Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/EdzO_Mina-_m0hTdLtx7MLT_pNI.roa
File: EdzO_Mina-_m0hTdLtx7MLT_pNI.roa (raw, json)
Hash identifier: MsJDl37SbN08UGCzmTY1Z5bBHiIhKnrxd0zfuOqyPRE=
Subject key identifier: 11:DC:CE:FC:C8:A7:6B:EF:E6:D2:14:DD:2E:DC:7B:30:B4:FF:A4:D2
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 018C937EED8727826DDC056CD6969E45BBCB
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/EdzO_Mina-_m0hTdLtx7MLT_pNI.roa
Signing time: Fri 22 Dec 2023 21:46:58 +0000
ROA not before: Fri 22 Dec 2023 21:46:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208161
IP address blocks: 45.156.185.0/24 maxlen: 24
45.156.186.0/24 maxlen: 24
45.156.184.0/24 maxlen: 24
45.156.187.0/24 maxlen: 24
2a0f:2b81::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:93:7e:ed:87:27:82:6d:dc:05:6c:d6:96:9e:45:bb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: Dec 22 21:46:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11dccefcc8a76befe6d214dd2edc7b30b4ffa4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d5:a5:41:85:6b:22:c1:54:b1:d8:03:88:ab:
65:1f:c1:53:39:5b:2c:bd:78:ef:1f:70:55:5b:5b:
44:0e:59:61:62:6d:b7:45:1f:b1:1f:37:a0:66:1f:
98:5b:7b:c5:62:87:84:12:2f:05:41:ce:28:f8:21:
b0:7c:c8:85:2c:69:b5:9b:c5:4f:b4:eb:95:95:dc:
b3:4e:c2:55:5d:4c:9f:5f:88:35:ba:25:f8:38:36:
49:21:86:7b:4c:f4:69:39:51:1b:e6:41:50:4c:1a:
ba:7a:8b:17:ca:5b:1c:3a:82:31:17:20:e3:f6:3c:
fd:ff:a4:3b:69:3a:f5:33:e8:5b:35:9a:5b:18:43:
72:c0:20:99:49:11:86:0d:e1:97:5d:0f:06:4f:e4:
4b:e1:57:0d:64:00:a5:e6:b9:0d:02:dc:d4:76:de:
bc:18:77:0b:b9:2f:49:02:32:3c:cc:1d:34:9c:78:
1d:47:31:12:39:1b:a4:9a:22:8c:8d:74:d8:5c:28:
c9:b1:ff:da:4a:1d:3f:14:8f:be:c6:5b:c4:36:94:
c1:11:28:c7:70:47:f1:54:2f:bb:7c:c1:4a:69:76:
31:4d:e2:6d:a1:e8:0c:70:5b:7b:fe:82:47:f5:e4:
d6:a3:87:a2:11:ee:f8:06:4e:d2:9b:e4:fa:01:b6:
b2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DC:CE:FC:C8:A7:6B:EF:E6:D2:14:DD:2E:DC:7B:30:B4:FF:A4:D2
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/EdzO_Mina-_m0hTdLtx7MLT_pNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.184.0/22
IPv6:
2a0f:2b81::/32
Signature Algorithm: sha256WithRSAEncryption
8a:0b:5e:b8:04:4d:69:81:dc:c9:22:ac:8e:a7:ec:6c:f6:db:
18:b9:d9:6f:7a:f0:1f:1b:79:15:82:d3:7e:ef:dc:20:82:7a:
b0:d9:79:dc:51:e8:af:b4:d7:54:5c:b6:5f:73:8d:f2:8f:46:
62:41:8e:98:a0:de:cb:d7:24:c0:74:a8:e9:09:3b:33:c9:ae:
be:14:7d:38:a9:1c:20:1b:5e:f4:5e:08:cf:bb:51:27:11:ba:
5a:34:3f:6d:72:7d:05:f5:cb:8b:03:e0:9d:4c:f8:96:01:12:
ea:b9:5f:5e:c5:35:6b:25:1c:8b:b1:05:6e:f5:8f:54:39:ea:
64:41:00:a8:00:9e:6b:dc:0b:ac:0a:4a:0e:b2:52:ba:38:08:
ce:46:3d:3d:bb:4c:17:5a:d0:e9:0c:20:3c:c1:24:cd:5b:9b:
34:12:83:f9:7d:80:e7:8e:12:e3:8c:3b:83:31:18:a6:e2:5b:
2f:34:94:89:41:1d:a6:af:cb:9e:d3:6a:56:c4:00:3a:5d:ea:
c4:d2:f0:28:c8:72:6f:d7:93:98:2e:ca:7f:e5:b4:59:a2:bd:
da:79:29:13:a8:be:9d:af:e8:96:82:da:ff:38:29:f3:1b:2a:
e3:1a:04:ee:a1:53:21:67:5e:81:a4:5c:6b:3c:4c:6d:5b:52:
7c:0e:e9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:31 2024 by rpki-client on console-fra.rpki-client.org