Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/8JJb-Bic2T53S71x_D-XbCgqTo0.roa
File: 8JJb-Bic2T53S71x_D-XbCgqTo0.roa (raw, json)
Hash identifier: QxL5a+Iibay2l/d/KYzhVpTnR9nIqWYjNNUOu69/3qQ=
Subject key identifier: F0:92:5B:F8:18:9C:D9:3E:77:4B:BD:71:FC:3F:97:6C:28:2A:4E:8D
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018EF4EF483817744ED7293271C32F09620A
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/8JJb-Bic2T53S71x_D-XbCgqTo0.roa
Signing time: Fri 19 Apr 2024 05:58:26 +0000
ROA not before: Fri 19 Apr 2024 05:58:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207177
IP address blocks: 45.67.117.0/24 maxlen: 24
45.86.16.0/21 maxlen: 24
45.86.16.0/22 maxlen: 22
45.86.16.0/24 maxlen: 24
45.86.17.0/24 maxlen: 24
45.86.18.0/24 maxlen: 24
91.242.81.0/24 maxlen: 24
171.22.52.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 19 Apr 2024 06:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f4:ef:48:38:17:74:4e:d7:29:32:71:c3:2f:09:62:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Apr 19 05:58:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0925bf8189cd93e774bbd71fc3f976c282a4e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c2:ce:80:4c:dc:94:d3:f2:b7:ba:97:b0:d7:
41:a4:ac:a3:ab:fe:c1:ad:35:f7:99:a0:d0:e8:e0:
5c:31:9b:77:96:21:a3:a4:ce:09:37:6a:a8:ef:7f:
b5:d1:da:f4:5b:9d:bd:f9:89:78:11:ff:59:1b:3a:
2b:89:fc:28:14:9b:dc:73:85:45:17:fa:c2:32:ad:
60:8a:a8:58:e3:4c:a2:71:3f:f0:b1:93:35:e4:bd:
f2:2a:3b:b3:37:94:ca:08:8e:e0:e0:a7:88:95:24:
05:0b:59:fc:3b:1b:83:91:4c:65:d4:7f:56:6d:e2:
50:1b:ee:28:4c:af:88:a8:33:c1:f6:7f:87:cc:06:
00:14:c3:b4:d1:f8:fe:4d:8f:90:8d:98:9f:1b:95:
95:16:87:fa:15:b9:d2:06:6f:ea:a8:91:3a:4f:98:
a9:54:fb:b4:01:a2:2f:a8:eb:85:55:25:4c:de:d7:
71:5f:9c:84:f7:ed:0e:80:43:a5:7f:5b:08:89:3a:
7c:89:14:c0:11:cd:ce:eb:99:ae:8c:a8:c1:cc:35:
df:dc:4c:6a:6b:03:a2:38:de:aa:8f:13:a2:3b:07:
8e:dc:19:ef:e0:97:df:78:8b:8c:b4:10:d9:a4:68:
9f:84:b2:f2:f4:4d:8c:ba:33:6c:79:77:63:b4:85:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:92:5B:F8:18:9C:D9:3E:77:4B:BD:71:FC:3F:97:6C:28:2A:4E:8D
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/8JJb-Bic2T53S71x_D-XbCgqTo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.117.0/24
45.86.16.0/21
91.242.81.0/24
171.22.52.0/22
Signature Algorithm: sha256WithRSAEncryption
54:19:38:85:56:4e:16:b2:8f:48:91:22:75:eb:79:36:73:22:
5d:b4:e4:28:4c:72:da:32:0c:30:c7:7e:8e:be:e1:65:ac:b0:
d0:99:5a:b7:ff:c7:13:77:b9:95:94:76:ae:9d:8f:02:ed:44:
64:e2:cf:72:7a:73:21:ad:e2:01:47:a6:02:05:c1:2a:71:fa:
3f:10:4a:4e:fa:92:d2:4b:27:35:45:2b:b5:4a:df:41:cd:1b:
7c:69:b7:0f:a1:2b:2b:a2:b1:5d:c0:47:b6:0b:c9:b4:08:0b:
22:42:f8:c6:c9:12:e3:68:ee:35:77:96:88:29:2a:5d:be:05:
35:a9:9a:b0:e6:e0:73:8b:f5:d1:66:95:95:1e:e3:f2:7f:a9:
c8:ad:99:fc:17:b1:9e:26:c0:65:0e:0f:ab:87:e4:fc:48:c7:
c4:ae:19:3e:6e:40:2f:09:97:8a:cf:2e:ad:06:74:12:07:e4:
d0:2b:5b:aa:d3:42:3e:be:f7:c6:c1:39:32:3e:37:ba:94:38:
7b:29:71:75:77:37:bf:59:50:2d:92:28:27:f8:33:39:6b:0d:
c7:2b:be:49:f0:27:45:5b:25:27:10:3f:bd:3e:ed:91:a5:1a:
86:31:ed:50:e7:7d:aa:43:cf:e1:6d:ec:7b:66:72:40:23:35:
e0:30:1b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 09:00:19 2024 by rpki-client on console-fra.rpki-client.org