Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/j0vx0elfv5iR89Br53Rs9_e9Lwk.roa
File: j0vx0elfv5iR89Br53Rs9_e9Lwk.roa (raw, json)
Hash identifier: eNHTPdLgR+I2087WLfS3+Rj4GzuLPIhZT1Gs60OIVQI=
Subject key identifier: 8F:4B:F1:D1:E9:5F:BF:98:91:F3:D0:6B:E7:74:6C:F7:F7:BD:2F:09
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 018C156E6BB0300327CFBA10920784C66850
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/j0vx0elfv5iR89Br53Rs9_e9Lwk.roa
Signing time: Tue 28 Nov 2023 10:16:47 +0000
ROA not before: Tue 28 Nov 2023 10:16:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48359
IP address blocks: 185.239.1.0/24 maxlen: 24
89.44.240.0/24 maxlen: 24
89.42.44.0/22 maxlen: 22
45.94.214.0/24 maxlen: 24
45.94.215.0/24 maxlen: 24
89.46.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:23:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:15:6e:6b:b0:30:03:27:cf:ba:10:92:07:84:c6:68:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Nov 28 10:16:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f4bf1d1e95fbf9891f3d06be7746cf7f7bd2f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e2:ea:bc:63:04:8b:8a:55:a8:33:ae:5d:8e:
af:1f:71:6f:27:bb:03:57:6c:31:ab:7d:5e:e8:1c:
2e:0f:60:d1:1b:5f:0d:1c:6f:bb:86:a0:f9:9d:0f:
aa:eb:b3:33:1c:bb:ce:74:be:05:95:09:1a:59:31:
07:a7:f0:41:84:0b:4f:27:e7:8f:25:33:da:2a:0d:
37:25:60:9b:d0:b3:ed:4b:b9:54:d7:9e:3e:9a:9c:
31:39:37:77:28:e1:84:b2:4f:5f:03:f8:ce:ff:0a:
a4:9b:42:a0:c6:35:66:dc:eb:f2:5d:d2:35:ad:21:
28:dc:39:56:55:ac:bd:9b:d9:33:ab:07:f4:ad:cf:
50:24:b6:cc:78:98:55:f5:24:7e:31:2b:bf:fc:7f:
29:c5:97:df:55:d6:01:1c:2a:88:e5:fc:e5:ed:61:
e2:ba:ff:9c:77:b2:16:12:14:3e:84:eb:cf:99:b8:
a9:88:b7:29:ed:db:12:d6:e9:e1:b9:75:c1:6a:66:
f0:de:f0:ca:57:49:ef:39:98:6e:74:15:b8:46:b8:
7f:13:d7:85:bd:50:6a:5e:28:bb:e0:14:61:0c:4b:
f0:3e:22:ec:f4:58:f4:b7:20:de:23:98:92:ec:26:
e8:17:79:91:29:14:71:b5:d0:fc:66:98:d7:f0:d4:
11:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4B:F1:D1:E9:5F:BF:98:91:F3:D0:6B:E7:74:6C:F7:F7:BD:2F:09
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/j0vx0elfv5iR89Br53Rs9_e9Lwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.214.0/23
89.42.44.0/22
89.44.240.0/24
89.46.217.0/24
185.239.1.0/24
Signature Algorithm: sha256WithRSAEncryption
60:9c:4e:63:b0:82:9a:9a:dc:3e:a4:0e:ec:9c:f3:b9:79:b3:
ec:78:56:e4:f2:55:71:26:e3:3e:94:02:21:ce:85:0b:12:37:
53:08:5d:5d:d0:69:c6:f9:bc:af:5f:ba:a5:f0:16:0a:f9:77:
45:fc:3f:6a:98:1f:64:f8:fc:24:8d:83:68:2c:08:78:8a:14:
3d:b9:92:c4:91:89:c9:36:dd:01:ef:a3:15:02:f2:43:ba:21:
a2:23:8e:99:97:50:44:6d:19:3b:19:59:12:9e:70:86:5b:cf:
47:41:3e:9d:24:f3:e4:d7:e3:90:5d:88:39:cb:f3:68:a9:1d:
9c:ca:5f:ef:e1:26:c0:cb:03:dc:7d:4b:62:65:e5:e6:f2:a0:
5e:68:66:a4:a6:78:69:6b:e0:71:89:4b:95:03:c3:0b:dd:68:
1c:7d:e4:e8:d2:02:62:14:f3:ae:8c:2b:88:75:da:17:8e:80:
ff:7e:82:a5:50:e6:5b:69:3e:98:5d:f7:cd:44:a0:87:d2:bc:
4a:e6:c8:13:88:6d:df:80:37:72:8c:84:8a:ab:04:cb:39:6b:
33:12:fe:81:20:2d:e8:3c:d7:42:27:a3:4e:37:ef:33:ad:70:
5a:5d:64:66:60:4c:2b:b6:9f:64:33:66:93:9b:ba:ac:90:5c:
c0:04:e1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:49 2024 by rpki-client on console-ams.rpki-client.org