Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/cxqSXODzdXygyuMlZf0Sq3bPYKo.roa
File: cxqSXODzdXygyuMlZf0Sq3bPYKo.roa (raw, json)
Hash identifier: EKw5HbEqBoCqQ6IhRHNKWUFIKlJ9RmkuClX7V7/M5yA=
Subject key identifier: 73:1A:92:5C:E0:F3:75:7C:A0:CA:E3:25:65:FD:12:AB:76:CF:60:AA
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018E9F31AC98DBA9BB3ABEA62E35D71C7BB1
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/cxqSXODzdXygyuMlZf0Sq3bPYKo.roa
Signing time: Tue 02 Apr 2024 14:23:36 +0000
ROA not before: Tue 02 Apr 2024 14:23:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12722
IP address blocks: 45.86.3.0/24 maxlen: 24
45.128.130.0/23 maxlen: 23
46.149.174.0/24 maxlen: 24
62.204.32.0/24 maxlen: 24
83.171.212.0/22 maxlen: 22
185.253.2.0/24 maxlen: 24
188.64.140.0/24 maxlen: 24
212.60.6.0/24 maxlen: 24
212.107.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 12:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:31:ac:98:db:a9:bb:3a:be:a6:2e:35:d7:1c:7b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 2 14:23:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=731a925ce0f3757ca0cae32565fd12ab76cf60aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:86:fe:a9:e7:7d:0f:d3:7b:e0:af:63:b1:c5:
23:80:42:98:e2:ac:ff:0f:33:73:9f:3f:86:2c:03:
f5:e9:f8:8e:22:33:21:c6:73:2f:94:68:40:22:27:
0e:c5:be:74:cd:14:9b:22:01:3b:bd:09:bd:a4:bf:
e6:53:74:4a:cc:c8:59:02:2d:85:e9:a3:37:bb:13:
28:f7:52:98:24:2e:1a:d1:2d:8c:c2:b3:7b:0d:fc:
a2:02:d3:89:26:32:bf:56:8a:f4:4f:f3:50:4a:d5:
5e:52:43:36:bf:43:7e:1d:ed:66:95:05:e9:3c:a5:
96:75:7b:c9:a1:2f:d4:41:4a:8d:21:6d:11:77:8f:
e2:b4:83:9c:5e:3d:90:89:21:39:22:af:e4:e4:66:
a6:2e:dd:19:52:5f:16:24:02:ee:1f:13:39:49:6e:
47:3c:84:47:b9:42:df:17:6a:cf:a9:34:15:a0:7f:
e4:86:6b:2e:92:b4:ed:ec:ac:50:df:39:22:4e:91:
4b:62:68:92:ef:68:34:7a:94:49:d3:f3:2b:ca:30:
4d:7a:90:ed:d8:54:29:7b:46:48:db:ea:6d:61:28:
71:b5:47:dd:9b:15:94:dc:b4:15:3f:a4:d4:4b:e0:
91:72:b1:64:60:b9:35:49:ec:da:b6:9e:22:00:67:
0b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1A:92:5C:E0:F3:75:7C:A0:CA:E3:25:65:FD:12:AB:76:CF:60:AA
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/cxqSXODzdXygyuMlZf0Sq3bPYKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.3.0/24
45.128.130.0/23
46.149.174.0/24
62.204.32.0/24
83.171.212.0/22
185.253.2.0/24
188.64.140.0/24
212.60.6.0/24
212.107.24.0/24
Signature Algorithm: sha256WithRSAEncryption
10:00:34:20:e7:5b:57:77:35:b5:b8:d8:0d:9d:2e:6f:7f:bb:
24:47:dc:1d:3a:c7:94:de:27:a0:9c:c2:c5:9f:8e:18:c8:c8:
9f:e9:73:fe:21:fc:1a:4c:17:b0:43:ee:d0:20:db:b7:ba:32:
d4:66:21:31:ea:32:27:45:a6:15:1e:a1:19:19:31:94:cd:5d:
20:40:72:ae:14:ae:65:2b:d4:04:71:6d:31:5d:77:a1:eb:5a:
03:40:b7:bb:42:01:35:cd:11:e5:20:8a:59:b4:f1:4d:7a:b3:
98:66:24:48:22:23:97:d4:44:b8:df:4a:b4:40:81:c4:b4:b5:
41:82:53:af:20:8a:e4:2b:6c:b7:fd:ac:13:93:df:34:ed:85:
07:75:36:8b:2c:bf:44:e6:90:5b:31:06:01:18:de:d6:c3:82:
cb:4f:e6:6d:69:70:ee:24:18:c2:69:59:ec:7b:b5:78:f1:02:
2e:dc:c4:90:aa:dd:ca:e7:c0:26:7e:f5:24:a9:f9:02:68:e3:
e6:4d:86:8d:16:0d:43:13:9f:fc:ba:71:40:ff:a6:16:4b:49:
f4:ea:2c:ed:5a:c9:e0:aa:3b:96:81:e2:e3:d2:33:de:a9:20:
d3:68:7d:03:43:7c:78:08:c9:76:e6:c6:85:ac:75:b2:22:b3:
a7:c5:e0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 16:48:51 2024 by rpki-client on console-ams.rpki-client.org