Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/aL1hB3Rvwj_KGQzQ7Zp3qQJZcLQ.roa
File: aL1hB3Rvwj_KGQzQ7Zp3qQJZcLQ.roa (raw, json)
Hash identifier: Jz4TCgJKQZxXLNUOO8cVGQvw0gOPg9IpscxhmXlCLME=
Subject key identifier: 68:BD:61:07:74:6F:C2:3F:CA:19:0C:D0:ED:9A:77:A9:02:59:70:B4
Certificate issuer: /CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Certificate serial: 018D5EC90E1DFA50819B423C93AE2D41322D
Authority key identifier: 56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/aL1hB3Rvwj_KGQzQ7Zp3qQJZcLQ.roa
Signing time: Wed 31 Jan 2024 09:10:51 +0000
ROA not before: Wed 31 Jan 2024 09:10:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29014
IP address blocks: 45.83.108.0/22 maxlen: 22
212.108.160.0/20 maxlen: 20
212.108.176.0/21 maxlen: 21
2a02:358::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 15 Oct 2024 13:38:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:c9:0e:1d:fa:50:81:9b:42:3c:93:ae:2d:41:32:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Validity
Not Before: Jan 31 09:10:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68bd6107746fc23fca190cd0ed9a77a9025970b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:48:73:f2:ff:fc:52:f3:29:df:9e:75:5a:
72:aa:21:f5:ec:2d:76:47:e2:56:94:4e:28:61:3b:
49:23:43:ff:76:6c:a6:4f:40:7d:d1:1d:f5:22:a1:
1c:77:1d:9b:ae:40:90:4f:83:51:4c:8d:c5:65:4a:
61:d6:d4:80:85:d2:d9:10:5a:fc:ec:c4:b2:cc:1b:
0c:a2:b5:91:b9:89:74:e1:31:0f:25:8e:30:c1:c7:
53:21:5e:71:2a:7a:47:46:8a:be:cd:bd:58:2f:15:
af:56:72:f1:3c:80:76:8b:79:e0:ed:d3:47:85:e7:
50:41:a5:48:77:1f:ae:81:07:17:6f:34:8c:1d:89:
1e:ce:cc:38:c4:1d:aa:5b:92:aa:2d:95:b1:82:18:
47:c3:cd:b6:1b:ad:f5:32:43:b1:46:66:2f:da:79:
ce:00:45:53:75:77:c0:e4:1c:60:c5:f7:99:8f:60:
b4:a7:bf:33:cc:17:bb:7c:9a:b9:9b:6c:f9:a5:02:
92:87:1f:8b:2b:12:11:cc:b2:c4:b1:49:c8:84:fa:
1d:0c:cd:25:4c:c3:10:8d:65:1f:27:32:e6:ce:0c:
e5:e3:dc:f2:64:da:ee:95:aa:57:45:18:ba:e3:84:
b7:a9:82:a6:9b:96:c3:95:fd:ac:6f:a8:9a:56:8b:
1b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BD:61:07:74:6F:C2:3F:CA:19:0C:D0:ED:9A:77:A9:02:59:70:B4
X509v3 Authority Key Identifier:
keyid:56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/aL1hB3Rvwj_KGQzQ7Zp3qQJZcLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.108.0/22
212.108.160.0-212.108.183.255
IPv6:
2a02:358::/32
Signature Algorithm: sha256WithRSAEncryption
2c:d5:f3:21:e7:81:24:1b:7e:06:cf:c9:51:2d:70:fd:2e:a0:
67:c0:e7:94:f4:cb:be:f1:42:b7:d3:41:d6:21:e9:73:80:65:
4b:49:a8:bc:41:87:d7:2c:be:a7:e8:ab:b6:29:69:c3:a6:01:
49:b5:64:c8:20:6e:55:9c:a2:72:d4:37:13:22:56:08:42:ea:
13:39:3b:77:d1:46:91:4f:e0:3f:59:66:fd:74:d4:ae:df:71:
26:5a:ff:9a:66:17:02:83:0b:38:92:1c:4b:6d:21:39:1d:a3:
d6:55:94:10:ba:6b:a2:8d:e1:6b:81:d2:d3:15:c1:ef:c0:72:
8e:63:e1:99:8a:84:8a:9d:c7:15:ed:bb:3c:85:8b:2f:98:8d:
6b:ce:8c:b8:0e:79:cd:0b:46:85:3c:a6:ab:20:96:53:0f:63:
90:75:36:62:b4:b0:be:a0:79:84:ee:6b:49:ae:a2:23:07:3c:
b1:db:c7:a3:c4:43:8f:93:71:ef:32:f3:52:d1:85:19:23:93:
d1:5c:14:8c:43:bd:87:e6:7b:36:27:9a:62:26:40:a3:f7:a5:
23:2b:14:e3:1a:25:c8:f7:ca:eb:f5:a9:f9:46:fa:b2:9e:ae:
bf:63:66:22:2a:1b:56:03:75:56:a9:2e:40:62:fb:e6:12:48:
95:86:e5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:52 2025 by rpki-client