Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/gOlbvGm0BdPRwMoQk2_B46O8_Yo.roa
File: gOlbvGm0BdPRwMoQk2_B46O8_Yo.roa (raw, json)
Hash identifier: E/y8RZXS4YuisDgv7mzaB4Vx4KVV4g9Eti706aWoePU=
Subject key identifier: 80:E9:5B:BC:69:B4:05:D3:D1:C0:CA:10:93:6F:C1:E3:A3:BC:FD:8A
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 018DD1814D4FF0933DE5958CFDE95B3A7D48
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/gOlbvGm0BdPRwMoQk2_B46O8_Yo.roa
Signing time: Thu 22 Feb 2024 15:48:48 +0000
ROA not before: Thu 22 Feb 2024 15:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60542
IP address blocks: 45.139.8.0/23 maxlen: 23
45.139.8.0/24 maxlen: 24
45.139.9.0/24 maxlen: 24
91.243.119.0/24 maxlen: 24
185.217.39.0/24 maxlen: 24
194.180.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d1:81:4d:4f:f0:93:3d:e5:95:8c:fd:e9:5b:3a:7d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Feb 22 15:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80e95bbc69b405d3d1c0ca10936fc1e3a3bcfd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:c7:a2:cd:49:a4:54:4b:5f:7e:1f:12:97:
6b:88:a4:fa:7b:91:94:4e:19:e0:b3:04:80:5e:3d:
7a:6d:0c:5b:a5:47:a4:8d:d9:0d:53:90:fe:56:da:
5a:8a:e4:12:6d:7c:4c:52:6c:fc:a4:f4:91:ba:2e:
80:58:7d:bd:0f:59:85:18:90:4f:35:bc:80:0e:c4:
b9:59:ac:92:ba:71:e9:94:7b:e2:4a:0f:96:2c:58:
26:1a:d4:fb:63:8f:9f:a7:38:54:c4:aa:f5:29:2f:
b4:32:47:9a:e6:30:be:99:a3:25:77:45:39:15:7c:
07:f3:9e:5d:e5:34:90:df:1a:d7:bd:f3:92:78:05:
ee:13:6c:14:d7:90:2f:53:cc:ea:c6:7c:e3:cb:76:
e1:d1:b0:ca:52:3a:20:68:b3:db:28:8b:8d:f1:7c:
40:32:67:64:e3:a5:3e:56:4a:0a:e5:2a:ff:b7:c1:
a7:0d:42:94:a8:b6:3e:89:c3:7e:2c:de:7f:3c:e3:
61:f3:39:73:f3:ad:fb:a8:63:66:0b:ad:e9:b3:ed:
69:aa:9e:04:a6:8d:1a:90:a4:2d:f2:02:ee:bc:f3:
d1:e9:d6:a8:8a:df:27:f7:01:07:37:64:a1:f7:ab:
1b:da:e3:af:8a:0f:a4:81:a8:91:8a:23:de:24:f1:
9b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E9:5B:BC:69:B4:05:D3:D1:C0:CA:10:93:6F:C1:E3:A3:BC:FD:8A
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/gOlbvGm0BdPRwMoQk2_B46O8_Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.8.0/23
91.243.119.0/24
185.217.39.0/24
194.180.209.0/24
Signature Algorithm: sha256WithRSAEncryption
06:93:9b:98:53:40:6c:f2:c3:47:26:1c:f4:70:1f:ec:2f:aa:
0e:76:16:ff:c5:54:fb:bb:4c:95:09:fa:ff:00:13:74:de:1e:
30:93:5a:b9:af:45:14:25:71:03:99:bf:12:da:58:85:fe:23:
2e:07:9c:f8:cc:e3:c2:c5:55:d7:cb:73:d6:c2:44:68:4f:a7:
41:e6:c6:6b:be:72:ae:68:76:8a:c1:cb:0a:41:22:92:d0:36:
28:6b:ec:b3:08:30:5d:41:35:a4:d3:26:8a:a6:15:3b:26:b7:
05:b2:e1:49:41:21:06:87:8f:64:20:9a:c6:75:4a:66:d1:1c:
16:0f:bd:b9:c9:e3:62:6f:82:75:4a:3c:17:8a:e7:30:35:56:
8c:7c:00:c5:c6:d0:70:1b:9d:1a:8a:75:ab:57:ce:7a:7f:18:
9a:18:14:dd:17:c0:ad:2a:80:6d:24:3b:0d:a4:f3:72:fd:a0:
25:15:3e:c2:71:8e:28:b3:c7:2b:3d:8e:d9:4f:1e:36:cd:a6:
db:3a:57:33:68:e1:e8:36:20:29:6b:c1:a1:ee:f3:5e:f5:ef:
14:df:0b:d3:8a:f8:4e:8c:54:3e:d8:14:02:13:f6:c5:cc:62:
28:ff:bd:62:75:3d:68:b4:c1:5c:36:45:fb:ef:e3:79:14:24:
e5:6f:7e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:15 2024 by rpki-client on console-ams.rpki-client.org