Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/sHeRut9R2lRZn1vj2Xt3l8BM4WE.roa
File: sHeRut9R2lRZn1vj2Xt3l8BM4WE.roa (raw, json)
Hash identifier: ImSGJLAifAtuwKFSNxgorgYl8mfJJSpTV09f8uE/4l4=
Subject key identifier: B0:77:91:BA:DF:51:DA:54:59:9F:5B:E3:D9:7B:77:97:C0:4C:E1:61
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 018B62E7BD4C0D87C5CACDB2FAC4C271F122
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/sHeRut9R2lRZn1vj2Xt3l8BM4WE.roa
Signing time: Tue 24 Oct 2023 18:17:16 +0000
ROA not before: Tue 24 Oct 2023 18:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210636
IP address blocks: 45.88.184.0/24 maxlen: 24
45.88.185.0/24 maxlen: 24
45.91.117.0/24 maxlen: 24
45.93.150.0/24 maxlen: 24
45.93.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:62:e7:bd:4c:0d:87:c5:ca:cd:b2:fa:c4:c2:71:f1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Oct 24 18:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b07791badf51da54599f5be3d97b7797c04ce161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:cd:20:09:9b:9f:d5:b9:28:b9:90:90:35:
c4:9e:d7:0f:eb:ef:07:27:6e:b0:93:91:6e:bf:f0:
1f:5e:82:00:3d:e1:f7:e7:67:76:82:84:5c:f7:2c:
97:19:f4:a9:59:76:4c:30:39:36:82:68:38:8d:0e:
9f:95:0c:c1:d2:8f:c4:27:49:25:1e:56:da:bd:9b:
09:64:52:8b:9e:ec:16:14:2f:97:9d:b2:be:2b:df:
d5:62:04:4e:60:be:19:2c:2e:ea:68:fe:df:7b:b5:
74:b1:68:c8:06:c3:c7:d1:52:a8:f3:c3:43:0c:81:
b7:52:d5:56:73:51:83:80:9e:c0:97:a0:a1:72:0d:
50:4b:73:8c:ec:61:75:db:1a:e1:d2:48:36:02:09:
88:69:66:1c:56:9e:f5:41:0c:a1:2c:7d:92:49:50:
24:df:c7:4a:74:f5:60:ba:bd:89:fa:d0:e7:23:16:
ca:c3:21:5f:e6:05:d3:20:f0:a9:c1:2d:9c:75:eb:
82:b4:41:e9:81:6b:0f:d2:d5:0b:26:cc:b8:31:9c:
77:4a:db:c9:8b:cd:52:30:09:c4:f1:84:9c:24:3f:
d1:9a:e6:a3:8b:0b:22:45:11:e2:3b:8f:32:aa:ad:
3d:dd:c0:3c:0e:e1:49:61:48:c8:98:65:c8:d9:5c:
b4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:77:91:BA:DF:51:DA:54:59:9F:5B:E3:D9:7B:77:97:C0:4C:E1:61
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/sHeRut9R2lRZn1vj2Xt3l8BM4WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.184.0/23
45.91.117.0/24
45.93.150.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:de:96:e9:35:86:28:ee:05:a5:86:2d:18:77:13:dc:11:72:
07:47:95:0f:b6:7f:1b:1e:21:5f:a4:ec:5e:d8:0c:bf:73:ad:
b9:3c:fb:70:8b:ae:d9:3d:0d:8e:cc:fd:7c:d3:31:6e:95:38:
0e:91:41:8e:69:ac:b6:08:2c:44:86:76:78:de:82:5c:f9:90:
ce:ed:8d:ab:0c:af:5b:81:fa:61:8c:0e:e0:de:73:bb:68:c4:
e7:49:6d:b8:3e:11:c3:d7:18:dc:3a:95:63:80:1e:05:70:60:
45:7f:fe:df:e6:35:d4:44:68:a4:fb:6d:3d:e9:b4:ef:94:4f:
04:a1:89:fb:4b:e3:8e:0e:d0:4b:b0:0b:7e:74:5d:6c:7d:7b:
b6:78:9a:1e:5d:7a:c6:b5:34:ce:83:c6:58:c2:c5:4c:76:c6:
20:30:18:28:e1:1c:50:87:a2:51:30:3f:8a:21:2a:ff:de:fe:
ec:24:2d:55:1a:c5:85:81:a4:65:b5:60:2d:e9:97:7b:8e:20:
f9:0c:49:24:aa:71:c6:7c:b4:6b:f0:d1:70:50:ad:c0:d5:90:
2e:b6:c1:03:e4:83:7e:62:22:df:1d:55:1b:ff:be:6b:72:e3:
56:b8:87:83:d5:3a:2e:fe:fb:4c:67:e4:32:5e:34:ba:30:c8:
38:0b:5e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:58 2024 by rpki-client on console-ams.rpki-client.org