Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/6VW9ctsJNxJoaGsrEeBtnjHqWUE.roa
File: 6VW9ctsJNxJoaGsrEeBtnjHqWUE.roa (raw, json)
Hash identifier: 9pDMDa6iWogcMxPe1q0Q70HCnZX2itjJiZZlvqdgIQ8=
Subject key identifier: E9:55:BD:72:DB:09:37:12:68:68:6B:2B:11:E0:6D:9E:31:EA:59:41
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 0189D04040180A28137C38995361F265CA75
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/6VW9ctsJNxJoaGsrEeBtnjHqWUE.roa
Signing time: Mon 07 Aug 2023 13:46:58 +0000
ROA not before: Mon 07 Aug 2023 13:46:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.89.31.0/24 maxlen: 24
45.89.28.0/24 maxlen: 24
45.89.29.0/24 maxlen: 24
45.89.30.0/24 maxlen: 24
193.160.102.0/24 maxlen: 24
193.160.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 21:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:40:40:18:0a:28:13:7c:38:99:53:61:f2:65:ca:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Aug 7 13:46:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e955bd72db09371268686b2b11e06d9e31ea5941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:31:e7:af:ce:86:c7:30:6f:c1:7f:c8:32:
90:cb:4b:c0:58:bf:21:c7:c5:0d:b2:d7:87:95:91:
54:64:9c:9a:5b:63:9f:11:e2:dd:11:a7:67:3f:98:
ce:17:9b:44:08:3c:84:1f:2c:fc:f8:7c:87:e9:ef:
9a:98:3c:58:af:6f:1f:90:2c:c7:cb:75:b8:7d:d4:
18:4d:72:90:d9:24:d2:22:a9:be:2c:7f:06:8e:c7:
0f:07:e3:63:77:24:48:e2:08:b4:38:53:95:a6:d4:
0d:b8:44:82:91:c3:6b:ae:76:01:b6:9e:a6:be:22:
f4:69:7b:63:45:e7:17:3b:b4:c3:cc:82:b3:50:22:
0f:e5:49:5d:49:9b:ee:57:c2:11:70:b1:60:f0:04:
a2:68:c5:0a:d4:f2:e9:fe:16:73:1a:dc:43:ea:5f:
c3:05:6a:6d:9b:42:5c:9d:a1:41:4a:2c:67:71:e1:
77:28:7d:57:67:d0:c1:95:e3:6b:a8:7f:d7:61:5c:
4f:0b:42:17:97:c4:9d:03:3c:53:f0:48:ab:a6:65:
3d:aa:c4:2d:1c:4d:87:55:ff:23:c6:57:6d:3a:77:
62:7b:bd:76:5f:3e:94:d4:44:48:b5:bf:4a:0d:f9:
de:99:1f:de:73:49:a0:0d:21:96:f9:98:50:23:d6:
a0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:55:BD:72:DB:09:37:12:68:68:6B:2B:11:E0:6D:9E:31:EA:59:41
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/6VW9ctsJNxJoaGsrEeBtnjHqWUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.28.0/22
193.160.102.0/24
193.160.130.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b7:29:3f:84:34:4b:75:45:fa:5b:9b:43:50:0b:d8:84:31:
e9:b6:30:42:68:58:6f:7b:66:21:2d:6d:17:68:a4:75:1e:52:
58:2e:c7:14:ec:8a:31:9c:a5:6c:33:c8:d4:31:1a:50:f0:b1:
90:9d:d0:97:61:ec:66:c7:8a:e9:c5:14:75:fb:c0:0a:93:6e:
d8:92:71:de:a9:51:1a:42:51:16:01:01:a7:fe:75:5d:33:d0:
54:b2:8f:74:83:a2:d0:f6:43:9e:52:8d:23:b1:8d:16:61:ae:
3f:9b:2a:f5:cd:63:e0:a0:09:79:d5:1a:87:99:75:7c:98:01:
d5:c2:15:dd:9e:df:d9:1a:8b:25:f9:49:73:f6:54:c5:c2:5e:
62:c3:cb:c6:83:f7:5c:2a:72:53:39:00:27:b4:02:ba:66:7d:
3f:ce:96:3a:e8:11:9e:96:ce:e7:c5:ea:4f:49:06:66:bd:72:
e3:2d:bf:d5:ee:13:d2:62:01:dd:49:c5:43:f1:8e:bd:73:18:
4d:25:f4:61:71:f1:59:99:fe:0e:e2:eb:58:69:7c:78:0e:52:
fc:c8:53:8d:2c:d8:7f:da:55:af:73:83:48:c3:96:78:52:f2:
0e:da:ce:99:45:85:4e:b2:18:f0:7b:df:c5:e5:ef:99:c7:d0:
4a:89:84:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:40 2024 by rpki-client on console-fra.rpki-client.org