Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/X8-c_Sv1kGmTjv0Y3TiKmAKKIWM.roa
File: X8-c_Sv1kGmTjv0Y3TiKmAKKIWM.roa (raw, json)
Hash identifier: DH+lBOWMXgCL66wzTNl1RUQbQ6kK/EqtPlsCiJvwIYM=
Subject key identifier: 5F:CF:9C:FD:2B:F5:90:69:93:8E:FD:18:DD:38:8A:98:02:8A:21:63
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018D13D7F64F02855F435E3DEA27F7495ABD
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/X8-c_Sv1kGmTjv0Y3TiKmAKKIWM.roa
Signing time: Tue 16 Jan 2024 19:55:36 +0000
ROA not before: Tue 16 Jan 2024 19:55:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 45.144.38.0/24 maxlen: 24
185.21.140.0/24 maxlen: 24
194.61.234.0/24 maxlen: 24
194.61.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 20:22:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:f6:4f:02:85:5f:43:5e:3d:ea:27:f7:49:5a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 16 19:55:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fcf9cfd2bf59069938efd18dd388a98028a2163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:be:b9:3a:05:72:52:09:3d:b7:5b:4b:df:
8e:fd:fb:47:58:cb:53:23:02:23:46:89:35:3d:ad:
6e:12:3d:2c:6a:4b:8c:d5:7a:3f:14:9b:b8:01:fe:
5f:e9:3e:66:5f:b0:94:32:6c:82:42:36:05:5c:e4:
7d:02:a5:05:6d:4c:92:a2:73:30:80:dd:39:c7:f3:
50:6d:9f:96:8d:6f:6e:a4:5c:96:90:32:05:65:71:
1f:28:ce:5d:14:e7:cd:0c:88:86:a9:92:78:74:fd:
4f:cc:31:ce:23:9a:33:00:95:f4:2d:e7:76:5f:1c:
4f:5a:2b:cf:73:a9:f5:81:06:d5:4a:bc:a0:b8:a1:
27:e6:e2:c7:5c:64:f7:49:23:4e:d7:d3:ee:f8:b3:
b6:f8:8d:71:4e:72:14:c4:1d:ac:12:5a:1c:2e:d0:
82:4f:37:59:e1:3d:f2:fe:df:1c:9f:d6:7e:15:ad:
e1:6a:92:9d:91:02:da:1d:01:7a:5c:f8:a9:1a:65:
7d:d4:0d:92:a5:b8:b4:35:ee:5f:75:61:72:6a:85:
30:d1:2e:13:b5:ff:10:41:f0:55:96:7b:be:a4:e6:
ec:3d:c7:87:e3:d1:93:9d:d1:cf:a5:ab:a5:ae:90:
69:d4:d3:9a:ae:50:eb:30:8c:c1:a4:1b:02:36:d6:
26:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CF:9C:FD:2B:F5:90:69:93:8E:FD:18:DD:38:8A:98:02:8A:21:63
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/X8-c_Sv1kGmTjv0Y3TiKmAKKIWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.38.0/24
185.21.140.0/24
194.61.234.0/23
Signature Algorithm: sha256WithRSAEncryption
91:9a:47:35:5f:9c:58:b2:34:d5:a8:7f:ff:6c:93:3f:a6:1d:
fd:90:d1:36:6e:bc:89:72:8b:88:33:e9:d5:32:49:b2:17:90:
06:5a:5e:42:18:9c:41:da:52:3c:d5:d3:21:f8:53:40:a0:ae:
c1:06:00:a4:b5:a2:98:1f:4a:80:cd:3a:c4:a7:62:36:2b:ca:
41:24:cd:52:ac:b4:de:12:c8:fb:a5:f2:31:55:4a:9a:2e:e1:
a2:ad:e6:ec:35:b6:4d:fb:bc:7c:51:e3:52:56:6a:56:45:d1:
06:02:f5:11:da:d8:db:5b:4c:32:06:4a:e9:ae:a5:54:d0:f4:
f5:77:75:ce:64:88:9e:c8:de:d2:4f:cd:8d:18:e9:be:95:da:
32:54:0c:7e:36:ca:9b:82:6f:2b:f6:94:b9:81:b6:dc:bb:e3:
ee:64:8f:47:a7:96:b5:ec:f4:cb:af:e0:3d:f1:1d:d5:02:aa:
35:e9:27:53:99:d3:aa:69:08:ab:3e:04:c8:a4:81:58:73:e1:
cd:3a:95:5c:25:ba:22:4d:a9:11:b4:9e:b5:41:00:36:a4:54:
04:0a:e7:b2:62:27:bd:ca:a7:92:3e:7a:ba:5f:6c:05:10:37:
95:9e:9c:ca:15:70:04:5f:88:92:94:29:96:2f:9a:5b:01:17:
14:3e:06:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org