Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/8t_cdZdBVqaUrBY99zdtIDnl3L4.roa
File: 8t_cdZdBVqaUrBY99zdtIDnl3L4.roa (raw, json)
Hash identifier: 0kz5VpzUuyUJyees1tQLapPfaGajh+o3XuoYnpWPJW0=
Subject key identifier: F2:DF:DC:75:97:41:56:A6:94:AC:16:3D:F7:37:6D:20:39:E5:DC:BE
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 018B03CF5F352E81292F85481A4B2051FD79
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/8t_cdZdBVqaUrBY99zdtIDnl3L4.roa
Signing time: Fri 06 Oct 2023 07:06:43 +0000
ROA not before: Fri 06 Oct 2023 07:06:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.89.31.0/24 maxlen: 24
45.89.28.0/24 maxlen: 24
45.89.29.0/24 maxlen: 24
193.160.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Oct 2023 07:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:03:cf:5f:35:2e:81:29:2f:85:48:1a:4b:20:51:fd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Oct 6 07:06:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2dfdc75974156a694ac163df7376d2039e5dcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1a:6b:8d:15:a7:54:55:c4:68:76:1c:68:1d:
d2:3e:02:74:5c:53:9a:ec:a5:c8:e2:96:ed:67:9d:
49:95:cd:5f:d7:40:93:4d:54:7d:77:b7:3c:5f:e9:
50:aa:e8:c9:22:01:ed:e8:b1:5b:4b:64:0c:3f:79:
95:c6:4b:05:f4:03:cd:22:6c:3f:27:ef:45:ce:bb:
0e:7c:d8:c7:fc:43:e0:16:26:97:ef:00:9d:1b:5d:
44:4d:8d:78:0f:dc:2e:42:30:91:32:7a:70:cf:4c:
a8:3f:08:3c:94:af:2e:a8:55:3d:16:84:f5:0a:0e:
6a:f7:9e:20:ac:20:28:35:3f:34:30:a9:8f:ae:b7:
d9:03:6f:9e:59:1b:7e:79:3c:5e:a0:04:99:91:55:
fd:e3:3a:d6:45:1b:0b:88:5d:eb:74:fc:d4:8b:96:
b3:70:90:75:4d:c7:85:ae:e9:53:95:51:a4:f4:53:
de:2c:59:9c:29:0e:36:3b:7d:46:38:41:38:2d:cb:
68:87:9c:3e:ee:19:58:64:1b:ae:6c:6a:53:42:b8:
78:fa:27:b8:e7:90:34:e5:a5:4d:aa:a7:91:e4:17:
26:fa:6c:b4:85:03:8d:71:a4:93:75:a9:42:fc:10:
ab:88:ae:13:28:b5:4c:6d:2f:68:a0:de:31:8e:0f:
02:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DF:DC:75:97:41:56:A6:94:AC:16:3D:F7:37:6D:20:39:E5:DC:BE
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/8t_cdZdBVqaUrBY99zdtIDnl3L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.28.0/23
45.89.31.0/24
193.160.136.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f1:37:c7:3a:b4:8f:4e:2c:6c:8e:8e:2b:21:2b:39:3e:cb:
31:9a:bb:3d:f4:7f:c3:9d:55:f6:04:79:14:8c:39:94:f0:ef:
93:99:3b:ba:e6:79:bb:fd:86:b6:f9:67:bf:e9:1e:5e:d0:24:
86:65:f8:0a:48:61:30:50:90:72:b6:af:90:c0:ca:00:e2:54:
d3:72:68:b3:e3:fa:7d:e0:46:87:71:19:09:eb:f0:c4:f2:07:
40:49:c1:d6:55:0b:7a:e2:ea:14:44:eb:82:83:2d:68:f5:02:
ff:b0:3e:3a:af:e2:21:5b:93:21:23:6f:97:5b:b1:81:0c:24:
ec:28:d7:74:62:80:be:1a:32:60:36:50:86:46:1a:af:1c:c8:
0d:c2:da:59:3d:16:38:ca:ff:d9:07:54:a5:ab:61:b9:30:df:
ff:59:72:cb:b6:f3:cf:88:2a:e7:ca:e8:2a:d8:bf:86:27:83:
9d:0f:28:04:fb:ca:eb:c1:05:6d:93:ba:20:9d:e5:25:51:29:
27:a3:40:ad:20:2f:e7:d0:5b:1a:53:03:0e:48:79:27:ee:2d:
b7:63:e3:96:5c:b8:d0:66:77:63:cc:4d:44:db:4a:29:9f:72:
2f:9f:31:f7:2f:8b:51:67:f5:85:c8:76:0e:38:3c:1d:6c:cd:
f5:6d:e0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:11 2024 by rpki-client on console-ams.rpki-client.org