Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/xgcjKmqBJBOCr_eVVido5Kpq2uE.roa
File: xgcjKmqBJBOCr_eVVido5Kpq2uE.roa (raw, json)
Hash identifier: aDojhx00/BDzKG5yqiLTafRotpz7JoV5IDCK/Gd4WWY=
Subject key identifier: C6:07:23:2A:6A:81:24:13:82:AF:F7:95:56:27:68:E4:AA:6A:DA:E1
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0187B2AEF352A4ABFBBA9D51A03E295800E6
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/xgcjKmqBJBOCr_eVVido5Kpq2uE.roa
Signing time: Mon 24 Apr 2023 09:53:42 +0000
ROA not before: Mon 24 Apr 2023 09:53:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30823
IP address blocks: 45.89.124.0/23 maxlen: 23
45.89.126.0/23 maxlen: 23
185.117.1.0/24 maxlen: 24
185.117.2.0/24 maxlen: 24
45.91.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Nov 2023 09:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b2:ae:f3:52:a4:ab:fb:ba:9d:51:a0:3e:29:58:00:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Apr 24 09:53:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c607232a6a81241382aff795562768e4aa6adae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:78:bb:5e:ee:36:c6:ad:38:a3:47:07:c5:
82:8c:59:f7:64:7d:82:96:2f:fe:aa:69:fb:1a:4a:
50:01:0c:88:be:c0:15:be:71:1d:e6:2b:61:b1:44:
e8:d0:be:df:8d:49:56:7b:dd:f4:f4:d0:8e:9d:b1:
4e:e3:52:16:e3:d1:72:94:c5:f9:48:1b:14:94:98:
37:a0:ce:21:27:bf:85:db:67:f7:79:aa:e5:b4:77:
6d:00:4e:d3:65:34:43:0f:16:e6:71:cf:8a:54:f1:
65:e0:a3:e5:7e:b7:af:f1:55:ab:98:63:53:8b:9e:
58:d9:e0:aa:00:8b:6c:52:3d:01:72:ba:8b:59:20:
76:df:b0:aa:f3:fc:83:97:8b:d2:ba:78:dd:df:a4:
ee:af:03:d4:fc:98:3a:88:8b:6d:ca:61:0a:4b:97:
8a:6d:bf:9b:46:9e:97:aa:d5:85:ae:e1:67:e7:47:
7b:b1:7f:52:d4:87:14:8d:f1:aa:bd:1a:5a:f5:9b:
38:72:e2:90:c5:cd:db:37:af:19:81:8d:9e:52:65:
d8:7e:ed:78:8b:6a:24:77:54:9a:e3:39:8f:1d:52:
4d:74:c0:38:66:02:09:c7:b8:51:a7:63:4b:7f:55:
cc:93:43:54:97:1f:c9:c2:85:a5:ec:2c:1c:f9:0b:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:07:23:2A:6A:81:24:13:82:AF:F7:95:56:27:68:E4:AA:6A:DA:E1
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/xgcjKmqBJBOCr_eVVido5Kpq2uE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.124.0/22
45.91.250.0/24
185.117.1.0-185.117.2.255
Signature Algorithm: sha256WithRSAEncryption
1c:ef:8c:fe:70:b9:a5:3d:a2:7c:13:21:22:03:dd:fb:7f:27:
1f:c0:3f:58:65:35:92:52:f7:a1:d9:1f:af:23:6c:36:66:b2:
60:b1:62:90:74:99:54:67:e0:24:aa:28:f5:52:13:0f:b1:b9:
a8:42:60:19:eb:98:ef:b2:48:14:d6:78:eb:31:56:66:d2:2d:
3c:2b:48:c9:3c:66:29:8e:a3:47:4c:0f:a0:ac:ac:bb:2e:2f:
12:ec:a9:d9:1a:40:e8:16:5f:b5:18:bd:68:eb:87:da:fb:6c:
67:49:34:cc:c3:8b:30:32:cc:6e:60:5c:2a:d4:31:45:f9:5b:
88:e2:36:d1:14:5d:cf:71:d5:a9:e6:fb:5e:36:44:72:9a:44:
fb:17:6c:09:2d:e8:05:42:dd:83:26:36:34:d1:5c:84:99:88:
d1:08:b5:fa:c3:29:72:ad:b7:3a:3b:a9:1a:9d:e1:c7:1e:50:
e9:90:24:dd:50:3d:88:3f:c5:7b:5b:17:fd:1b:47:bb:28:c6:
f9:34:f4:6a:7b:62:d1:a4:97:77:b9:0b:90:ad:b3:c2:5a:41:
3d:fa:35:d1:2f:f6:a8:48:e1:c9:74:bc:a3:9d:fd:d2:77:15:
c0:0a:e8:56:c0:6c:22:d0:13:db:52:ac:66:56:1d:80:e4:09:
60:96:33:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:14 2024 by rpki-client on console-ams.rpki-client.org