Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/6tmKROESRTWpUIIsrNXfkcSV67c.roa
File: 6tmKROESRTWpUIIsrNXfkcSV67c.roa (raw, json)
Hash identifier: euPVuFTO6juUFGR+Q0jYYWYOa1USlJMQyMusfv+GfUs=
Subject key identifier: EA:D9:8A:44:E1:12:45:35:A9:50:82:2C:AC:D5:DF:91:C4:95:EB:B7
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 018572714177C05C1028596770390BDA2B56
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/6tmKROESRTWpUIIsrNXfkcSV67c.roa
Signing time: Mon 02 Jan 2023 12:25:03 +0000
ROA not before: Mon 02 Jan 2023 12:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203936
IP address blocks: 185.118.188.0/22 maxlen: 24
45.148.72.0/24 maxlen: 24
45.148.75.0/24 maxlen: 24
45.148.74.0/24 maxlen: 24
45.148.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:41:77:c0:5c:10:28:59:67:70:39:0b:da:2b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: Jan 2 12:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ead98a44e1124535a950822cacd5df91c495ebb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:e2:a3:ce:62:88:ce:4a:96:44:04:46:3b:
51:be:79:1c:fd:53:eb:80:c0:8f:b9:b3:44:61:36:
0d:e6:53:78:9e:66:51:17:b1:2f:98:fb:00:4e:2c:
6a:15:b8:0b:99:f7:3e:be:e2:b4:fe:56:8c:17:da:
19:1d:f3:bd:de:87:13:83:5d:b6:91:ab:cf:a4:f9:
10:f6:15:42:e9:87:a6:e8:41:55:de:a2:b6:4d:08:
6e:1e:da:e0:e8:93:3f:b3:3c:a4:9f:d6:55:27:c1:
fa:44:e2:c3:f8:94:ed:cc:78:c1:c0:f4:88:83:24:
a8:58:f0:f8:c9:c5:ac:e1:78:cc:cf:f8:12:b9:00:
5a:75:7d:12:d1:62:57:6b:55:4a:8e:75:b5:2d:42:
9d:e9:7a:5c:56:ea:83:ad:28:de:3d:67:9e:1b:a8:
0f:e0:6e:e4:14:ec:b5:23:61:96:07:8e:67:a9:a3:
7d:2b:e6:da:28:67:81:f7:9d:f8:75:44:a6:e2:af:
3e:51:4f:0f:4a:cf:94:ca:5d:05:d2:4d:04:21:98:
9e:27:5f:d9:bf:83:2f:cd:77:80:36:a2:8a:ad:3e:
ca:c8:f1:e2:22:f0:fe:f1:df:b8:65:dd:ec:ce:c5:
dc:a2:2d:8b:2e:8c:4c:fa:53:b4:4d:f6:57:65:1f:
bf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D9:8A:44:E1:12:45:35:A9:50:82:2C:AC:D5:DF:91:C4:95:EB:B7
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/6tmKROESRTWpUIIsrNXfkcSV67c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.72.0/22
185.118.188.0/22
Signature Algorithm: sha256WithRSAEncryption
22:00:dd:c7:f4:f7:85:83:14:4a:8d:28:5a:de:67:ac:3d:f2:
60:64:1c:a1:d6:dd:6a:1c:dc:72:ac:5f:08:a6:c2:1b:09:db:
bc:84:b6:9b:0d:7c:57:fd:0c:d6:e2:d5:6a:85:e5:6c:20:33:
ef:a0:30:3d:fd:09:a0:77:52:e3:13:77:5c:50:52:fd:33:08:
96:36:9a:87:32:ca:6e:36:ac:ec:7f:1a:42:13:de:91:ab:33:
ad:2e:18:96:a6:a0:e6:cd:06:bf:02:c1:74:d5:c3:2f:74:18:
a2:27:02:41:00:96:df:cb:f3:bd:b1:8b:94:37:81:23:9d:ce:
7d:31:88:e5:81:d7:15:cc:a5:3a:69:44:b6:c1:71:59:e7:a4:
06:f4:f6:72:38:01:20:68:79:f0:61:e8:f5:d9:62:cf:6f:47:
8a:18:cf:76:60:43:7a:96:54:3f:5e:26:0c:be:03:17:b0:1c:
88:57:8a:a5:40:19:67:05:9a:a8:fd:4a:64:ad:de:84:ab:59:
18:d2:92:56:95:d8:a4:f0:56:59:f5:3f:77:8f:a6:06:9b:1a:
30:58:36:83:9a:c0:a9:89:b6:31:fb:fb:4d:5b:cb:fb:44:53:
04:4c:36:ea:dc:af:8c:af:b0:33:63:8a:2c:c6:dd:82:cc:40:
d0:92:e1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:12 2024 by rpki-client on console-fra.rpki-client.org