1I8gDm2aUo.roa (raw, json)
Hash identifier: p4FElMWfiIQIH2Lc622dvinUOTGLip3JocO3Om2LHHU=
Subject key identifier: F0:34:B7:B0:55:15:15:9F:78:6A:42:28:C3:52:3C:80:39:B6:69:4A
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 018940C7030E08F68283A208650729DDE4E4
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/8DS3sFUVFZ94akIow1I8gDm2aUo.roa
Signing time: Mon 10 Jul 2023 17:08:51 +0000
ROA not before: Mon 10 Jul 2023 17:08:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206119
IP address blocks: 185.169.183.0/24 maxlen: 24
185.169.182.0/24 maxlen: 24
45.133.37.0/24 maxlen: 24
45.133.38.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Aug 2023 16:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:40:c7:03:0e:08:f6:82:83:a2:08:65:07:29:dd:e4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jul 10 17:08:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f034b7b05515159f786a4228c3523c8039b6694a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4f:64:1e:6e:9d:b1:bf:0e:f4:17:de:4d:68:
06:4f:23:62:ca:90:7f:47:26:5f:ae:81:81:1a:4e:
93:b3:9b:5f:22:1c:85:7b:bb:d7:3b:3a:d7:2f:86:
b9:a4:b0:5e:d8:ae:b8:67:a4:32:86:48:2d:2d:91:
4f:3f:a5:73:89:57:70:a3:38:92:5e:2a:a3:4d:3b:
bf:33:f1:59:6b:72:36:48:de:2a:6e:a7:dd:f3:1c:
55:22:e6:a5:da:e5:cf:62:b8:83:d4:d5:b4:6f:0e:
7a:15:b8:a2:d1:93:c9:ad:fd:1f:20:11:b9:06:46:
bb:2b:13:62:f3:81:6b:bc:04:f7:22:60:55:82:e8:
b2:84:fe:35:f2:7f:1a:c8:dc:9e:27:95:21:d8:14:
f0:6b:5f:b2:53:42:8a:f0:76:8d:f7:7d:8c:dd:25:
b5:7f:c2:9c:d5:b9:b2:11:5e:a8:62:a5:a7:2d:8a:
44:4e:91:4d:3b:b8:99:fc:85:8d:a9:e3:e2:76:7c:
c0:22:28:4a:27:41:cd:01:82:c4:c1:9b:0b:79:ca:
5a:51:6b:be:15:c3:60:e4:34:c3:f5:7a:f0:c9:68:
1c:13:52:26:14:93:d0:63:07:13:18:ff:bd:d7:f4:
56:69:44:b4:ce:d1:76:87:c4:96:d7:01:d6:71:c3:
eb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:34:B7:B0:55:15:15:9F:78:6A:42:28:C3:52:3C:80:39:B6:69:4A
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/8DS3sFUVFZ94akIow1I8gDm2aUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.37.0-45.133.38.255
185.169.182.0/23
185.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
94:38:8c:a3:21:8e:cd:ff:fb:32:40:58:e7:2a:99:da:d8:b2:
1a:69:5a:4e:87:10:f4:63:a3:c7:55:eb:ed:aa:91:00:ab:25:
ed:86:24:b9:9a:0e:88:71:13:18:61:b1:ac:4c:94:4f:3e:41:
12:01:66:9f:27:80:b5:df:e7:4f:9f:72:8c:4b:7f:1f:f2:3b:
d8:14:c3:aa:d4:bf:3e:ce:b1:d5:24:a2:cd:7c:77:68:59:3d:
4a:5b:f7:24:d4:b6:ec:57:b5:b0:21:7e:a1:22:19:77:14:c9:
52:d8:a7:9c:8f:3c:2b:0a:d9:74:5a:91:df:17:f0:54:9d:92:
48:45:26:92:7f:a0:18:d5:28:94:dc:12:57:6b:26:b6:dc:8f:
03:f7:e0:17:61:fa:eb:59:b1:e9:a8:e8:38:92:87:36:08:6b:
2f:85:bc:98:1a:71:16:16:ea:f8:42:0e:6c:80:08:76:cd:51:
5f:1f:6f:52:a1:1f:c1:84:00:58:f0:c2:22:a1:16:48:87:39:
6c:b8:64:a8:c9:7a:e8:f5:8e:1f:68:0b:ef:55:25:f8:d7:bf:
bf:21:87:98:e4:dd:f7:d8:95:73:a8:0e:15:8e:c1:06:88:99:
a1:6a:1a:eb:05:74:80:f3:e6:a9:bb:7c:11:6d:64:be:5f:85:
53:8d:c1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:45 2024 by rpki-client on console-ams.rpki-client.org