Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6b1e95-bc53-48ca-a1ee-b543f853ff25/1/ybiHogke6gm2vMW2VyUajsXQNnI.roa
File: ybiHogke6gm2vMW2VyUajsXQNnI.roa (raw, json)
Hash identifier: vRhwoNY+PWeDJ3sMP9wPaSVKCviG3X3sR5splBwo2mY=
Subject key identifier: C9:B8:87:A2:09:1E:EA:09:B6:BC:C5:B6:57:25:1A:8E:C5:D0:36:72
Certificate issuer: /CN=d834ed2f9e2cef4701021e75ff454164fedc7c51
Certificate serial: 018CC56E3B24F6BE432DF7C020A20B69F238
Authority key identifier: D8:34:ED:2F:9E:2C:EF:47:01:02:1E:75:FF:45:41:64:FE:DC:7C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DTtL54s70cBAh51_0VBZP7cfFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b1e95-bc53-48ca-a1ee-b543f853ff25/1/ybiHogke6gm2vMW2VyUajsXQNnI.roa
Signing time: Mon 01 Jan 2024 14:29:44 +0000
ROA not before: Mon 01 Jan 2024 14:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200845
IP address blocks: 45.8.49.0/24 maxlen: 24
45.8.48.0/23 maxlen: 23
45.8.48.0/24 maxlen: 24
45.8.50.0/23 maxlen: 23
45.8.51.0/24 maxlen: 24
45.8.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 14:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:3b:24:f6:be:43:2d:f7:c0:20:a2:0b:69:f2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d834ed2f9e2cef4701021e75ff454164fedc7c51
Validity
Not Before: Jan 1 14:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9b887a2091eea09b6bcc5b657251a8ec5d03672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:67:fc:5a:6c:e1:f9:93:69:72:d7:8e:a4:
e8:af:10:d7:01:6c:6c:bd:c8:cc:fa:96:a1:0a:6c:
40:23:65:62:da:d0:01:d6:1d:d1:14:d7:b7:61:b6:
53:e1:58:b0:47:fc:c1:55:63:20:6f:35:82:46:33:
88:12:03:aa:60:7f:3e:c9:1d:78:9d:33:ff:78:60:
31:7b:6b:ce:ae:37:a2:93:47:3c:e3:46:c0:c7:8e:
2f:44:06:b1:57:bc:e9:6b:af:6c:6f:f4:74:e5:5c:
6b:35:c8:9e:e7:ad:84:fb:1d:1b:23:67:13:c9:2d:
49:6f:72:84:20:8f:62:a1:04:56:56:86:fc:8c:0e:
a1:f6:35:a1:50:0f:cf:a4:dc:af:8c:ca:fb:64:59:
14:60:ff:8f:48:ff:4f:d9:d7:3c:d6:93:30:48:3b:
12:cf:69:84:81:e2:36:f6:07:84:de:17:fa:3d:8a:
27:78:dd:95:31:c5:1b:81:f8:c0:ef:8f:14:9e:fa:
36:5c:48:be:6a:86:7f:55:52:e9:33:20:cc:35:bf:
af:7b:ba:42:6c:24:62:71:6a:57:6c:d6:f6:e6:03:
74:d9:e5:f7:32:49:4b:57:94:78:fa:87:63:19:d5:
f7:7e:ea:a8:41:3e:2b:80:45:79:4a:44:78:ea:69:
41:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B8:87:A2:09:1E:EA:09:B6:BC:C5:B6:57:25:1A:8E:C5:D0:36:72
X509v3 Authority Key Identifier:
keyid:D8:34:ED:2F:9E:2C:EF:47:01:02:1E:75:FF:45:41:64:FE:DC:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DTtL54s70cBAh51_0VBZP7cfFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b1e95-bc53-48ca-a1ee-b543f853ff25/1/ybiHogke6gm2vMW2VyUajsXQNnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b1e95-bc53-48ca-a1ee-b543f853ff25/1/2DTtL54s70cBAh51_0VBZP7cfFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.48.0/22
Signature Algorithm: sha256WithRSAEncryption
50:c7:28:8a:6c:69:91:62:63:80:f5:16:99:98:9e:d8:71:b0:
99:da:b2:cd:7c:61:fd:69:65:11:bf:83:53:df:93:92:8e:8f:
ea:68:26:30:c0:ac:0b:ab:d4:98:6c:ff:28:11:86:8d:70:e4:
94:01:e2:de:e7:c9:ee:1c:65:2b:11:2b:8f:ad:e3:9f:7a:32:
66:55:0d:f7:21:60:05:74:96:68:d5:a0:0f:b1:77:e1:6b:78:
7d:c8:e7:23:48:26:50:a0:91:79:27:5b:c3:b2:0f:d1:b2:76:
47:39:5c:50:1f:4f:f8:95:65:64:b6:bc:a6:f5:44:a6:97:75:
d9:74:36:88:2d:f5:c4:e7:35:16:f1:f2:5a:fb:69:98:a0:32:
a7:13:69:2a:fd:23:7f:5c:8e:84:d4:b3:cb:9e:9a:57:a5:2c:
02:ea:34:f6:7a:7a:03:f0:86:f4:0f:a4:e5:e3:98:24:87:d8:
fe:95:57:32:be:01:f5:56:2e:4f:15:3e:dd:e3:34:0f:4f:11:
d2:d0:f6:7b:e8:f1:b5:2d:20:6c:26:33:fa:3e:14:54:eb:b3:
8f:de:e3:46:26:4f:89:2e:3e:d2:b0:db:b5:4f:9b:ba:e4:00:
17:5d:b1:9d:3e:8a:06:0b:27:5e:87:50:33:5d:16:0c:26:0d:
de:cd:ff:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 17:25:41 2024 by rpki-client on console-fra.rpki-client.org