Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/jUmhaarlKJ5goqWaR_m6Zg19llM.roa
File: jUmhaarlKJ5goqWaR_m6Zg19llM.roa (raw, json)
Hash identifier: d9rDcpFyEqBCfh7OKhnvzdsrq8jpyJ6JfhFoJy5teqw=
Subject key identifier: 8D:49:A1:69:AA:E5:28:9E:60:A2:A5:9A:47:F9:BA:66:0D:7D:96:53
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 018851C32947ECBF65AFA99AA61A9CD8B42D
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/jUmhaarlKJ5goqWaR_m6Zg19llM.roa
Signing time: Thu 25 May 2023 07:15:24 +0000
ROA not before: Thu 25 May 2023 07:15:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210636
IP address blocks: 45.15.208.0/23 maxlen: 24
45.15.210.0/24 maxlen: 24
45.90.200.0/22 maxlen: 24
45.86.190.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 09 Jun 2023 08:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:51:c3:29:47:ec:bf:65:af:a9:9a:a6:1a:9c:d8:b4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: May 25 07:15:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d49a169aae5289e60a2a59a47f9ba660d7d9653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a3:95:ec:60:64:7a:97:c2:73:e9:02:c4:89:
28:ec:ca:34:f1:be:fc:44:af:54:37:11:a9:f7:7a:
77:c9:37:66:75:f3:25:55:ab:12:d0:b6:16:17:05:
59:bf:cd:8b:83:b8:f1:db:d6:e4:94:fe:fb:34:e6:
d8:2e:ad:7e:8f:cd:2f:66:12:91:b0:2a:5a:10:8f:
8d:da:92:4b:13:a0:93:c2:a4:13:2e:86:02:3a:9d:
9a:78:67:be:5c:34:b3:e6:67:2a:79:cc:c2:7b:a7:
a6:17:1e:ca:c7:44:3d:9c:d4:f4:19:20:80:fc:4a:
01:12:f5:40:86:2a:14:dc:16:44:97:f5:e4:f2:78:
b0:9b:59:e2:8c:52:a9:83:5c:45:c6:7b:b7:77:ab:
8f:a2:af:16:ee:7b:ca:cd:22:a3:0c:94:52:44:10:
a0:76:0b:b8:a5:6c:d1:62:50:b4:e7:5a:93:ff:ef:
fc:1c:ca:fd:d2:1d:11:bc:7d:99:c2:19:0c:3b:25:
79:1d:f8:12:07:9a:15:92:d4:81:87:d0:08:8b:cd:
7a:71:4e:04:1f:65:77:da:3e:e7:c4:e9:59:33:98:
2b:a6:5c:59:f8:0d:3a:9c:2c:94:62:a1:da:a8:3b:
e5:1a:ae:7c:ce:34:5d:35:30:19:c5:77:ef:1e:eb:
1a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:49:A1:69:AA:E5:28:9E:60:A2:A5:9A:47:F9:BA:66:0D:7D:96:53
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/jUmhaarlKJ5goqWaR_m6Zg19llM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.208.0-45.15.210.255
45.86.190.0/23
45.90.200.0/22
Signature Algorithm: sha256WithRSAEncryption
28:18:ee:83:b8:34:bf:31:c8:43:57:43:96:ae:ac:fa:4d:45:
bb:9f:d8:b2:e2:3d:c7:e7:02:5b:ed:9e:6e:1d:16:e9:73:81:
a9:85:5e:94:a2:67:b7:8e:a3:a7:c3:a7:a9:d5:d0:81:e5:f8:
b5:74:0f:d2:9b:63:47:4e:74:e4:fa:1a:c5:35:5e:49:bb:41:
5a:ae:d1:f6:34:66:cb:8e:2f:7f:ca:3e:59:4b:c7:2b:81:75:
b3:88:44:30:22:11:e2:00:7c:72:bb:ff:5d:2a:37:d4:47:0c:
64:3c:d9:18:2b:08:cb:4d:65:98:b7:cf:d4:b4:82:ee:aa:9b:
48:74:e7:8a:b8:0f:a6:d8:76:28:fc:a4:0c:c7:ed:97:b9:c9:
81:62:8e:1b:8c:64:7a:79:62:a0:91:16:21:fe:a0:ba:d3:bc:
3b:87:1e:ec:73:10:41:c5:e5:23:92:12:c6:05:a3:3f:ae:33:
4e:ac:c7:59:89:50:7c:93:73:4e:c2:f2:6f:f7:19:f4:5c:72:
76:d2:a8:ac:5d:6c:29:3d:61:0d:9b:5c:dd:9c:89:df:f9:d5:
63:5e:eb:9f:6a:0e:ca:66:4b:59:06:09:06:a5:73:ba:2c:b7:
d3:d2:20:16:c8:15:bf:44:e8:4c:88:d4:65:21:16:0e:01:f4:
40:f3:d7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:55 2024 by rpki-client on console-fra.rpki-client.org