Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/6mXg00-JLMTwesmnGL2yY4AIbNk.roa
File: 6mXg00-JLMTwesmnGL2yY4AIbNk.roa (raw, json)
Hash identifier: WlhA+oAk+Y/rnprQ81gNmnAIQvnO2K5gnQ31yeQCNy4=
Subject key identifier: EA:65:E0:D3:4F:89:2C:C4:F0:7A:C9:A7:18:BD:B2:63:80:08:6C:D9
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018DA3AB7FAF3B0CEDDAED3378A46B7870D8
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/6mXg00-JLMTwesmnGL2yY4AIbNk.roa
Signing time: Tue 13 Feb 2024 18:12:21 +0000
ROA not before: Tue 13 Feb 2024 18:12:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400859
IP address blocks: 45.86.16.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 14 Feb 2024 15:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a3:ab:7f:af:3b:0c:ed:da:ed:33:78:a4:6b:78:70:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Feb 13 18:12:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea65e0d34f892cc4f07ac9a718bdb26380086cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:23:d6:9e:6d:5f:46:dc:e7:c5:00:0e:69:b1:
bc:c8:79:75:a9:60:aa:f8:d4:d2:8d:42:79:50:d3:
82:a2:a5:6d:c9:91:14:5e:af:4a:89:ac:32:c7:d7:
d0:48:77:30:2d:d8:18:48:11:6b:6b:cb:bd:f6:45:
2c:6b:ab:c0:29:b5:41:92:7b:e3:81:bd:77:f1:e5:
e1:1c:be:d0:34:31:26:6f:c6:d3:db:96:da:ec:65:
e5:e1:f1:fc:18:77:82:d6:9d:02:e3:7b:c7:43:7f:
cc:24:ca:ac:05:24:73:73:0e:9f:95:58:3c:c0:97:
b3:98:30:87:8b:3a:2f:0a:c9:80:3e:f0:2a:bc:18:
14:e0:39:4a:23:7a:d0:6c:50:42:1d:55:65:b0:fa:
99:22:f7:f7:b0:a4:b5:2e:ec:85:90:8d:af:b6:71:
9e:ee:78:3e:55:28:c1:98:3a:1e:4a:f2:95:ae:00:
93:34:e1:39:d1:01:33:20:6a:bd:2f:4f:a5:bb:45:
c2:e0:95:20:8f:5b:79:46:0b:0a:5a:23:90:2e:ee:
c1:f5:45:ba:01:f9:fc:3f:0a:57:53:8d:1d:0e:23:
54:15:f0:7f:84:19:91:5a:c7:4e:aa:c9:fa:2c:c5:
c1:26:bc:58:62:9c:e7:3a:62:2a:58:e6:7f:6e:c5:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:65:E0:D3:4F:89:2C:C4:F0:7A:C9:A7:18:BD:B2:63:80:08:6C:D9
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/6mXg00-JLMTwesmnGL2yY4AIbNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.16.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:40:61:d6:0d:b4:3c:34:1a:fa:44:d9:51:b3:6a:60:c4:2c:
1a:68:09:8c:4f:6d:40:5b:52:a4:b8:7a:5d:ad:87:07:a4:bb:
f3:f1:e6:2b:28:f7:35:c4:0a:8f:30:2d:eb:c0:31:c8:5d:4f:
06:82:e4:5d:67:39:3e:70:9b:40:e4:b8:21:6a:e8:4d:e1:27:
77:3b:e1:40:d9:34:47:cb:6e:a0:3f:c1:69:b3:9a:1a:fb:e1:
8a:cb:31:6a:0f:54:33:d6:d9:5e:2d:ed:83:06:1c:4d:34:4a:
26:79:f1:31:b8:04:8f:61:29:fc:8c:65:50:7e:a2:6e:28:10:
fb:75:35:b0:32:87:8f:10:bb:17:d7:fb:7c:06:d8:45:af:5a:
53:b5:79:91:5d:e9:40:c9:18:d6:7b:ba:03:96:ef:80:1f:bc:
f4:50:5b:32:2b:d8:ac:5d:55:f3:b8:8f:27:91:73:f9:a5:92:
ee:25:cc:d2:08:ce:d9:dc:74:f4:59:d7:2b:d4:dc:ad:08:81:
3e:a7:2b:57:aa:21:7c:b0:22:d6:57:8a:2a:1d:5b:15:b8:71:
30:2f:f0:f9:64:e5:9f:36:e5:40:7d:c1:2d:da:b6:98:43:a7:
b8:07:d8:e2:82:1b:27:e6:76:b7:cb:2b:c9:03:f0:2b:26:6d:
58:40:64:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 21:15:54 2024 by rpki-client on console-ams.rpki-client.org