Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/CU0X5_p7STHl4IA5ViLv_7aTd8I.roa
File: CU0X5_p7STHl4IA5ViLv_7aTd8I.roa (raw, json)
Hash identifier: SQQLENOTBEHuyVin5gZIPMO1tBiEAtLKNr/DhEMvA4M=
Subject key identifier: 09:4D:17:E7:FA:7B:49:31:E5:E0:80:39:56:22:EF:FF:B6:93:77:C2
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 018613AED24B389EE9F256967BA8446777B8
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/CU0X5_p7STHl4IA5ViLv_7aTd8I.roa
Signing time: Thu 02 Feb 2023 19:51:09 +0000
ROA not before: Thu 02 Feb 2023 19:51:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.115.217.0/24 maxlen: 24
45.140.210.0/24 maxlen: 24
45.140.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Mar 2023 08:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:13:ae:d2:4b:38:9e:e9:f2:56:96:7b:a8:44:67:77:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Feb 2 19:51:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=094d17e7fa7b4931e5e080395622efffb69377c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:1c:2b:fd:6f:86:f5:33:ea:6d:1c:11:a2:
fd:9d:13:86:d7:80:9a:f2:d1:fa:83:2e:11:f1:bc:
e6:16:4f:47:1a:f5:cf:e0:49:6b:01:78:7c:7c:2e:
2c:9a:02:46:de:7c:4c:d2:ec:21:86:65:ed:29:af:
e9:94:05:95:39:8c:44:51:bc:b1:29:60:53:38:65:
7a:4e:6e:3d:00:04:5b:d0:ff:3c:2e:71:b5:71:69:
5c:7e:e2:60:37:e7:dd:dd:8c:8c:31:4b:46:f2:c5:
c8:20:bc:47:30:14:d6:2c:81:cc:ea:26:6f:ce:67:
46:8f:fc:4a:f6:d3:cb:64:72:01:c0:cf:39:88:6b:
72:ea:6e:02:48:c2:b7:55:c9:48:69:56:6a:c9:49:
2f:b3:ab:35:18:4c:f1:08:1e:22:c5:ac:c4:3a:f1:
f1:52:0b:1a:a4:6d:9c:d3:c1:03:68:39:c3:30:1e:
95:36:d4:ac:45:03:f3:64:72:0c:f7:81:65:6e:c5:
82:5c:d0:64:b5:7f:81:a8:fa:b1:94:28:65:d6:70:
57:cc:cc:06:7c:7a:06:25:7a:bf:c5:cb:ac:32:e9:
d6:35:c3:cd:44:ae:ee:23:7f:17:c1:6e:ff:0a:1d:
bd:93:41:13:2d:55:00:c3:6e:09:b1:27:34:2a:17:
18:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4D:17:E7:FA:7B:49:31:E5:E0:80:39:56:22:EF:FF:B6:93:77:C2
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/CU0X5_p7STHl4IA5ViLv_7aTd8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.210.0/23
82.115.217.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:13:93:52:2b:d6:bd:9a:c4:30:22:05:c2:0a:1e:dd:13:f9:
2a:ce:8d:d3:de:e9:03:b2:69:49:a6:19:dd:fe:c6:41:13:51:
44:a9:63:54:e9:16:01:6d:97:54:28:4d:da:3b:bd:62:7a:ee:
72:c9:99:54:64:ed:e8:86:01:40:20:ad:1a:af:ad:77:f7:e0:
94:f3:c5:de:07:8a:ed:35:87:9a:f0:24:40:22:f8:4d:f0:c7:
8a:f2:2d:e4:ec:1c:df:b3:97:15:17:46:5f:ba:e5:3c:ba:46:
83:96:0c:f1:cb:1a:a9:5c:82:66:49:d6:a1:01:2f:ac:27:c8:
bc:f1:25:1b:41:40:6f:c1:d0:a4:22:bd:a4:3a:4b:e7:94:17:
18:02:b0:56:21:29:73:32:dc:a3:47:af:2e:3e:13:37:a8:db:
3e:af:dc:1e:16:4c:2e:38:67:6e:30:22:5a:97:fe:63:a4:0e:
a8:25:3c:39:9d:d7:73:eb:36:66:1f:37:5d:00:62:e9:3c:13:
88:f1:f0:be:1d:68:8e:a9:53:dd:60:8d:c3:2a:b0:c8:83:72:
32:6f:53:c7:bf:01:56:47:f7:0c:79:a0:43:8b:92:41:d9:75:
40:db:f6:d9:dd:ea:de:41:8c:5e:34:ca:4c:1f:e2:a4:68:a5:
2c:89:aa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:56 2024 by rpki-client on console-ams.rpki-client.org