Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/do3cxjZBYe12QhgRf1ir0snDEYU.roa
File: do3cxjZBYe12QhgRf1ir0snDEYU.roa (raw, json)
Hash identifier: AsCG5AoByGthelSGUj01l5AgU5gPTeoJ1HKp0SOy3/w=
Subject key identifier: 76:8D:DC:C6:36:41:61:ED:76:42:18:11:7F:58:AB:D2:C9:C3:11:85
Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Certificate serial: 01856ED4C02065C8975A372CB1DEBD1950E8
Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/do3cxjZBYe12QhgRf1ir0snDEYU.roa
Signing time: Sun 01 Jan 2023 19:35:14 +0000
ROA not before: Sun 01 Jan 2023 19:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60813
IP address blocks: 45.148.222.0/24 maxlen: 24
45.148.221.0/24 maxlen: 24
45.148.223.0/24 maxlen: 24
81.90.98.0/24 maxlen: 24
81.90.97.0/24 maxlen: 24
81.90.96.0/24 maxlen: 24
81.90.96.0/20 maxlen: 20
81.90.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:c0:20:65:c8:97:5a:37:2c:b1:de:bd:19:50:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Validity
Not Before: Jan 1 19:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=768ddcc6364161ed764218117f58abd2c9c31185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e7:07:20:a9:35:38:f0:8c:93:5a:dd:48:1f:
92:51:77:7c:0a:10:ec:60:66:9f:55:49:04:6c:3f:
da:51:33:43:bf:dc:07:09:5d:1c:ed:41:79:f0:1d:
5f:0f:fb:99:0e:22:9b:a4:96:26:4f:8b:42:7e:8d:
df:2c:0f:2e:54:a8:69:ce:23:62:19:e7:a6:14:aa:
58:5a:c8:ff:d9:e4:44:98:ed:d4:a0:a2:b7:6e:2d:
0e:29:2b:3d:75:47:dc:a4:e5:07:10:1a:e2:a4:16:
30:66:2f:64:de:21:ea:06:58:29:32:5b:c0:ba:a4:
cd:1d:f8:53:db:54:d7:f3:4c:f6:52:2d:3a:46:03:
79:97:1b:27:f3:9c:5a:d2:8c:c5:67:4a:db:bd:f8:
62:0d:dc:fd:66:54:44:ef:70:68:16:bd:29:fb:73:
0b:9c:34:9a:9d:04:b3:71:9c:a9:0e:99:39:f3:57:
08:5d:ed:06:2a:62:90:8a:8c:01:9d:51:59:f6:56:
7b:2e:a9:80:d9:bf:ab:23:49:b6:69:5a:97:a2:66:
49:9c:db:f0:a4:6d:5c:2d:21:f2:39:3d:8e:70:11:
58:bb:8c:b6:8b:a9:22:2e:19:f9:18:f0:e7:21:96:
b4:73:6c:79:b8:b8:af:50:37:3b:c6:39:b1:c6:5e:
8d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8D:DC:C6:36:41:61:ED:76:42:18:11:7F:58:AB:D2:C9:C3:11:85
X509v3 Authority Key Identifier:
keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/do3cxjZBYe12QhgRf1ir0snDEYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.221.0-45.148.223.255
81.90.96.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:8c:15:81:ad:7e:c8:a0:a3:03:a3:8b:64:60:9c:50:57:89:
a8:b0:ec:54:5b:0d:ed:67:d5:4b:1f:5d:98:fd:46:e4:70:1a:
85:ba:d4:83:96:c0:b3:b0:f8:3e:28:a5:b1:4e:01:97:c5:8c:
b4:85:bd:1e:f3:b2:33:e3:90:e4:bf:40:f1:35:74:45:19:17:
24:a6:bd:2a:b6:fb:a5:23:c8:7c:d5:45:0a:b7:18:45:e5:c6:
3e:57:8e:86:7e:e9:a6:e5:27:16:13:bb:7a:cb:a3:ec:53:3f:
0b:17:5e:71:04:d9:ca:78:42:ad:77:a0:59:28:4f:5a:19:0e:
38:9b:d1:4b:fa:e3:48:da:0b:24:fb:04:44:3d:d5:ba:c7:83:
35:26:52:1e:15:2a:64:73:79:16:91:1e:36:52:1d:a0:72:6a:
91:69:81:7e:f5:6f:da:c4:8f:8c:2c:78:c0:25:8c:da:40:67:
a9:44:3d:48:ca:1c:01:ac:fd:f4:f6:a7:8c:d8:98:db:56:18:
55:ad:23:55:7f:94:a4:a4:fa:96:fb:68:9b:f9:61:54:77:40:
0f:7a:a5:bc:1d:c0:20:fa:6b:fe:9a:10:c6:5a:70:55:0c:3e:
d2:88:6d:8d:16:04:c3:b3:87:85:8c:d6:b5:d1:2d:e3:61:ac:
67:63:20:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:23 2024 by rpki-client on console-ams.rpki-client.org