Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/cKcUyZKsjv867FeXSxvGd0cY24E.roa
File: cKcUyZKsjv867FeXSxvGd0cY24E.roa (raw, json)
Hash identifier: u6WqiDVY0UbkcQXAaoZ7Sx8Hq6f77TbCXZZbwMpYNXU=
Subject key identifier: 70:A7:14:C9:92:AC:8E:FF:3A:EC:57:97:4B:1B:C6:77:47:18:DB:81
Certificate issuer: /CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Certificate serial: 01856F30176677FAD52BA657AA76134FE5EF
Authority key identifier: 8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/cKcUyZKsjv867FeXSxvGd0cY24E.roa
Signing time: Sun 01 Jan 2023 21:15:00 +0000
ROA not before: Sun 01 Jan 2023 21:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206975
IP address blocks: 45.155.82.0/24 maxlen: 24
45.155.81.0/24 maxlen: 24
45.155.80.0/22 maxlen: 22
45.155.80.0/24 maxlen: 24
45.155.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:17:66:77:fa:d5:2b:a6:57:aa:76:13:4f:e5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Validity
Not Before: Jan 1 21:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70a714c992ac8eff3aec57974b1bc6774718db81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:04:f5:86:00:ce:94:21:64:2d:bb:d3:58:
f2:55:d7:bf:4a:76:f3:f8:c2:54:b3:f4:00:89:57:
ec:28:03:ba:8c:63:57:da:dd:bb:0e:46:4c:1f:b7:
55:66:a7:53:eb:59:68:0d:a7:12:1a:75:f4:ff:37:
97:c6:86:78:7e:30:44:2d:77:8b:7b:13:c1:ab:4a:
c7:ee:a1:bb:b7:32:3c:36:f0:43:91:6c:f3:02:cf:
cb:7b:3a:ca:2d:73:ce:85:45:ab:f6:19:9d:b6:b7:
7a:25:fb:70:a5:a7:a6:ca:c2:ff:44:9e:89:9b:b7:
c0:d3:e9:45:b7:c8:af:28:c0:a3:07:94:bd:ea:73:
50:5d:05:da:89:ad:63:fc:51:93:96:cd:f6:9c:c3:
df:bb:2d:d4:4d:f0:32:b6:7a:f6:7e:89:2c:21:e9:
31:69:e1:00:0c:56:2d:75:45:a4:06:99:5c:4b:30:
f9:d0:99:ac:de:83:18:1b:0b:39:bb:a9:47:c3:a8:
f6:07:31:c9:19:eb:b1:35:d5:97:d2:6a:cb:1b:5d:
fd:85:8f:9c:17:12:4b:4b:57:93:3d:8b:14:e7:73:
81:2c:ad:28:79:ea:b1:f2:15:9d:56:32:89:b8:c3:
0e:ce:ae:8a:f5:ce:65:a1:cf:97:8c:b5:63:2f:f7:
4b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A7:14:C9:92:AC:8E:FF:3A:EC:57:97:4B:1B:C6:77:47:18:DB:81
X509v3 Authority Key Identifier:
keyid:8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/cKcUyZKsjv867FeXSxvGd0cY24E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.80.0/22
Signature Algorithm: sha256WithRSAEncryption
38:a8:d8:95:3c:78:ce:3a:47:d0:cd:54:16:3e:a1:d4:7d:4f:
c8:11:8e:e5:57:9c:51:cd:33:3f:47:4e:90:00:f7:2e:7c:67:
60:44:73:20:7c:0d:44:5a:d6:97:f4:be:79:c1:1a:e8:8e:cd:
b0:89:f5:79:6e:7a:ef:f4:16:8f:24:ac:79:a9:3c:99:f1:1b:
fd:d5:e8:6f:96:15:35:eb:3b:06:97:f4:21:e6:0e:da:3a:d2:
5c:63:a3:3d:fd:08:5c:d3:5d:9f:93:11:e6:6b:ab:fc:87:a6:
41:82:94:bd:9e:70:88:e1:f7:60:9a:05:24:65:fe:cc:42:6f:
a2:92:a3:5c:37:6f:a8:26:96:ac:45:9f:5d:f4:ae:74:8e:27:
19:88:c1:dd:b4:40:a3:03:27:b8:24:b0:1b:eb:1d:45:94:e6:
52:a0:6c:f9:18:8d:ab:da:9a:91:56:03:dc:0e:94:dc:71:69:
13:17:37:8e:60:e7:a5:ff:41:43:8f:80:ba:5e:a3:e1:b4:47:
65:81:01:c6:a6:1b:0c:9f:15:f3:bd:3d:c2:4c:81:7e:96:a6:
c4:f6:75:dd:3c:cf:06:e2:5b:af:b9:e4:72:98:1c:85:75:7b:
f8:7e:cf:c5:eb:0e:01:35:91:9c:ea:be:f8:4e:ff:02:e8:d7:
4b:35:7d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:29 2024 by rpki-client on console-fra.rpki-client.org