Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/cFgar7yIYs6XFP8YkEL20n6UEv4.roa
File: cFgar7yIYs6XFP8YkEL20n6UEv4.roa (raw, json)
Hash identifier: U2aqdNBOQQYl91cLIYTYshnS3pfLQxNu0uy2UI/KbT0=
Subject key identifier: 70:58:1A:AF:BC:88:62:CE:97:14:FF:18:90:42:F6:D2:7E:94:12:FE
Certificate issuer: /CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Certificate serial: 01856F2FD00F68F333637E3A581D9B429C19
Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/cFgar7yIYs6XFP8YkEL20n6UEv4.roa
Signing time: Sun 01 Jan 2023 21:14:42 +0000
ROA not before: Sun 01 Jan 2023 21:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212751
IP address blocks: 45.66.145.0/24 maxlen: 24
45.66.144.0/24 maxlen: 24
45.66.146.0/24 maxlen: 24
45.66.147.0/24 maxlen: 24
2a10:7c40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:d0:0f:68:f3:33:63:7e:3a:58:1d:9b:42:9c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Validity
Not Before: Jan 1 21:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70581aafbc8862ce9714ff189042f6d27e9412fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:91:93:f2:ab:77:a5:58:57:b3:39:ab:1c:
83:85:5b:51:e3:e7:19:2b:69:5b:5d:83:0e:76:7a:
7e:69:b1:1a:02:62:fd:5b:9d:b8:b7:cc:cb:74:4f:
12:5b:21:55:27:83:fa:83:a9:a8:e3:f0:3b:14:cd:
00:13:60:7d:02:4e:2a:78:89:ed:98:3a:56:f5:29:
d2:f6:3d:ac:12:79:9b:02:75:02:43:94:4b:8b:d2:
3f:6b:99:9c:8b:21:a3:50:ba:bd:a7:6c:e9:fe:e6:
05:f4:c2:32:59:cf:0a:9c:12:35:d6:73:c4:e6:a8:
ab:57:c4:d9:b4:5a:aa:7e:18:1c:30:86:02:27:16:
f1:d8:98:fd:3f:21:60:56:dc:ee:42:46:88:40:eb:
84:a5:d4:14:a0:7f:18:54:b7:9f:75:f3:14:9f:bd:
16:44:c2:39:80:b4:ea:9c:c4:43:28:17:b5:d9:0a:
17:3c:f7:1c:6d:73:68:4a:dd:41:1e:40:26:83:ca:
29:18:d3:79:b0:ea:75:b6:8f:c8:d5:56:19:d0:11:
9a:5c:55:76:26:ef:19:4f:a0:27:a2:20:26:ca:54:
db:48:39:f0:cf:a3:bc:5f:2b:2c:02:d6:76:61:a1:
99:e2:ed:d3:d4:66:4a:ad:02:bd:5c:62:7a:0b:90:
74:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:58:1A:AF:BC:88:62:CE:97:14:FF:18:90:42:F6:D2:7E:94:12:FE
X509v3 Authority Key Identifier:
keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/cFgar7yIYs6XFP8YkEL20n6UEv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.144.0/22
IPv6:
2a10:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
85:6e:5e:be:bc:f2:cd:48:19:6f:41:42:93:db:41:48:e2:15:
74:8c:58:e8:87:74:54:33:2e:64:96:47:90:a5:d1:d7:8a:f7:
a8:8a:cd:19:19:bb:14:19:70:61:e7:cc:26:a8:82:b3:0e:18:
a6:0d:00:13:7d:17:b2:45:0f:b6:93:91:8c:76:a2:a9:5b:df:
9d:29:a1:d2:b7:92:b2:5a:5f:cb:ec:dd:aa:95:19:f8:07:65:
0c:31:e3:50:90:60:48:8b:da:f9:86:8c:98:46:b4:04:b7:c4:
fe:76:af:f7:38:9c:f5:4a:f9:c8:35:c0:08:cf:12:72:c4:9f:
8c:9f:18:37:54:8a:99:0a:a4:e7:87:92:5c:f7:ec:5d:4e:fb:
dd:32:32:a7:77:e7:27:85:bf:a4:76:bc:4e:70:33:23:ee:ec:
a6:ef:9b:c5:81:47:48:35:e0:30:31:a0:10:41:4f:21:eb:16:
69:a1:4e:bf:9e:bc:9b:8f:24:04:5a:98:3a:94:49:ca:fc:44:
20:ba:38:fc:52:85:1b:49:3c:54:6f:9c:29:a0:46:24:30:a0:
71:40:77:24:3a:3f:f5:fc:4c:d0:f3:96:a2:ae:3d:a7:c2:b3:
7d:83:6d:df:38:ab:e5:62:c6:a3:cd:c1:44:63:16:a2:96:34:
2d:a5:82:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:39 2024 by rpki-client on console-ams.rpki-client.org