Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/xFEJrrT7-qsjS6bGOciJztxbubA.roa
File: xFEJrrT7-qsjS6bGOciJztxbubA.roa (raw, json)
Hash identifier: PK/lv51YLmGmqW24FZi9BY9+UVQUrJbOw4I4b8sinCo=
Subject key identifier: C4:51:09:AE:B4:FB:FA:AB:23:4B:A6:C6:39:C8:89:CE:DC:5B:B9:B0
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 018CC7948B028184FD5CBF1B667CDB913097
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/xFEJrrT7-qsjS6bGOciJztxbubA.roa
Signing time: Tue 02 Jan 2024 00:30:50 +0000
ROA not before: Tue 02 Jan 2024 00:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 91.212.20.0/24 maxlen: 24
91.212.27.0/24 maxlen: 24
193.39.246.0/24 maxlen: 24
45.13.108.0/22 maxlen: 24
195.80.230.0/23 maxlen: 24
45.133.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 05:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:8b:02:81:84:fd:5c:bf:1b:66:7c:db:91:30:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 2 00:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c45109aeb4fbfaab234ba6c639c889cedc5bb9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:75:27:f5:1d:7c:e8:bf:4b:82:a5:a1:ca:3d:
c8:65:cc:63:54:63:04:8a:62:2b:92:91:a4:66:e9:
1e:d2:c3:a1:23:f4:f6:bb:db:52:c8:37:85:d7:8f:
2c:b1:bc:64:20:8f:19:21:12:e8:a6:5f:b7:bc:0a:
48:4f:ce:46:fe:c4:c0:b2:5b:ab:e0:ef:f6:6f:b6:
a4:a8:bd:47:12:1e:f7:01:e4:22:78:fc:3c:b7:17:
6a:a6:3e:c7:98:68:d0:23:08:61:af:28:92:e9:ea:
b9:0b:20:31:66:7f:a3:46:ad:66:a1:a7:7c:d9:3a:
d9:b4:47:fd:14:ff:52:fc:04:ac:f8:94:51:d8:5e:
d5:aa:0e:ec:54:4a:75:19:d6:00:46:42:61:f3:be:
2a:c1:eb:f0:b3:e8:d8:a4:c1:87:31:f9:db:49:d2:
bd:7c:02:3c:88:8b:86:e3:57:af:02:23:47:9c:32:
3f:28:49:cf:b2:f6:48:bd:34:93:47:c8:28:53:80:
77:b0:a2:38:7b:98:32:00:9d:ea:84:75:4a:3d:f7:
ab:6f:23:6e:89:de:29:2d:fe:db:b0:ad:3d:cf:92:
9d:3b:da:c2:da:ef:e7:9d:a2:4e:05:b3:56:dc:ff:
d2:8e:97:53:91:11:bd:5d:91:be:b9:0c:5b:d7:b2:
0e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:51:09:AE:B4:FB:FA:AB:23:4B:A6:C6:39:C8:89:CE:DC:5B:B9:B0
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/xFEJrrT7-qsjS6bGOciJztxbubA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.108.0/22
45.133.140.0/22
91.212.20.0/24
91.212.27.0/24
193.39.246.0/24
195.80.230.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:00:4d:1e:f6:de:83:4f:95:00:7e:b3:11:19:c3:41:7f:17:
d2:11:4e:bb:cf:10:74:8c:ef:b6:1e:9a:7f:69:83:92:0e:ef:
92:80:b4:6f:d0:92:27:30:3a:51:8a:e1:9f:90:e1:aa:51:fc:
f1:58:ae:1d:37:fe:e5:9d:20:bf:97:0a:2f:c2:6c:9d:e2:0b:
e0:6a:8f:79:48:bb:e0:cb:a9:84:f2:07:0c:49:1d:f2:8e:5d:
00:3b:0e:43:f4:f8:e9:96:97:d9:28:8f:17:9e:2b:7e:7a:6b:
f3:0a:35:29:d8:5c:14:21:0c:a6:d2:ea:77:32:21:0d:a2:57:
30:55:93:c5:9b:fc:1c:aa:96:61:86:de:f9:a1:f1:17:e0:92:
4a:77:aa:67:1a:df:41:c5:f1:34:93:be:96:11:2c:9b:63:52:
32:f0:4e:10:45:c6:1f:a6:9f:72:a9:b4:4b:f3:3d:61:61:35:
4a:8c:56:d8:a1:95:49:d1:3c:79:75:54:68:02:e3:39:4e:75:
e1:f8:77:83:96:e3:22:ad:51:fb:0a:7a:15:ef:b2:d7:11:da:
67:ca:89:d8:ff:82:84:bc:5f:da:3c:f2:e8:6c:c4:2b:11:2a:
3c:4c:63:50:53:24:54:7e:50:68:30:49:ad:1c:55:e5:52:a9:
e6:14:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 06:01:30 2024 by rpki-client on console-fra.rpki-client.org