Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/T7RPmU_fwLziiALArjmts56RhlA.roa
File: T7RPmU_fwLziiALArjmts56RhlA.roa (raw, json)
Hash identifier: PJJ/BJ3/2tEa8yaVZ0ohW99Hj/JXIxC8QHTR4guX5rE=
Subject key identifier: 4F:B4:4F:99:4F:DF:C0:BC:E2:88:02:C0:AE:39:AD:B3:9E:91:86:50
Certificate issuer: /CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Certificate serial: 018EE65A63B2E1C5514DF56A48D0009C9170
Authority key identifier: 8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/T7RPmU_fwLziiALArjmts56RhlA.roa
Signing time: Tue 16 Apr 2024 10:01:07 +0000
ROA not before: Tue 16 Apr 2024 10:01:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207054
IP address blocks: 45.10.12.0/22 maxlen: 22
45.15.92.0/22 maxlen: 22
185.167.112.0/22 maxlen: 22
185.231.192.0/22 maxlen: 22
194.58.24.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 16 Apr 2024 16:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:5a:63:b2:e1:c5:51:4d:f5:6a:48:d0:00:9c:91:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Validity
Not Before: Apr 16 10:01:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fb44f994fdfc0bce28802c0ae39adb39e918650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:b3:ff:01:d3:76:34:e8:18:55:ab:3e:5d:
c3:24:e2:bc:ca:6c:e5:38:12:8f:e0:d1:47:af:90:
b7:2e:db:72:cc:32:6d:ea:e4:9f:cf:c8:ef:31:72:
e2:54:48:24:47:04:f3:c2:ed:fa:69:8f:52:b4:b7:
74:a3:5e:31:d4:90:7d:9a:44:5a:89:ea:1a:50:28:
c9:42:af:a4:86:61:b8:c2:eb:a2:f8:9a:25:fd:aa:
aa:92:d1:62:37:13:9f:ce:f0:6a:5c:b4:e9:b0:c4:
03:a2:42:ae:06:4a:2e:5f:f8:ea:d8:35:8c:d6:ef:
2c:27:76:63:7f:a6:33:ea:09:2c:da:81:d9:a9:ec:
d7:05:8c:20:6b:df:7a:07:c5:e3:8c:d8:46:e3:aa:
5a:79:13:4e:dd:4a:13:5d:a4:48:59:e1:91:d1:8b:
7f:74:68:f5:a6:73:fa:ac:94:d7:06:c6:ed:ee:b6:
1d:0e:e5:77:4a:73:e6:6f:09:c1:41:e2:3f:2c:3b:
4d:ff:ad:48:7f:a8:7c:31:90:ab:f0:08:d2:64:7d:
d3:57:fd:9c:ae:d4:85:7d:36:6c:e4:83:fa:e7:c1:
80:6b:ee:ea:ed:82:fd:4a:bb:8a:98:66:72:dd:b0:
dc:f2:e9:46:48:75:1a:a2:49:b1:6e:f5:01:ee:76:
9e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B4:4F:99:4F:DF:C0:BC:E2:88:02:C0:AE:39:AD:B3:9E:91:86:50
X509v3 Authority Key Identifier:
keyid:8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/T7RPmU_fwLziiALArjmts56RhlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.12.0/22
45.15.92.0/22
185.167.112.0/22
185.231.192.0/22
194.58.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:a1:b7:83:a3:1d:83:6f:09:35:af:32:d3:9b:3b:62:2f:98:
5a:59:19:a3:07:84:52:00:07:da:03:a7:a2:9e:cc:39:88:92:
1b:3d:d0:b7:e1:83:4c:5b:ed:68:73:9b:27:c2:0b:cd:63:23:
f7:a8:53:bc:94:66:b7:b1:af:5f:3a:cf:1d:e7:e3:0f:1e:15:
99:7b:08:c2:3a:c1:75:65:30:63:3e:d5:67:05:38:a8:57:60:
1f:38:83:26:4f:79:cd:3a:72:ac:9e:9c:3d:54:50:85:2c:0e:
ad:35:79:45:74:d4:cd:0b:f0:80:88:80:14:ae:02:fc:ac:7b:
dd:e6:ee:9f:3f:22:a3:10:8f:b3:b2:bd:30:72:15:7e:a8:fb:
e1:a0:57:e4:3a:29:36:57:94:e6:67:12:92:9e:d4:a6:f9:99:
cd:4c:dc:6a:88:b9:44:63:b7:18:6b:60:24:4c:2c:e4:cc:7a:
61:f3:b1:48:01:55:04:20:2d:02:80:8b:46:2a:3e:ef:ba:4b:
f4:30:28:68:05:2a:c4:71:4c:23:59:e6:e5:ba:f1:6b:b8:55:
53:93:e6:31:d2:5e:04:05:81:9a:2b:26:5f:45:f1:9a:6b:4c:
a8:03:f6:10:b0:32:18:fd:db:6f:ae:83:78:67:74:24:c5:05:
e1:b8:03:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 19:31:14 2024 by rpki-client on console-ams.rpki-client.org