Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/2PE1gojO5TGrvYAGNTFeNQltXzM.roa
File: 2PE1gojO5TGrvYAGNTFeNQltXzM.roa (raw, json)
Hash identifier: 5KvR7gaTu+IcybAwLXJhhDshuB+cIJjZvwxiCzzNEPA=
Subject key identifier: D8:F1:35:82:88:CE:E5:31:AB:BD:80:06:35:31:5E:35:09:6D:5F:33
Certificate issuer: /CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Certificate serial: 018CCA29BF9D193A9CAFB6E392FD64B6328A
Authority key identifier: 92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/2PE1gojO5TGrvYAGNTFeNQltXzM.roa
Signing time: Tue 02 Jan 2024 12:33:02 +0000
ROA not before: Tue 02 Jan 2024 12:33:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60670
IP address blocks: 45.155.110.0/24 maxlen: 24
45.155.109.0/24 maxlen: 24
45.155.108.0/24 maxlen: 24
45.155.111.0/24 maxlen: 24
185.180.184.0/24 maxlen: 24
185.180.186.0/24 maxlen: 24
185.180.185.0/24 maxlen: 24
185.180.187.0/24 maxlen: 24
2a0a:ad80::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 02 Feb 2024 14:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:bf:9d:19:3a:9c:af:b6:e3:92:fd:64:b6:32:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Validity
Not Before: Jan 2 12:33:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8f1358288cee531abbd800635315e35096d5f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:17:49:1e:d8:ff:37:d8:8e:5c:98:25:f6:
8f:8f:80:68:7c:1d:e6:d9:ca:63:dd:88:92:f6:f8:
1a:20:3a:75:d1:26:12:5a:dd:60:50:f5:16:9c:e1:
23:fe:92:cc:fc:34:d7:04:19:ea:13:81:80:4b:bc:
65:93:36:bc:64:52:d9:b6:aa:90:be:ff:a3:ed:64:
00:62:76:b4:3c:a3:de:05:b9:8c:28:0b:c5:f0:f9:
ce:cb:52:db:cd:f3:67:36:1c:33:bc:82:56:68:0c:
d4:03:4c:76:34:d5:bc:66:1f:60:ca:c2:3b:92:28:
a9:4c:02:31:07:21:06:a0:8f:ba:d4:17:9b:e6:07:
1c:6f:2b:8b:04:71:22:d8:22:f2:ee:73:be:0f:9b:
e1:ce:63:f0:5c:f2:7d:0c:7d:73:af:7a:28:d3:6c:
26:fb:a9:ee:cc:cd:a8:79:1e:48:03:da:64:6b:8b:
4a:e6:a3:a5:ee:8c:0d:02:62:72:fa:c0:3a:3f:94:
26:ba:75:1a:75:e8:55:39:33:fc:48:a1:e9:91:fa:
12:f0:fa:14:05:2a:20:81:e3:88:1e:4d:9e:f9:fc:
97:51:20:84:3c:3f:84:68:b6:87:58:72:e5:7e:43:
5d:91:bb:8a:8a:e2:c3:b0:42:2c:34:58:0b:fe:b8:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F1:35:82:88:CE:E5:31:AB:BD:80:06:35:31:5E:35:09:6D:5F:33
X509v3 Authority Key Identifier:
keyid:92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/2PE1gojO5TGrvYAGNTFeNQltXzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.108.0/22
185.180.184.0/22
IPv6:
2a0a:ad80::/29
Signature Algorithm: sha256WithRSAEncryption
5b:fb:29:2a:0b:cb:d0:aa:73:ef:ef:c2:6e:b6:fc:99:b7:73:
1a:39:1e:9a:fc:29:a7:ea:f5:fc:4f:45:e6:22:d3:aa:f9:8b:
69:f5:d2:e2:8a:81:46:64:2a:bc:cf:21:1b:82:e3:74:2c:b3:
d9:85:b9:38:65:88:ad:92:79:e2:eb:63:9d:df:0b:82:ee:95:
ed:39:69:aa:bd:d6:c8:c1:06:85:36:e9:42:78:35:db:92:37:
3e:6a:3e:b5:16:cd:0e:67:df:72:24:a4:c8:fa:30:1a:6e:0d:
0f:2e:c4:53:11:ec:e4:be:d8:b1:08:e9:48:13:f8:07:be:42:
db:4c:f8:bd:0e:39:84:67:9d:18:10:d6:51:1d:3f:a6:55:74:
3d:12:c8:e9:e0:2b:8c:08:7c:80:b5:54:8f:20:72:97:9c:f8:
0e:94:0c:c8:24:5d:54:1e:6b:33:ad:97:d6:f5:74:e7:29:a8:
8c:14:2d:71:72:5b:a7:e3:7c:4b:e9:8a:28:90:4f:f7:d1:92:
0b:99:f9:34:bb:f4:dc:c9:f7:ea:57:3c:c9:10:b0:e8:4a:39:
42:07:51:11:8e:c4:39:e7:90:b3:65:74:22:54:8d:34:72:ea:
16:fd:e8:33:3d:ef:4e:b3:d9:d2:48:5d:3d:c4:cd:0e:1f:a1:
1b:08:46:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:54 2024 by rpki-client on console-fra.rpki-client.org