Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/_Hn16yf7W5wzTZA6YilY1f4Vd2s.roa
File: _Hn16yf7W5wzTZA6YilY1f4Vd2s.roa (raw, json)
Hash identifier: X7ULYhfijyfe1rjD2jmgFGA9CN6Csz9egpFfJeiqQfY=
Subject key identifier: FC:79:F5:EB:27:FB:5B:9C:33:4D:90:3A:62:29:58:D5:FE:15:77:6B
Certificate issuer: /CN=bd6fa37a2483cf579fa86250119ac0133475aad8
Certificate serial: 01857D4F3AA0440038A86779D6FF4D3F25B1
Authority key identifier: BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/_Hn16yf7W5wzTZA6YilY1f4Vd2s.roa
Signing time: Wed 04 Jan 2023 15:03:42 +0000
ROA not before: Wed 04 Jan 2023 15:03:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6134
IP address blocks: 45.138.80.0/22 maxlen: 24
45.86.140.0/22 maxlen: 24
45.133.228.0/22 maxlen: 24
45.147.24.0/24 maxlen: 24
45.147.25.0/24 maxlen: 24
45.158.229.0/24 maxlen: 24
45.147.27.0/24 maxlen: 24
45.147.26.0/24 maxlen: 24
45.158.228.0/24 maxlen: 24
45.158.230.0/24 maxlen: 24
45.158.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7d:4f:3a:a0:44:00:38:a8:67:79:d6:ff:4d:3f:25:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6fa37a2483cf579fa86250119ac0133475aad8
Validity
Not Before: Jan 4 15:03:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc79f5eb27fb5b9c334d903a622958d5fe15776b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:2b:2a:e7:7d:24:97:e8:e2:15:7e:47:e2:
64:86:9e:c9:26:5c:2e:7b:3d:02:e0:ef:4a:a4:c0:
96:a3:91:06:7e:fc:8a:1d:14:ad:d9:84:53:80:e0:
8f:44:26:2b:86:cd:9e:2f:63:5f:e4:53:75:c6:a5:
94:0a:0e:6a:53:b6:28:92:35:d6:c1:98:89:69:c0:
9c:34:1d:69:85:19:8d:65:4d:c4:3e:f0:4d:a8:91:
2f:2a:e4:56:7a:d0:0f:6a:f3:86:97:a6:a3:4d:a0:
1e:67:bc:05:65:99:a4:81:09:fc:d7:c0:d2:f7:41:
a8:f3:2e:3d:91:44:9a:7e:94:db:e9:2c:3c:e9:53:
e1:93:75:33:6e:1f:81:37:3f:c4:2a:60:7c:a2:bf:
02:ae:55:9a:99:c1:ff:74:32:15:14:f9:08:19:9a:
05:b0:41:90:0d:71:35:3c:be:d3:ef:7e:fd:79:e8:
c8:9c:2a:8c:18:3d:ac:24:c6:b8:d5:b2:d5:b9:49:
fc:e2:30:0f:d6:1a:46:d0:90:88:71:71:3c:3d:3a:
46:58:6f:7e:de:10:29:37:72:3f:58:fe:68:06:50:
58:13:a6:1c:f6:01:b3:7a:7a:0b:7b:ff:8b:87:5d:
e2:24:43:1b:12:0d:d3:12:6c:99:e4:8f:60:87:12:
da:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:79:F5:EB:27:FB:5B:9C:33:4D:90:3A:62:29:58:D5:FE:15:77:6B
X509v3 Authority Key Identifier:
keyid:BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/_Hn16yf7W5wzTZA6YilY1f4Vd2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.140.0/22
45.133.228.0/22
45.138.80.0/22
45.147.24.0/22
45.158.228.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:6b:6e:8a:85:22:b8:24:d8:2a:19:a4:9e:7f:d4:53:45:6f:
43:ab:3a:30:4e:2a:2a:e3:46:31:8f:91:6b:0f:9b:43:f6:e2:
11:9f:8e:a0:c1:f2:f3:71:79:69:c0:c8:1f:66:e8:95:89:66:
e6:d0:62:92:33:d4:0a:3f:cb:90:0b:9e:99:0d:dd:c4:d6:f4:
64:3e:ff:0c:64:3b:dd:a1:90:41:60:89:2f:56:ad:da:25:c0:
d3:eb:01:03:da:a4:06:51:67:ee:1f:f8:ad:15:6d:1c:54:b5:
b9:7b:2f:f4:67:6c:b2:a2:09:20:17:03:dd:e5:da:db:04:0a:
8a:26:aa:1e:64:7e:d9:e0:42:38:47:b5:36:1d:fe:4f:aa:a3:
83:a6:29:06:d1:db:58:74:00:c6:f0:25:04:aa:03:c1:4b:00:
5c:44:cf:1b:cd:11:55:ad:1b:18:fa:84:d8:bb:e6:bc:6c:2f:
d1:7c:87:28:61:f1:ca:da:a6:8f:7a:4a:42:62:68:b3:dc:c9:
d9:bd:98:c1:4e:e9:54:b9:bf:ed:22:52:a5:fe:fc:7c:9e:10:
eb:54:af:ea:90:9c:5f:83:38:0b:c6:4b:a0:77:37:2c:3c:fa:
79:92:81:fe:8e:aa:1a:3b:3f:d9:cf:96:13:e9:ff:48:21:a2:
19:e2:30:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-fra.rpki-client.org