Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/2hNwGou_Op5UprUGcpdOjA_D5rs.roa
File: 2hNwGou_Op5UprUGcpdOjA_D5rs.roa (raw, json)
Hash identifier: qDYr6Vf918kxssxp7EFgcSc1LCjzLlsT81Z0TQNQmgQ=
Subject key identifier: DA:13:70:1A:8B:BF:3A:9E:54:A6:B5:06:72:97:4E:8C:0F:C3:E6:BB
Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial: 018B0416022B8E3352AFE1D6932BD2DE5143
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/2hNwGou_Op5UprUGcpdOjA_D5rs.roa
Signing time: Fri 06 Oct 2023 08:23:53 +0000
ROA not before: Fri 06 Oct 2023 08:23:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204144
IP address blocks: 45.85.212.0/22 maxlen: 22
193.108.183.0/24 maxlen: 24
45.80.240.0/22 maxlen: 22
45.88.252.0/22 maxlen: 22
193.108.198.0/24 maxlen: 24
193.108.208.0/24 maxlen: 24
193.108.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:04:16:02:2b:8e:33:52:af:e1:d6:93:2b:d2:de:51:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
Validity
Not Before: Oct 6 08:23:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da13701a8bbf3a9e54a6b50672974e8c0fc3e6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:52:b4:5e:3c:33:f1:ab:63:27:8e:6c:35:
57:50:04:05:41:44:4d:78:d7:2b:49:4b:d7:05:4b:
c5:2f:31:97:eb:4f:aa:b4:63:02:5a:51:8b:01:f1:
16:1f:af:e6:4e:3d:27:27:21:35:ce:99:ac:0f:d6:
cc:04:71:a8:7c:34:ad:0c:79:86:ed:3d:a0:5e:e1:
db:b4:c0:1c:4d:6f:e4:73:bd:53:f7:1e:e8:d3:15:
bc:c8:a4:cf:bd:71:fa:6c:9c:cf:25:1d:94:ac:6e:
c9:eb:7e:00:fd:7a:83:7e:da:ff:f6:8e:69:d8:b1:
a7:a0:44:d6:ed:7f:34:de:45:ce:fb:05:33:d2:16:
12:e4:82:bc:fc:b8:40:96:ab:0b:ff:9d:c3:84:76:
3b:2f:cf:6a:96:ab:7e:92:df:26:49:f0:38:28:77:
34:bf:3d:c5:97:00:60:ee:19:9a:bd:76:f7:7e:3a:
f5:70:3c:7c:83:dd:1b:a2:ed:b8:f4:79:7f:f3:fe:
f0:54:e5:d7:9c:9f:83:c8:08:72:56:4e:50:72:15:
51:88:19:50:a6:55:87:ea:85:4c:e3:77:7b:c7:2d:
66:32:1e:2c:0a:97:b7:2b:de:8f:8a:6f:96:f7:73:
f0:42:0d:93:a7:e8:06:a2:8d:3b:d5:eb:93:2c:15:
71:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:13:70:1A:8B:BF:3A:9E:54:A6:B5:06:72:97:4E:8C:0F:C3:E6:BB
X509v3 Authority Key Identifier:
keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/2hNwGou_Op5UprUGcpdOjA_D5rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.240.0/22
45.85.212.0/22
45.88.252.0/22
193.108.183.0/24
193.108.198.0/24
193.108.208.0/24
193.108.211.0/24
Signature Algorithm: sha256WithRSAEncryption
99:78:14:0c:c8:d5:c9:f3:b1:b9:c5:a8:48:06:69:ec:ba:4d:
83:a2:53:12:d6:95:93:5e:dc:ab:ad:5f:78:83:10:02:6e:86:
a2:ae:78:6a:b7:6f:7c:a9:57:d1:f1:5d:03:e1:08:bd:aa:f1:
f5:d7:39:ae:36:7e:94:ee:56:bb:54:1a:41:b1:a3:7c:99:5d:
da:bc:cf:05:4d:ca:6c:c9:e4:4b:d9:5d:4a:e4:b4:d5:61:31:
58:d4:0a:b1:b8:62:e8:a1:38:b5:55:59:c5:63:c3:8c:5f:66:
82:23:db:41:cd:37:07:33:76:0f:c3:57:18:ce:38:66:40:6e:
48:43:61:fe:69:8a:e0:7c:d4:1d:5a:d2:0b:5a:dc:1d:32:b5:
1f:33:05:35:81:8c:43:76:e1:f0:46:79:fe:c6:40:2f:a9:c0:
75:de:b9:30:aa:49:36:7d:5c:a3:c6:44:b5:af:3d:32:18:61:
1b:ba:74:66:b3:b5:08:fa:fd:6b:b6:08:86:54:db:f8:20:04:
95:8f:27:78:d5:91:a5:41:bc:ca:23:ed:1e:38:f7:49:d5:3d:
0c:4a:b8:d9:85:d8:b0:2b:9b:c4:c4:3d:9c:6e:97:51:ce:b2:
45:fa:e6:e0:85:ae:48:25:17:fe:d6:e3:46:94:42:82:1c:bb:
bc:58:34:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:13 2024 by rpki-client on console-ams.rpki-client.org