Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/R1w-Zk7l7oe5V2D8sX8rHSDXTVs.roa
File: R1w-Zk7l7oe5V2D8sX8rHSDXTVs.roa (raw, json)
Hash identifier: O6J7xhuUFMfwRZcs4z+4X4hYYwGXkUDXbtJ8ic8StAc=
Subject key identifier: 47:5C:3E:66:4E:E5:EE:87:B9:57:60:FC:B1:7F:2B:1D:20:D7:4D:5B
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 018CC56DEB1F89C04E4894D58B9BDEF94B4B
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/R1w-Zk7l7oe5V2D8sX8rHSDXTVs.roa
Signing time: Mon 01 Jan 2024 14:29:24 +0000
ROA not before: Mon 01 Jan 2024 14:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212953
IP address blocks: 45.143.98.0/24 maxlen: 24
185.148.240.0/24 maxlen: 24
185.148.242.0/24 maxlen: 24
45.10.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 13:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:eb:1f:89:c0:4e:48:94:d5:8b:9b:de:f9:4b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 1 14:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=475c3e664ee5ee87b95760fcb17f2b1d20d74d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:de:ab:e8:2b:e7:5a:bc:d7:39:d4:95:13:
20:86:95:12:49:63:6b:50:c7:ad:8b:f3:62:5c:49:
74:a9:45:9d:6f:61:c9:1d:1f:b1:b3:6d:22:8d:90:
6a:82:5d:8d:5b:3b:51:3d:43:c3:66:01:80:ca:0b:
56:83:ec:d5:03:4e:d5:58:6a:1b:e8:0a:3a:67:ee:
a3:53:2f:fa:94:96:87:c2:08:4d:0e:2d:b3:34:d5:
86:30:1b:55:8c:aa:74:58:d0:41:55:9f:2b:34:57:
b3:a9:cf:40:fb:1c:a2:bc:c6:df:ce:d1:c6:d9:35:
15:0c:62:63:25:b5:23:9b:1e:f1:de:65:c6:49:c4:
d6:8d:cb:50:44:43:96:db:de:4a:b7:22:ac:2d:27:
da:20:34:8b:76:1d:a0:51:0d:3d:29:36:05:0f:f7:
2c:f2:0c:85:a9:af:3a:6c:ea:40:bc:3b:c7:b6:b4:
65:3c:fc:87:02:8f:43:7e:63:04:21:0f:11:18:62:
6e:61:c0:15:a9:47:17:af:42:16:76:37:00:8d:e1:
1a:48:e1:5c:f3:f1:90:42:bf:00:46:67:8e:15:5f:
9c:bd:f4:19:1b:35:31:ad:af:e9:fd:cb:17:c7:8a:
69:4a:63:90:fc:90:1a:0d:87:85:38:46:cd:5e:4d:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5C:3E:66:4E:E5:EE:87:B9:57:60:FC:B1:7F:2B:1D:20:D7:4D:5B
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/R1w-Zk7l7oe5V2D8sX8rHSDXTVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.151.0/24
45.143.98.0/24
185.148.240.0/24
185.148.242.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:1c:ad:3c:29:74:e4:0a:57:66:cd:e8:aa:c6:c8:f2:2e:c4:
90:7a:b4:f6:a6:0d:c5:c9:77:06:8d:6f:52:16:f2:3a:7c:c3:
5d:3f:00:16:3f:a2:17:e7:eb:6c:14:fa:fa:f7:9b:42:4a:dc:
34:44:37:17:34:32:2a:03:35:db:7f:de:67:75:51:20:26:a2:
b6:8b:32:23:38:3e:27:df:88:9f:39:e9:46:9a:bd:47:fc:fd:
57:f4:be:95:0c:a5:f6:b0:e7:11:55:b1:4e:e2:de:49:b8:d7:
74:a4:26:b7:d3:f8:ec:78:09:a6:9d:85:45:eb:1a:6b:05:81:
82:51:35:1d:98:33:4b:21:30:c1:dd:45:7b:d2:7f:0a:3d:af:
79:58:70:e0:f0:6f:b8:ac:ac:3b:41:72:9b:33:58:31:d1:bd:
86:73:d6:45:46:11:0e:48:41:5c:5b:07:f2:c2:5f:1c:2c:96:
f7:53:19:2e:24:b4:2f:d7:66:98:9c:75:d1:f6:1f:55:a9:b9:
f8:11:f9:2a:18:87:0b:4f:00:06:63:b7:8d:12:03:ea:e8:bc:
45:5f:a0:ec:75:cf:73:78:eb:c5:fa:ab:82:9f:62:79:26:a6:
e8:a7:d8:08:12:e4:91:76:fe:c7:ab:4c:7e:d0:50:73:1c:9f:
1f:11:86:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:45 2024 by rpki-client on console-ams.rpki-client.org