Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/neqCWnFWgBynINhzdEhCu421DyE.roa
File: neqCWnFWgBynINhzdEhCu421DyE.roa (raw, json)
Hash identifier: ttRV2FFdaJ2z/4a3do/sPAKTO8izFE5uosRtSlnrjCU=
Subject key identifier: 9D:EA:82:5A:71:56:80:1C:A7:20:D8:73:74:48:42:BB:8D:B5:0F:21
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 018AA8D732E2EFEB3321F5FB960E2AF1EFC3
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/neqCWnFWgBynINhzdEhCu421DyE.roa
Signing time: Mon 18 Sep 2023 15:09:50 +0000
ROA not before: Mon 18 Sep 2023 15:09:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.89.31.0/24 maxlen: 24
45.89.28.0/24 maxlen: 24
45.89.29.0/24 maxlen: 24
193.160.102.0/24 maxlen: 24
193.160.113.0/24 maxlen: 24
193.160.130.0/24 maxlen: 24
193.160.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Oct 2023 07:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a8:d7:32:e2:ef:eb:33:21:f5:fb:96:0e:2a:f1:ef:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Sep 18 15:09:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dea825a7156801ca720d873744842bb8db50f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3a:4d:b1:64:1a:86:77:2e:05:9d:f3:d5:84:
ae:30:35:d2:0d:a8:16:ed:13:15:ae:de:36:bf:c0:
c3:7b:21:d0:77:97:7e:ae:17:4e:3d:20:9f:8c:1b:
58:67:6e:cf:fa:93:2a:19:bb:31:84:aa:7b:c1:29:
78:aa:e1:71:2d:43:29:50:68:29:83:a8:70:48:79:
11:af:f4:ed:b4:e4:75:b3:71:3d:10:d1:f7:a7:24:
09:9f:13:a7:e7:33:4e:8c:3b:0c:5c:fe:34:a4:42:
81:8f:8d:6f:31:b7:0c:8d:8c:fa:6d:21:f0:99:3d:
f5:f4:4b:0c:af:6e:34:77:93:19:77:3f:10:97:73:
53:52:41:2b:e5:5e:47:52:1e:4d:4e:69:c7:0b:f9:
5c:01:88:de:5d:dd:a8:a3:dc:d5:be:31:d3:c5:0b:
5e:06:3b:c6:63:5c:e6:1f:97:fa:1d:4a:26:31:67:
95:45:09:cc:d7:96:48:b3:39:5d:67:7c:57:e7:fd:
c2:aa:1a:2d:98:74:96:f7:b3:40:a2:8b:d0:89:f9:
56:99:05:6c:18:3c:b9:ca:8e:93:95:a2:91:29:ed:
7b:8b:a7:5e:0e:3a:82:b7:07:7a:4c:80:3c:7e:c7:
0b:9d:16:b4:2e:a7:9b:a5:8b:1f:a0:f7:ce:2f:4c:
ba:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EA:82:5A:71:56:80:1C:A7:20:D8:73:74:48:42:BB:8D:B5:0F:21
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/neqCWnFWgBynINhzdEhCu421DyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.28.0/23
45.89.31.0/24
193.160.102.0/24
193.160.113.0/24
193.160.130.0/24
193.160.136.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:4b:85:df:b7:2c:ce:45:93:89:ac:18:3e:7e:a4:92:12:7d:
ef:87:0e:c3:33:dd:b1:30:98:d7:a9:b2:a8:2e:84:36:1d:31:
58:c9:d8:23:12:1f:d1:02:82:c1:55:19:83:ea:e7:e5:13:49:
39:06:6c:34:ec:21:3d:71:26:19:c7:3e:b8:27:c4:12:4d:c1:
b5:d1:58:6e:52:96:51:38:ce:40:61:f1:9d:a6:46:bf:c8:85:
53:f4:67:fc:d0:81:48:91:4f:19:b5:36:9b:14:71:9d:e3:a9:
00:19:38:8a:00:5a:55:f9:74:8e:4e:96:6e:90:87:fb:bc:d5:
1b:7a:8d:65:19:93:17:25:d7:8e:27:79:60:8a:a2:41:c7:46:
a0:88:13:04:e5:53:98:0b:81:31:61:c5:25:94:8f:23:ec:4e:
c3:d6:22:ac:d6:22:dc:bf:48:1a:43:7f:dc:62:25:c7:90:4a:
b4:07:f6:f1:83:b4:0c:83:b7:a5:36:51:72:92:72:6d:d5:46:
f7:96:03:e5:53:03:1d:b2:33:b1:2d:31:3d:74:5c:ba:99:87:
fb:20:80:dc:7e:e3:91:5b:53:39:29:a0:d9:7d:b2:39:26:d2:
92:f1:d7:4e:eb:e3:3b:ce:f4:f4:3f:75:02:cc:06:ff:95:74:
39:44:0e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:11 2024 by rpki-client on console-ams.rpki-client.org