Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/m8zbEBVTrdbOieeNI3H7R6UtLUk.roa
File: m8zbEBVTrdbOieeNI3H7R6UtLUk.roa (raw, json)
Hash identifier: oYsyZPjKCcDcS7P9Y8djHJvY/wMC8g7dbBPApTdPIas=
Subject key identifier: 9B:CC:DB:10:15:53:AD:D6:CE:89:E7:8D:23:71:FB:47:A5:2D:2D:49
Certificate issuer: /CN=bd6fa37a2483cf579fa86250119ac0133475aad8
Certificate serial: 01856FD5340524286EABBB643E8C423BCF19
Authority key identifier: BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/m8zbEBVTrdbOieeNI3H7R6UtLUk.roa
Signing time: Mon 02 Jan 2023 00:15:21 +0000
ROA not before: Mon 02 Jan 2023 00:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137443
IP address blocks: 45.138.80.0/22 maxlen: 24
45.86.140.0/22 maxlen: 24
45.133.228.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:34:05:24:28:6e:ab:bb:64:3e:8c:42:3b:cf:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6fa37a2483cf579fa86250119ac0133475aad8
Validity
Not Before: Jan 2 00:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bccdb101553add6ce89e78d2371fb47a52d2d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:86:cb:0e:2f:c0:f8:51:64:38:57:77:c3:f8:
54:39:48:9b:43:df:d8:82:85:c1:0b:93:48:d5:31:
c6:11:6c:5a:44:86:61:9e:05:a2:e9:b5:ba:26:48:
64:c7:8a:f9:bd:6f:65:6a:ae:2f:a4:d6:e5:eb:6d:
0b:71:b2:8b:1b:cf:1e:f9:90:83:18:28:0e:68:c2:
88:4b:a5:7d:cc:23:d2:51:97:aa:a2:05:49:b5:2a:
99:ac:6f:91:e3:b1:bc:13:f5:e4:64:0d:d1:db:4f:
d0:47:98:1e:d7:cb:9a:22:7c:63:eb:97:54:a0:8c:
d9:6f:1b:95:7b:85:a7:be:e8:d6:85:d0:aa:98:b9:
f4:a7:d1:31:46:ed:ea:2c:9f:47:84:e1:c1:06:52:
4a:34:d8:94:af:5d:c1:a7:c0:b5:bd:44:0d:f5:48:
c6:e7:7c:6f:c5:22:3c:58:20:22:c7:ae:5e:41:81:
dd:93:8c:ac:6f:9d:2f:7e:cd:b7:63:bf:3b:ab:ca:
11:16:4b:fa:1d:05:60:92:d5:23:82:aa:e5:64:8e:
45:ff:d0:8e:44:71:ef:c8:96:96:8a:70:66:9c:ea:
e1:6d:d5:63:a7:17:96:b4:21:f8:81:d3:9b:73:52:
db:e0:1a:89:34:bd:b8:55:f3:5f:0d:ab:06:ea:db:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CC:DB:10:15:53:AD:D6:CE:89:E7:8D:23:71:FB:47:A5:2D:2D:49
X509v3 Authority Key Identifier:
keyid:BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/m8zbEBVTrdbOieeNI3H7R6UtLUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.140.0/22
45.133.228.0/22
45.138.80.0/22
Signature Algorithm: sha256WithRSAEncryption
69:2a:03:af:fb:b6:f5:29:e9:38:da:23:b4:c1:48:85:85:23:
ac:39:b0:64:3e:58:7a:83:93:ea:ff:13:7e:a8:e0:26:0b:ee:
71:52:dc:4f:56:02:3b:5f:a1:01:98:f7:2e:52:59:4a:ce:74:
17:32:12:2a:ca:80:1e:40:03:63:d3:7e:e4:26:ee:fd:75:da:
d2:0a:de:c6:d2:1f:33:d8:f1:2e:4d:15:48:0b:50:f7:2c:20:
60:df:ed:fb:d7:ac:ea:98:6b:8b:2f:29:05:e7:71:30:74:4c:
fe:55:4c:dd:4b:2b:14:34:67:93:c5:e6:b6:4a:c5:56:f1:4d:
29:3b:da:03:b4:01:2b:dc:2d:2f:a9:5d:26:56:18:48:b5:8b:
1f:e9:95:de:76:01:8b:60:1d:52:27:66:fc:32:06:d9:09:e9:
f1:79:f7:ab:65:d9:01:82:4e:cc:59:b1:87:cf:e7:46:78:07:
39:3f:7a:8a:15:49:a4:1e:0c:be:33:73:2b:38:1a:c0:72:ea:
02:33:9c:27:92:d7:b4:95:0a:a0:e2:3e:d7:98:d0:b3:d3:b3:
4c:d8:98:78:c9:62:d8:07:41:6d:99:a1:47:ee:75:74:7f:a8:
e2:26:67:d2:fe:a3:1e:c5:36:cb:d7:b6:27:c9:b8:20:a6:b3:
23:e2:6b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:03 2024 by rpki-client on console-ams.rpki-client.org