Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/O2XuAmCmIkT962wKvlQ2ILb2Hsg.roa
File: O2XuAmCmIkT962wKvlQ2ILb2Hsg.roa (raw, json)
Hash identifier: ge+ohvNobb5C4n0KvnCSMltaQeGge/QZ6PWwSYnBo2I=
Subject key identifier: 3B:65:EE:02:60:A6:22:44:FD:EB:6C:0A:BE:54:36:20:B6:F6:1E:C8
Certificate issuer: /CN=b660d78320860d5efe729e208b5eb4b2abebe078
Certificate serial: 018B906194CBAE435C7BA7F7E0D96046C7EF
Authority key identifier: B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/O2XuAmCmIkT962wKvlQ2ILb2Hsg.roa
Signing time: Thu 02 Nov 2023 14:13:16 +0000
ROA not before: Thu 02 Nov 2023 14:13:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51198
IP address blocks: 45.132.9.0/24 maxlen: 24
45.132.11.0/24 maxlen: 24
45.132.8.0/24 maxlen: 24
45.132.10.0/24 maxlen: 24
185.179.179.0/24 maxlen: 24
2a0e:6540::/29 maxlen: 29
2a13:7d00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:61:94:cb:ae:43:5c:7b:a7:f7:e0:d9:60:46:c7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b660d78320860d5efe729e208b5eb4b2abebe078
Validity
Not Before: Nov 2 14:13:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b65ee0260a62244fdeb6c0abe543620b6f61ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b8:3d:ab:b8:6d:c1:24:c6:00:76:fb:b9:43:
f0:ab:d8:f5:6d:42:15:15:0d:33:ba:2c:36:28:5b:
8f:c1:bf:a5:9b:5b:92:f4:bc:32:36:94:1b:92:af:
00:92:8b:89:9a:0d:30:98:89:12:25:a8:6e:46:23:
13:75:56:81:df:61:67:84:c0:88:c4:92:6a:11:33:
66:d5:ab:e8:de:c5:89:96:e1:4c:c9:4a:a2:d5:23:
a4:09:dc:5f:c1:f9:ec:ec:63:3d:00:0f:8c:ce:59:
10:dc:32:f8:68:09:f3:cb:d3:e3:9e:12:50:f2:01:
6d:4b:17:2c:a0:6a:37:7e:93:2b:0d:7f:63:55:81:
ea:db:14:cb:4d:79:7a:39:32:ed:c3:f7:59:d6:62:
ec:34:23:50:f3:af:0a:b1:db:a8:b9:38:e9:d3:b6:
08:a0:ef:96:07:f9:cc:2e:24:92:b4:79:23:9d:69:
0f:c4:84:06:c3:1a:49:6b:72:d8:72:6f:74:55:24:
53:67:cb:27:6d:7d:6a:11:a4:07:10:49:90:27:28:
77:82:f5:0f:13:1f:fe:1e:05:d0:f0:10:1d:91:3e:
54:d7:08:7f:86:f3:83:ac:52:7b:66:d0:f0:65:20:
4e:ad:5e:09:1d:a7:e4:39:27:cc:6a:98:fa:35:a4:
54:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:65:EE:02:60:A6:22:44:FD:EB:6C:0A:BE:54:36:20:B6:F6:1E:C8
X509v3 Authority Key Identifier:
keyid:B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/O2XuAmCmIkT962wKvlQ2ILb2Hsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.8.0/22
185.179.179.0/24
IPv6:
2a0e:6540::/29
2a13:7d00::/29
Signature Algorithm: sha256WithRSAEncryption
bc:00:1f:0a:55:ff:26:36:49:be:d1:f1:ff:c6:9d:9a:10:b9:
cb:b1:d1:57:19:c2:9e:f7:5e:89:0b:1e:de:75:a1:97:c1:1f:
88:a3:2d:61:14:35:a8:03:cb:00:b0:49:0e:52:b0:65:f1:97:
6e:1c:ca:43:a6:3d:8a:08:4f:89:67:60:44:48:ef:95:88:b4:
18:31:1e:b0:10:00:c0:9c:fc:b0:57:88:9d:96:08:a9:e7:19:
9f:6c:92:9e:5a:24:dc:05:ef:1f:f4:1e:59:c6:b1:20:eb:f6:
10:ef:8e:52:d0:79:4e:99:1a:4b:01:94:39:d8:e8:a9:db:c3:
a3:af:e6:bd:b2:69:17:9b:49:be:77:2c:85:f3:94:1a:be:9a:
cf:23:96:29:82:79:11:c0:d5:b9:1f:79:7d:d7:c0:51:ff:6c:
c2:c1:71:b4:64:05:b0:74:b0:17:f8:ec:5e:d2:d1:17:cf:86:
66:99:5d:9d:3a:cb:49:97:5a:c9:fd:16:41:ec:ff:9b:27:44:
e1:60:e4:8f:70:a2:d0:6f:9c:fe:f8:53:84:c0:4e:d9:88:2c:
6c:0c:cf:b9:ef:35:51:27:90:7e:bc:84:4f:76:d8:2f:c0:e1:
a0:0d:f6:64:18:b7:4b:7a:e0:c6:8f:5b:0a:50:c9:86:98:df:
a8:59:b1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:18 2024 by rpki-client on console-ams.rpki-client.org