Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/ijFcXRkRLw0O1enM_qVB6pQZZPI.roa
File: ijFcXRkRLw0O1enM_qVB6pQZZPI.roa (raw, json)
Hash identifier: qkAN9ZDaQI5F2pVQ6kHqHWjNmKxtpq0WPmBklfSEfKw=
Subject key identifier: 8A:31:5C:5D:19:11:2F:0D:0E:D5:E9:CC:FE:A5:41:EA:94:19:64:F2
Certificate issuer: /CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Certificate serial: 018CC94CA7BB4ED1F3D7A0EA6E76C35DB631
Authority key identifier: 03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/ijFcXRkRLw0O1enM_qVB6pQZZPI.roa
Signing time: Tue 02 Jan 2024 08:31:33 +0000
ROA not before: Tue 02 Jan 2024 08:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50903
IP address blocks: 178.23.32.0/21 maxlen: 22
45.148.156.0/22 maxlen: 22
185.118.92.0/22 maxlen: 23
45.159.68.0/22 maxlen: 22
2a00:ab80::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 08 Jan 2024 14:36:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:a7:bb:4e:d1:f3:d7:a0:ea:6e:76:c3:5d:b6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Validity
Not Before: Jan 2 08:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a315c5d19112f0d0ed5e9ccfea541ea941964f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:ae:d5:05:49:52:f7:62:7a:ea:22:37:c8:
ff:0f:cb:11:ed:85:fc:6a:a9:c8:05:98:9e:16:56:
db:ee:18:25:cf:77:d0:5f:c8:93:d4:56:52:a2:90:
c7:12:a8:80:30:d8:8b:11:e4:79:43:17:d1:00:3b:
d1:b8:99:53:7b:cc:d2:9d:32:e5:bc:04:c4:62:f3:
d7:85:ae:55:84:3b:2e:8d:2b:46:5e:00:78:d2:32:
38:b0:85:e5:5b:b0:05:4a:75:7b:6b:4a:1c:af:47:
95:d0:34:e2:66:7f:e3:e4:76:07:78:9c:69:ad:16:
d5:4a:f1:e1:09:24:f6:44:92:c3:f2:f7:65:ca:03:
24:7f:25:6e:dd:d4:cc:3d:ff:3f:56:2a:92:8d:d2:
25:22:13:af:77:04:e4:d3:3f:a0:b8:9d:22:c6:67:
96:67:76:ff:5c:05:bb:37:70:f6:fb:a8:85:8c:a4:
03:b0:cb:7e:9a:bd:c4:84:f8:45:b0:7f:04:63:fe:
89:eb:8e:75:8b:a3:cb:f6:67:c4:39:25:29:cd:c0:
85:d8:eb:68:76:d5:f9:35:66:d6:1c:59:62:87:14:
21:ee:ed:90:41:c0:2a:03:78:5a:53:11:d4:16:16:
65:9b:c8:db:cc:00:90:3b:55:73:26:26:ac:28:fe:
38:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:31:5C:5D:19:11:2F:0D:0E:D5:E9:CC:FE:A5:41:EA:94:19:64:F2
X509v3 Authority Key Identifier:
keyid:03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/ijFcXRkRLw0O1enM_qVB6pQZZPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.156.0/22
45.159.68.0/22
178.23.32.0/21
185.118.92.0/22
IPv6:
2a00:ab80::/32
Signature Algorithm: sha256WithRSAEncryption
0c:8c:a9:c1:8f:57:8d:52:d1:5e:15:58:5d:b8:fc:ac:61:3a:
63:ed:3a:07:51:25:35:2c:45:3f:be:8b:7d:51:33:85:a2:5c:
49:1f:57:ac:f5:7c:9b:fa:ab:e9:87:61:5a:65:c5:64:d3:b8:
e5:65:7e:78:7e:1f:67:af:ed:74:cc:cd:4a:28:ef:0b:81:0a:
ed:b5:f0:46:c4:01:43:80:e2:33:99:4a:20:23:e9:83:55:c9:
61:a9:2c:ee:dd:ed:0f:ce:ce:a3:4d:9e:49:05:95:4b:22:e9:
26:55:a1:51:f7:f8:44:2a:3c:fe:69:28:48:6d:e8:1b:87:b0:
41:eb:46:e6:54:e3:a5:9b:1e:65:0b:9d:09:10:16:f1:e2:db:
00:ac:83:f5:19:b8:db:26:fa:6f:81:c0:04:b5:e2:cd:98:88:
65:7f:67:2d:96:5b:f5:62:9a:84:2d:28:75:50:ac:75:34:c6:
15:67:bd:ce:bf:08:25:99:e7:c7:08:3a:d8:3e:62:d3:6d:a0:
4f:65:02:a5:ca:2e:e8:33:0b:9a:cf:21:df:f3:91:0c:90:28:
2d:89:40:ec:a5:ae:43:39:48:86:a8:bb:3b:e6:a9:27:6f:51:
e2:08:9d:d2:32:e6:2e:50:f4:3e:6c:58:d7:7a:9d:d0:b6:ec:
be:d6:6d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:33 2024 by rpki-client on console-ams.rpki-client.org