Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/iP-ju-AR45PaasT6gTIJKprJBNE.roa
File: iP-ju-AR45PaasT6gTIJKprJBNE.roa (raw, json)
Hash identifier: nfYKbUDtANyjdxjCEV1elNBk7HSTrcCuTlCvzMXHEgw=
Subject key identifier: 88:FF:A3:BB:E0:11:E3:93:DA:6A:C4:FA:81:32:09:2A:9A:C9:04:D1
Certificate issuer: /CN=78356c6a831680e9b8b7c95514953007a9407e87
Certificate serial: 018573038F2EF110B33D6DC3C399A1878420
Authority key identifier: 78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/iP-ju-AR45PaasT6gTIJKprJBNE.roa
Signing time: Mon 02 Jan 2023 15:04:51 +0000
ROA not before: Mon 02 Jan 2023 15:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48596
IP address blocks: 185.181.104.0/22 maxlen: 24
45.87.156.0/22 maxlen: 24
2a0a:c980::/29 maxlen: 48
2a02:d500::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:8f:2e:f1:10:b3:3d:6d:c3:c3:99:a1:87:84:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78356c6a831680e9b8b7c95514953007a9407e87
Validity
Not Before: Jan 2 15:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88ffa3bbe011e393da6ac4fa8132092a9ac904d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cd:51:89:c0:b9:40:28:7c:02:1f:4e:63:62:
5a:56:c8:83:8b:42:e0:f0:40:53:88:fb:df:ed:a5:
42:a0:c2:ad:1d:fd:1c:61:de:cd:76:b8:97:66:22:
85:c9:3d:91:a8:0c:75:c8:f3:4d:11:3b:6f:0b:73:
f8:35:76:b4:2e:06:85:14:f3:a4:7a:2b:ab:d4:40:
2d:21:54:b1:7c:1b:1e:52:d0:6f:e9:27:da:0c:ec:
e6:3b:e9:2f:6f:23:55:2e:09:7c:e9:6d:a7:ee:4e:
22:66:ec:5a:13:45:37:97:9b:80:5e:91:ba:09:ee:
e6:00:85:a3:9d:fd:09:ba:cc:61:8a:85:92:0c:df:
06:c7:cf:4d:10:3b:d3:e2:fb:d1:56:d5:e5:80:c1:
2c:4f:fc:c0:bf:be:45:ba:e4:11:d6:6c:53:ba:5a:
2a:ad:b3:49:1a:d9:8d:19:c5:4d:e1:e0:5a:e7:db:
04:d3:7c:1e:1e:38:ad:d0:11:c7:85:a6:5b:c1:89:
2f:2d:dd:d5:fd:72:99:71:84:33:23:5d:7b:9c:f0:
4c:93:dd:cf:04:be:bc:ab:b1:b8:00:5a:ae:8f:f0:
5a:89:1c:19:43:22:57:0e:6d:95:6d:9a:d6:8a:7d:
5c:c1:24:3f:b2:33:47:f4:f8:81:14:2a:ca:18:62:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FF:A3:BB:E0:11:E3:93:DA:6A:C4:FA:81:32:09:2A:9A:C9:04:D1
X509v3 Authority Key Identifier:
keyid:78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/iP-ju-AR45PaasT6gTIJKprJBNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.156.0/22
185.181.104.0/22
IPv6:
2a02:d500::/29
2a0a:c980::/29
Signature Algorithm: sha256WithRSAEncryption
95:c6:8a:ad:c5:4d:29:5e:68:38:8b:bc:27:19:54:4b:0a:62:
9a:90:59:d2:e5:7c:6d:22:f7:22:d0:73:92:7f:63:e5:e6:5e:
7e:cb:22:ce:ca:08:c4:f5:2e:d8:7a:cc:7c:cb:38:90:88:59:
5e:a4:45:c8:70:64:64:aa:49:07:60:aa:23:90:fc:8d:7c:a1:
d6:ec:5c:d3:de:a6:32:f8:29:11:0c:1f:e7:35:57:f8:3e:ae:
ca:bc:d9:ae:95:9b:61:e6:0e:04:1a:1a:81:9c:d9:82:eb:52:
be:2f:d1:de:a4:98:87:20:2b:99:8c:3c:42:62:aa:d9:51:a6:
44:a2:78:17:f6:1c:84:93:b7:61:8e:c1:6f:35:3b:be:1e:74:
28:8b:fd:3d:41:62:2a:d8:a0:a8:a8:c9:05:a1:8e:c6:b9:d0:
95:9f:fb:98:9c:e7:46:db:0c:a2:80:a4:3e:a9:dd:1d:c4:40:
c5:ca:4d:3e:42:14:23:19:bc:5d:7d:24:7a:c8:2a:e5:a9:39:
87:3e:29:8c:ce:df:8b:fc:83:fc:7a:b0:f9:23:d8:91:15:2c:
fa:fb:78:2d:3f:d9:53:eb:12:01:84:eb:9e:b1:79:5f:18:78:
96:ee:85:30:42:b2:8a:0a:a5:a5:10:cc:dc:cb:fe:b9:1b:11:
12:da:17:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:15 2024 by rpki-client on console-ams.rpki-client.org