Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/g25EOMesGds-2C1yKOKSlKKRzyE.roa
File: g25EOMesGds-2C1yKOKSlKKRzyE.roa (raw, json)
Hash identifier: HzkS8K6yTGKbUAtlw22uFKeRizvb8ZUvStR/SFIszl4=
Subject key identifier: 83:6E:44:38:C7:AC:19:DB:3E:D8:2D:72:28:E2:92:94:A2:91:CF:21
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01878ED6A136A0E48C880FEB39B57ACF7778
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/g25EOMesGds-2C1yKOKSlKKRzyE.roa
Signing time: Mon 17 Apr 2023 10:50:43 +0000
ROA not before: Mon 17 Apr 2023 10:50:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203511
IP address blocks: 45.151.2.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 14:22:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:d6:a1:36:a0:e4:8c:88:0f:eb:39:b5:7a:cf:77:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 17 10:50:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=836e4438c7ac19db3ed82d7228e29294a291cf21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:35:a4:c1:30:fc:90:58:d6:35:d1:bb:fa:
14:b6:92:7f:87:b6:34:e0:51:67:a9:7e:fd:1f:e0:
6a:72:c2:1f:ea:c5:ea:cb:27:e2:72:a3:2d:f6:49:
bc:11:f7:4b:c9:7d:c4:8d:95:c4:14:e3:b9:f2:ae:
85:95:f8:d2:57:dc:bb:b7:e7:54:c1:85:39:53:40:
40:d9:39:9f:84:22:01:8a:67:c1:23:7d:53:44:28:
37:53:53:2c:e5:be:13:7e:c8:69:ae:d3:71:2c:49:
d1:2a:4c:40:8d:b5:55:08:bb:a2:a6:0c:9b:ac:76:
ee:4a:91:a8:5b:12:ea:5f:43:19:de:05:85:31:dc:
bc:80:03:83:d2:40:03:13:f5:86:eb:89:23:e3:47:
3c:b2:5f:10:43:a7:a7:41:65:83:61:06:c5:79:1e:
89:af:d1:cf:86:6d:67:ac:9f:3d:83:8d:8d:fd:2f:
e7:10:e0:d3:cb:0e:b0:ae:80:35:22:2d:a6:69:aa:
79:e6:23:8f:ec:1c:cf:5d:b2:3f:1d:68:e8:c6:c3:
bf:86:5a:f0:58:45:f1:bc:20:55:d9:16:31:ba:e5:
8f:89:93:16:ad:dc:33:84:39:66:8e:0e:aa:bb:c0:
26:9e:3e:ed:8c:60:da:72:2f:96:4c:f4:c3:0a:2a:
c7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6E:44:38:C7:AC:19:DB:3E:D8:2D:72:28:E2:92:94:A2:91:CF:21
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/g25EOMesGds-2C1yKOKSlKKRzyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.183.0/24
45.144.214.0/24
45.151.2.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:dd:c9:63:a8:67:1d:a0:41:fe:bf:36:b4:13:be:45:ee:a5:
de:20:82:28:f5:86:db:33:a5:c1:c7:73:cd:44:81:8f:bf:92:
f2:f6:fd:e0:af:ee:16:e5:af:4c:bb:dd:b6:85:8a:d2:8f:2e:
51:45:39:8e:24:eb:e4:83:11:65:04:cf:af:bf:51:6c:4e:a5:
8c:8f:ed:37:26:2e:cf:fd:df:d5:fb:0c:af:86:b2:5d:2f:27:
32:67:d0:a3:29:42:96:5d:43:18:7c:11:53:b3:8a:e8:01:33:
31:6f:61:cf:40:0f:dc:9b:e1:9a:96:f8:03:36:b2:f8:c5:6e:
bd:38:50:75:89:66:da:4a:a0:2c:fd:30:1c:8f:14:19:12:80:
f0:a5:d6:b6:3b:1c:5b:b6:e7:07:e5:7d:a0:46:7e:13:38:76:
7b:24:ae:37:00:9e:17:37:ce:47:7e:2e:76:2c:66:12:08:2b:
dc:96:4f:f6:5e:e8:76:cb:53:88:a3:35:f4:2f:ba:81:3b:57:
cb:94:e4:1a:65:04:27:91:2e:48:47:84:a4:fd:95:ba:a1:0d:
90:76:23:98:9d:47:29:9b:d5:6f:98:ce:e8:bc:f2:0e:26:3c:
ab:aa:d3:a6:76:41:e5:86:c3:b5:b3:0d:9e:d6:fa:c6:40:2d:
14:8c:3f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org