Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/X-zbCn76ZMKcoc8Z1CEjbR1m1dU.roa
File: X-zbCn76ZMKcoc8Z1CEjbR1m1dU.roa (raw, json)
Hash identifier: KtUD5mLlTZZBZoRm9WU5hHYzLT24I9uimAvB0iSZb4I=
Subject key identifier: 5F:EC:DB:0A:7E:FA:64:C2:9C:A1:CF:19:D4:21:23:6D:1D:66:D5:D5
Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial: 018E9E18BD47D606121480D5E0F5CE3E7AED
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/X-zbCn76ZMKcoc8Z1CEjbR1m1dU.roa
Signing time: Tue 02 Apr 2024 09:16:45 +0000
ROA not before: Tue 02 Apr 2024 09:16:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 145.219.22.0/24 maxlen: 24
145.219.23.0/24 maxlen: 24
145.219.24.0/22 maxlen: 22
145.219.28.0/22 maxlen: 22
2a04:b0c0:10::/48 maxlen: 48
2a04:b0c0:11::/48 maxlen: 48
2a04:b0c0:12::/48 maxlen: 48
2a04:b0c0:13::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 17 Jun 2024 11:58:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:18:bd:47:d6:06:12:14:80:d5:e0:f5:ce:3e:7a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Validity
Not Before: Apr 2 09:16:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fecdb0a7efa64c29ca1cf19d421236d1d66d5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7d:d4:e4:ee:f5:b9:a4:88:6d:ce:91:8c:84:
8b:45:a4:28:8c:e0:b0:90:77:c7:9c:a0:e7:1b:b6:
c7:b9:8e:0c:01:70:e9:3c:00:26:7a:d4:57:a4:f8:
5a:3f:22:39:f9:6f:17:e7:7e:80:13:a0:53:47:d8:
87:18:d5:ae:ec:d3:41:91:e5:b5:f6:86:cd:02:11:
fe:ec:ac:a9:0a:ec:21:f3:62:3b:11:5e:8c:38:cd:
f2:13:d9:45:2c:5d:12:b5:3d:46:b6:cd:81:03:6c:
ec:cc:5c:df:cb:33:04:1b:43:3c:0d:2c:a6:59:03:
fe:d2:64:04:45:26:79:74:6a:42:5f:65:85:0f:c0:
50:73:a7:25:77:d1:8f:32:a5:d1:a6:ab:d0:dd:5b:
5d:10:9a:92:91:5f:0e:f0:a6:ed:d1:93:b1:97:c1:
9f:69:8b:d5:16:e5:c1:fd:9c:6a:b3:c1:fe:f4:a0:
7d:b3:fc:08:7c:f1:19:ce:6e:ba:89:ad:0a:da:9f:
70:3d:4a:8d:50:df:a9:f6:b9:43:87:68:ec:0a:21:
a9:96:ae:b7:e9:04:66:79:ef:95:56:7c:ed:a7:03:
13:cc:2c:a2:e7:2f:c6:2f:54:50:e7:e1:fc:13:02:
83:b9:0e:2e:52:9c:fa:ce:cc:aa:36:cc:ac:0f:71:
1c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EC:DB:0A:7E:FA:64:C2:9C:A1:CF:19:D4:21:23:6D:1D:66:D5:D5
X509v3 Authority Key Identifier:
keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/X-zbCn76ZMKcoc8Z1CEjbR1m1dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.219.22.0-145.219.31.255
IPv6:
2a04:b0c0:10::/46
Signature Algorithm: sha256WithRSAEncryption
3d:73:1b:52:bd:d6:3f:cb:1a:bc:ac:49:97:68:4f:81:ff:c0:
a8:17:1c:88:d7:61:61:3f:12:c1:51:b5:b5:1e:70:e8:94:cc:
77:33:b5:a0:ec:a5:cd:07:6e:3e:83:53:65:fd:5c:ae:92:aa:
70:67:fa:9c:e0:d6:85:aa:bd:32:28:1e:c4:ca:6b:0d:ce:db:
20:f2:b1:f4:07:94:fb:95:19:e7:74:01:c5:6e:c6:ae:ac:34:
12:6c:45:fd:aa:ae:6c:37:e2:1b:0d:78:70:5d:ad:57:dc:a1:
bf:f8:a3:27:dd:8e:8e:64:12:32:52:e9:64:56:1a:34:9f:0e:
da:0b:f5:de:82:a5:83:62:74:96:4a:b8:42:7f:5a:b2:94:17:
67:51:e9:7f:b6:5e:3a:2e:07:a6:3b:f8:d2:d9:83:3e:ca:94:
55:2c:84:13:7c:15:c9:40:42:6e:e2:31:da:5d:ac:ad:f0:40:
96:4e:bc:e9:25:87:95:03:ff:07:61:43:87:9d:d3:5d:e0:af:
8d:e8:33:2e:6b:bc:cc:50:e8:72:04:00:85:18:20:49:48:94:
bc:df:5c:20:18:82:e3:22:e7:c0:60:33:31:46:e6:1b:26:d0:
41:fa:67:1e:0d:1c:de:cc:77:5a:9e:47:2c:79:ac:68:de:5c:
b5:b4:f9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 17:17:10 2024 by rpki-client on console-ams.rpki-client.org