Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/1pEmzbsefdl3NErgaYYCRi3uyFY.roa
File: 1pEmzbsefdl3NErgaYYCRi3uyFY.roa (raw, json)
Hash identifier: WYWsYPB/TyJzJ5usWWHod43LYV9rylYPQVUcQBPyCiE=
Subject key identifier: D6:91:26:CD:BB:1E:7D:D9:77:34:4A:E0:69:86:02:46:2D:EE:C8:56
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 018CC8DD9486293D4474C9B93A6F97096965
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/1pEmzbsefdl3NErgaYYCRi3uyFY.roa
Signing time: Tue 02 Jan 2024 06:30:13 +0000
ROA not before: Tue 02 Jan 2024 06:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57497
IP address blocks: 45.89.236.0/22 maxlen: 24
212.18.108.0/24 maxlen: 24
103.130.144.0/24 maxlen: 24
103.130.146.0/24 maxlen: 24
45.93.168.0/24 maxlen: 24
45.93.171.0/24 maxlen: 24
45.93.169.0/24 maxlen: 24
45.93.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Apr 2024 10:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:94:86:29:3d:44:74:c9:b9:3a:6f:97:09:69:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Jan 2 06:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d69126cdbb1e7dd977344ae0698602462deec856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b2:56:54:89:e7:dd:ed:d8:be:1a:2f:2e:ec:
95:99:d0:f5:81:d7:55:3c:d3:bf:37:93:27:9c:7b:
bc:e7:4c:f4:a9:5f:89:b7:62:47:e9:73:4d:83:a7:
89:92:d7:51:02:26:d3:de:f6:20:70:a9:2a:9a:2c:
b9:ca:24:34:f5:0a:67:16:b7:03:6e:e8:87:f1:af:
8a:55:53:b8:e4:c0:e5:f9:c7:a7:01:2e:47:ae:2d:
e2:bb:93:9f:db:dc:1c:52:a2:91:fd:83:be:c9:0d:
90:5d:7d:19:fd:7f:b6:b6:b8:3b:4e:85:f1:5c:c5:
9f:a1:b4:1b:ab:1a:e3:eb:f1:11:51:34:6d:04:ed:
de:18:f8:e9:56:88:0a:34:56:25:60:4c:0f:38:88:
0c:0b:45:0c:5b:83:0a:40:e9:f4:1c:2d:b7:d7:9c:
f3:95:86:c3:a9:ae:c2:f3:c8:45:2e:5a:c1:4e:4c:
53:33:26:7e:03:31:1a:65:54:7d:86:d8:ce:44:16:
3b:31:50:b3:a5:7c:30:29:87:48:90:df:36:5e:dd:
44:f0:e5:94:37:1c:90:f9:92:68:7e:07:12:14:99:
3c:99:40:7f:24:f5:c7:e9:97:6f:d2:44:77:64:bd:
2b:28:a1:5e:aa:f7:a2:49:a3:8f:df:4e:15:4c:75:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:91:26:CD:BB:1E:7D:D9:77:34:4A:E0:69:86:02:46:2D:EE:C8:56
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/1pEmzbsefdl3NErgaYYCRi3uyFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.236.0/22
45.93.168.0/22
103.130.144.0/24
103.130.146.0/24
212.18.108.0/24
Signature Algorithm: sha256WithRSAEncryption
49:f0:0e:34:43:7e:31:53:08:7f:36:90:36:29:20:82:fd:54:
f3:dc:03:77:31:11:12:ad:b6:f1:fe:4b:31:7c:a0:51:13:cd:
7e:73:2a:51:bf:5c:c8:0d:40:3f:c4:42:07:85:86:1f:b0:88:
e0:17:d6:85:bf:47:f1:ba:22:ae:de:54:6d:e9:ee:a5:71:1a:
8d:47:88:0e:15:0b:99:dd:3f:df:b7:9a:e7:90:4a:38:b0:ef:
72:24:b8:f4:1e:88:a4:03:b2:68:dd:08:66:50:77:a0:a0:7c:
26:1b:8a:63:6a:99:d7:b6:df:4a:40:d3:79:9b:42:67:5a:f6:
3a:66:ca:f9:bb:72:23:46:cd:86:b7:1b:4e:f2:10:ae:4f:68:
a9:29:70:27:c3:9a:42:1f:a9:45:bb:06:b8:80:cb:aa:fc:e1:
ae:a0:1a:7e:d9:86:0f:2f:06:11:14:7e:15:d1:50:b6:71:ae:
dd:7b:80:7c:ce:63:cb:da:aa:21:c1:79:84:29:99:a9:63:7d:
8e:e7:96:8d:c9:02:fe:84:32:e4:82:f5:35:d8:f0:91:06:fe:
76:98:3e:86:b2:f0:c9:ad:4b:02:24:19:d5:d2:7c:24:ad:d3:
a4:2b:30:5d:d4:e0:0d:ad:e0:26:50:ea:2f:59:db:ce:9c:73:
e9:a1:71:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:16 2024 by rpki-client on console-fra.rpki-client.org