Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/8fj7soyZzcjz1z6D3Z5u7uT6PdI.roa
File: 8fj7soyZzcjz1z6D3Z5u7uT6PdI.roa (raw, json)
Hash identifier: FU3OKqSJs0stGCiU/SH2/g1kTc43mj2ScFXg2KEWnds=
Subject key identifier: F1:F8:FB:B2:8C:99:CD:C8:F3:D7:3E:83:DD:9E:6E:EE:E4:FA:3D:D2
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01889F4BDA4FC88B3A4CFAC5E5265E86449F
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/8fj7soyZzcjz1z6D3Z5u7uT6PdI.roa
Signing time: Fri 09 Jun 2023 08:35:28 +0000
ROA not before: Fri 09 Jun 2023 08:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210636
IP address blocks: 45.15.208.0/24 maxlen: 24
45.15.210.0/24 maxlen: 24
45.15.209.0/24 maxlen: 24
45.90.200.0/22 maxlen: 24
45.86.190.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 06 Dec 2023 13:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:4b:da:4f:c8:8b:3a:4c:fa:c5:e5:26:5e:86:44:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jun 9 08:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1f8fbb28c99cdc8f3d73e83dd9e6eeee4fa3dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ee:ff:86:7d:a0:33:db:0a:a6:aa:a3:e8:6c:
bd:04:89:93:4e:ae:5f:0c:e8:7c:69:eb:f2:42:21:
a3:ba:55:c2:7f:6b:79:88:3d:54:2e:60:30:eb:47:
25:9d:fe:6e:93:3e:28:a9:55:c6:e4:7c:08:74:9a:
b5:46:49:d8:01:c1:8f:5c:86:1d:5b:62:76:77:ca:
a0:db:79:3f:8f:c1:70:04:f5:c4:63:e8:61:3c:f8:
e6:24:23:a4:96:c5:cd:8e:d5:5c:57:24:b5:ea:51:
7b:cb:7e:58:aa:03:04:5d:73:01:44:8f:7d:0d:b2:
54:58:9d:5f:2b:25:b4:5c:60:f6:11:03:2f:37:ae:
68:89:a4:90:bf:e6:09:e0:ea:9c:b7:62:c5:9f:b4:
38:66:ee:f2:a4:b0:4a:03:13:d7:36:99:f8:f5:ba:
b5:4c:68:0a:61:95:d4:f3:27:18:bc:57:f5:56:a2:
b6:87:6a:20:da:1c:a4:0d:b0:66:b4:c4:18:dd:9f:
4e:85:26:8e:ce:d5:00:81:2c:8b:60:54:95:89:30:
6a:9d:85:d8:f7:3a:12:85:d3:29:0d:21:d2:a2:c7:
5d:24:71:70:74:7d:67:7c:b1:e6:ed:b0:b3:bc:43:
f8:88:5f:3d:4e:26:b9:62:08:e0:5c:b4:df:71:9f:
68:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F8:FB:B2:8C:99:CD:C8:F3:D7:3E:83:DD:9E:6E:EE:E4:FA:3D:D2
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/8fj7soyZzcjz1z6D3Z5u7uT6PdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.208.0-45.15.210.255
45.86.190.0/23
45.90.200.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:44:51:f3:67:52:0f:73:68:43:8c:f5:3a:8a:e5:46:07:17:
1b:5c:8d:87:cc:fd:21:96:93:f5:21:f5:36:c9:06:9d:bc:38:
9f:07:93:59:57:84:b3:4f:24:61:d7:b9:91:39:ef:b1:b1:7f:
9c:79:40:1c:e0:4c:2a:7b:80:9b:bb:81:1b:89:1c:83:b9:99:
75:78:10:1a:b5:6d:b8:c8:94:d2:33:15:2b:4e:16:13:c8:78:
2a:4c:17:e0:12:4a:ee:29:26:e7:67:c8:e0:71:35:3f:d8:d8:
47:e1:67:9e:71:18:f7:a9:7e:32:51:33:19:51:a8:ee:77:14:
74:14:ee:a3:7c:c1:63:73:c2:d8:05:54:7d:15:fa:f4:c8:4f:
79:24:42:fd:3a:0f:6e:2a:3d:ae:bd:a0:c9:7b:b2:19:57:34:
0d:3c:42:74:3a:90:7d:a9:23:81:f8:09:e1:2f:cb:13:78:4a:
df:32:d9:74:38:25:05:fb:ee:a7:36:b9:32:e4:71:78:0f:b2:
63:a6:fb:53:ff:83:c0:f4:f0:07:4a:cc:4c:c6:72:e4:c7:8b:
d7:08:88:80:48:df:d3:da:64:02:f2:7b:6d:e3:f5:a0:00:a4:
f2:6d:52:d6:3d:13:ff:d6:b4:4a:f6:00:5e:2a:5a:24:85:a6:
d3:60:d4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:37 2024 by rpki-client on console-ams.rpki-client.org