Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/Ehr9pF5IS9EsP9t87WZT9hX8aPI.roa
File: Ehr9pF5IS9EsP9t87WZT9hX8aPI.roa (raw, json)
Hash identifier: gfAUEj/H30w6HCoXcyx+vGl11Kl2XYQEDripWguF2Nw=
Subject key identifier: 12:1A:FD:A4:5E:48:4B:D1:2C:3F:DB:7C:ED:66:53:F6:15:FC:68:F2
Certificate issuer: /CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
Certificate serial: 018E14599F1A4EF22CD551DC85447CB2F3A0
Authority key identifier: 5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/Ehr9pF5IS9EsP9t87WZT9hX8aPI.roa
Signing time: Wed 06 Mar 2024 15:20:01 +0000
ROA not before: Wed 06 Mar 2024 15:20:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208659
IP address blocks: 45.81.92.0/24 maxlen: 24
45.81.93.0/24 maxlen: 24
45.81.94.0/24 maxlen: 24
45.81.95.0/24 maxlen: 24
2a0e:5480::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 06 Mar 2024 20:42:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:59:9f:1a:4e:f2:2c:d5:51:dc:85:44:7c:b2:f3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
Validity
Not Before: Mar 6 15:20:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=121afda45e484bd12c3fdb7ced6653f615fc68f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:50:ee:c7:7b:8b:9f:f9:54:1e:f2:e7:5e:
aa:26:75:5e:e7:d0:54:dd:c0:f4:36:a7:ee:68:f8:
7b:fa:f4:e3:7e:c0:ae:05:6b:63:0a:bd:ed:c4:4b:
de:f6:b6:4e:a2:bb:54:a8:f4:35:e6:3b:f9:a7:dd:
2e:b1:d1:68:67:0b:6c:9d:dc:4d:78:ff:74:ef:9e:
57:9e:23:0b:15:da:8f:89:da:e3:27:9f:7e:78:16:
54:29:10:2e:fa:7f:df:d2:37:ac:a1:9e:60:54:ec:
4d:62:92:62:f5:91:a2:e3:ed:f7:9d:19:9a:fe:12:
bb:6b:d4:b5:70:29:37:4b:93:75:fb:e3:a3:ed:86:
04:3e:0d:d8:eb:96:f5:4e:91:6d:48:93:35:c4:5e:
81:09:cb:e8:37:18:d1:c4:3b:79:a6:64:a7:16:f8:
cb:e4:d3:d4:93:4d:85:37:55:cf:e8:ed:16:6c:de:
8f:05:1f:36:60:d6:a0:88:3c:99:4e:be:53:b9:07:
f1:07:29:65:4d:98:07:3f:7c:bc:61:f3:cb:28:bc:
a5:23:91:a0:5c:e3:3f:09:34:3e:09:ac:a7:76:28:
cc:ca:6f:c6:71:94:06:01:63:dc:2b:36:33:62:73:
f6:70:d8:9c:66:c2:ec:79:49:bd:6f:ff:cc:9e:c2:
45:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1A:FD:A4:5E:48:4B:D1:2C:3F:DB:7C:ED:66:53:F6:15:FC:68:F2
X509v3 Authority Key Identifier:
keyid:5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/Ehr9pF5IS9EsP9t87WZT9hX8aPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.92.0/22
IPv6:
2a0e:5480::/29
Signature Algorithm: sha256WithRSAEncryption
de:e8:37:73:c3:67:5f:42:43:1e:de:de:8d:8c:17:99:e2:c8:
58:19:fa:dd:cf:ae:d4:cf:a7:ec:01:5f:de:89:dd:20:42:a7:
3c:a3:92:b8:2c:56:62:95:ca:9b:c5:7b:4e:ed:f7:28:85:e8:
56:07:57:22:00:41:e8:19:6d:1e:62:00:73:ab:5e:a7:29:34:
24:d1:86:cc:33:a6:4d:37:7d:0f:f5:8e:d5:d2:1f:ab:bb:47:
43:96:6c:8f:76:f3:3c:9f:53:ae:10:c6:4a:49:43:51:40:7d:
bf:52:d2:1b:0e:9f:50:3d:c1:ae:34:46:34:a3:5c:45:44:b1:
d6:33:59:5b:06:2e:67:0c:fc:79:98:b0:1a:a8:31:2b:36:6e:
5d:c0:63:dd:60:77:92:53:ef:52:19:1b:ec:d8:75:e8:bf:a3:
4e:3c:6f:30:d1:3a:52:78:d2:2e:e1:fa:7c:31:09:67:4d:e3:
e2:6a:1f:82:20:2e:7a:78:c2:e5:46:cd:04:97:e7:5c:f9:75:
5e:01:b2:01:9d:10:51:51:09:1a:8f:14:dd:18:3d:d6:8f:4e:
26:00:bd:9b:2a:33:61:7c:6c:ee:48:10:9a:1b:80:28:9f:8a:
9b:f6:02:49:55:fa:fa:2e:4a:3e:f5:54:b9:c2:a4:11:b4:24:
d5:cc:92:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:40 2024 by rpki-client on console-ams.rpki-client.org