Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/2vT51oBlozs-Wteb7C7PwZxRodw.roa
File: 2vT51oBlozs-Wteb7C7PwZxRodw.roa (raw, json)
Hash identifier: zWftNb9f9pnf1nWvm6S0rBuAj4dsdfOdqkqWGDS0QAs=
Subject key identifier: DA:F4:F9:D6:80:65:A3:3B:3E:5A:D7:9B:EC:2E:CF:C1:9C:51:A1:DC
Certificate issuer: /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial: 018DE71CEA29035CC59CB91C6859A41BD20A
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/2vT51oBlozs-Wteb7C7PwZxRodw.roa
Signing time: Mon 26 Feb 2024 20:30:48 +0000
ROA not before: Mon 26 Feb 2024 20:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209835
IP address blocks: 45.149.182.0/23 maxlen: 24
151.248.20.0/23 maxlen: 24
185.185.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 19:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e7:1c:ea:29:03:5c:c5:9c:b9:1c:68:59:a4:1b:d2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Validity
Not Before: Feb 26 20:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=daf4f9d68065a33b3e5ad79bec2ecfc19c51a1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:da:80:13:da:1c:9b:53:89:d7:87:9c:a5:
5e:0b:81:79:f2:2e:6c:cb:3c:1f:29:f2:52:62:0d:
58:e5:18:75:ab:76:bd:92:28:fe:89:23:27:c1:b7:
4c:e6:43:29:45:f8:37:d3:11:ff:4b:01:2d:94:7e:
f5:4a:d3:b6:5b:50:85:48:83:97:c7:72:21:c4:0b:
a1:83:1d:9e:8e:72:51:de:df:91:c6:3c:d6:0a:10:
a3:a0:4c:91:d1:d0:f7:06:9a:6b:b8:37:ec:fc:43:
d9:df:dc:a0:00:40:f3:77:ea:20:17:ec:ef:c3:57:
56:fc:21:d6:15:ff:87:b3:fa:d7:7a:24:a7:04:fb:
24:8d:db:c9:51:ee:d7:96:b4:de:50:0f:23:26:55:
f8:2a:72:05:65:71:32:88:56:b6:98:e3:56:f1:1d:
1c:4e:e5:8e:f3:9b:0d:10:61:6d:52:e4:41:ae:4f:
ef:ae:13:6a:c2:99:63:80:9e:e3:d7:22:c6:10:61:
1a:28:67:d0:92:fa:5f:9b:74:2a:66:f7:32:3d:72:
ac:45:90:88:8d:69:b9:0b:dc:07:63:a5:34:81:2d:
1b:c9:7e:8e:73:5f:4c:6d:7f:4a:ea:db:5b:25:41:
12:22:42:69:45:da:9d:cf:fd:7a:d7:5f:d6:ee:dc:
94:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F4:F9:D6:80:65:A3:3B:3E:5A:D7:9B:EC:2E:CF:C1:9C:51:A1:DC
X509v3 Authority Key Identifier:
keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/2vT51oBlozs-Wteb7C7PwZxRodw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.182.0/23
151.248.20.0/23
185.185.92.0/22
Signature Algorithm: sha256WithRSAEncryption
23:3c:8d:d8:54:58:fd:58:a6:0e:7f:50:96:85:51:34:7d:34:
bc:56:1a:65:99:2d:d1:7c:f3:13:3f:11:72:45:c0:17:97:4e:
00:db:19:5d:f2:10:82:5e:4b:94:f4:e7:7e:80:c6:2c:d2:54:
52:58:57:49:8e:67:6d:ec:1b:24:a8:5e:6e:37:eb:6f:bb:b5:
b1:aa:57:e7:44:7a:cc:e5:0e:c6:75:e2:1c:52:6d:a2:ca:24:
c4:a4:25:a0:d6:f6:3a:58:c0:21:e9:50:5f:42:88:23:6a:c4:
2d:8f:a9:4f:ad:b3:c0:ad:25:da:73:01:a6:90:db:06:bf:c9:
f7:e3:59:4b:bc:f3:0a:4f:df:c5:06:94:cb:e2:75:a2:b7:d3:
63:1c:28:ea:64:fc:ba:57:99:a8:ab:05:a0:59:25:e5:8d:e6:
b1:1d:19:70:82:df:19:12:e1:2a:aa:50:f7:39:15:84:ca:9a:
47:8f:1b:00:f9:18:62:81:9e:55:c1:ee:17:6e:5a:93:aa:3e:
eb:d3:88:f2:9d:04:16:2a:6c:e1:2e:77:0b:ac:22:88:05:c5:
6c:e9:08:af:90:df:c5:c5:c8:5c:c2:9a:a6:d3:4d:84:c2:a9:
7c:dd:0f:26:ea:e8:2b:84:24:9d:a7:19:0a:f2:3d:ce:ca:48:
6c:8b:4e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:03 2024 by rpki-client on console-fra.rpki-client.org