Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Y0OzJaF2AEdMXABY2qtl7u_Eacs.roa
File: Y0OzJaF2AEdMXABY2qtl7u_Eacs.roa (raw, json)
Hash identifier: wXt+lLsWma9E5honZ52kkmyMnvR86NtLegQxRGH5bBk=
Subject key identifier: 63:43:B3:25:A1:76:00:47:4C:5C:00:58:DA:AB:65:EE:EF:C4:69:CB
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018CE7FA48675B1436782C630314D8D585D8
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Y0OzJaF2AEdMXABY2qtl7u_Eacs.roa
Signing time: Mon 08 Jan 2024 07:29:48 +0000
ROA not before: Mon 08 Jan 2024 07:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 185.114.144.0/23 maxlen: 23
45.141.168.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 00:32:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e7:fa:48:67:5b:14:36:78:2c:63:03:14:d8:d5:85:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 8 07:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6343b325a17600474c5c0058daab65eeefc469cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:45:38:c2:06:b5:90:3c:0c:df:ff:2c:3a:
c5:48:2e:8f:49:05:43:5a:b0:13:bc:ff:97:d8:2b:
24:8b:72:da:9c:7d:ea:60:36:e9:31:f2:5a:9f:a7:
9d:59:ab:39:b7:0d:b8:50:ca:88:b7:e3:57:ea:60:
8a:35:c3:a6:fe:33:ae:6b:5e:fe:a2:4e:82:c5:dd:
34:27:33:9a:c4:a4:bc:a3:58:6e:81:54:47:58:72:
a7:12:c7:49:85:7b:9a:54:ed:9d:4a:27:4e:4c:f6:
79:bf:0e:b1:7c:5d:6c:f4:da:75:35:26:93:97:da:
45:1b:6d:26:9c:d1:1d:17:80:c4:c7:b8:65:92:6d:
7d:ac:04:63:ae:8d:f6:5c:5f:85:53:2f:cd:61:9c:
c5:b0:da:c8:81:16:73:ce:cd:a6:b4:61:4f:72:9c:
3f:18:b8:c7:a1:de:9e:22:27:43:d1:53:11:f9:e6:
e9:e8:6f:11:88:8f:62:9b:21:6a:53:c2:3e:c4:55:
12:7e:1b:0f:ee:4d:3d:e1:8b:0e:3d:01:be:41:45:
49:89:05:63:cb:e4:64:e2:33:1f:73:ba:55:27:7d:
86:80:df:77:a9:72:08:fa:9e:49:0f:04:9b:a6:4f:
14:42:6b:24:13:62:81:04:e8:17:5e:29:16:c1:30:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:43:B3:25:A1:76:00:47:4C:5C:00:58:DA:AB:65:EE:EF:C4:69:CB
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Y0OzJaF2AEdMXABY2qtl7u_Eacs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.168.0/23
185.114.144.0/23
Signature Algorithm: sha256WithRSAEncryption
65:5a:ef:76:c1:13:1f:e7:1e:0e:9b:09:4c:28:1c:5a:98:bc:
cf:79:3f:cd:00:a5:97:59:db:53:8a:1e:c1:3d:0e:ed:59:ce:
d9:e5:39:01:53:e2:d9:cf:81:f2:83:2e:27:fd:df:56:51:a1:
7d:93:82:f1:48:77:42:e9:31:18:2f:24:4c:97:db:e9:80:21:
53:11:eb:4e:7b:17:42:4f:81:1b:c0:54:11:5b:2d:21:1b:9f:
f0:76:a5:13:79:c9:f0:99:1b:9d:e3:aa:b5:b7:4e:dd:17:60:
21:cd:cd:9d:59:18:3c:cc:e4:ae:b4:a0:0e:3d:3d:78:4b:56:
1a:df:df:0f:df:cc:f4:b3:a0:f9:84:31:2d:05:0d:c9:f6:6d:
4d:7f:c7:c1:47:d3:cf:cc:5d:be:ae:32:ea:a9:61:d2:cd:b6:
33:8d:27:83:a6:9b:bb:20:27:12:af:63:e4:c5:3a:b5:a4:af:
08:f9:90:b3:ee:53:21:b5:e6:38:fb:70:39:f9:d5:bf:f6:b4:
9c:cb:92:dd:f1:0e:f5:6c:52:fb:bc:fb:da:bf:51:17:40:b8:
92:d2:97:4b:4c:93:00:74:3c:9e:21:d9:83:f5:8a:5a:3a:b0:
74:82:4a:79:fb:27:a5:8e:92:41:ef:92:97:71:e2:01:7c:0e:
5c:1a:60:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 01:40:39 2024 by rpki-client on console-ams.rpki-client.org