Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/4J7aBXVrHL38pCHmWUdLn9qj4Go.roa
File: 4J7aBXVrHL38pCHmWUdLn9qj4Go.roa (raw, json)
Hash identifier: nN2t4R3JqU4cbJSxzVlWkfs4VFEvzBWv2hMRLMWPufo=
Subject key identifier: E0:9E:DA:05:75:6B:1C:BD:FC:A4:21:E6:59:47:4B:9F:DA:A3:E0:6A
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0185720C450BD32281F86DC3AE3C7B9E8A95
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/4J7aBXVrHL38pCHmWUdLn9qj4Go.roa
Signing time: Mon 02 Jan 2023 10:34:44 +0000
ROA not before: Mon 02 Jan 2023 10:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.36.140.0/23 maxlen: 24
45.155.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Oct 2023 05:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:45:0b:d3:22:81:f8:6d:c3:ae:3c:7b:9e:8a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 2 10:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e09eda05756b1cbdfca421e659474b9fdaa3e06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:20:e8:2e:14:38:05:7f:df:da:0b:03:a2:
a0:02:4f:8e:b2:c3:73:17:b4:0e:c3:a3:1f:d6:6b:
40:a2:e6:c5:a5:a0:ec:fa:6f:c7:10:c5:db:c3:db:
65:67:86:63:af:ed:c0:ae:73:18:48:77:be:8f:40:
21:a7:69:7f:7a:0c:36:04:1e:6f:8d:39:1d:6c:d0:
d5:7e:7a:62:96:8c:a6:3a:56:28:94:43:ae:f5:38:
25:04:e1:a6:30:b9:f6:6f:b4:1e:30:07:21:f8:ce:
87:48:af:68:29:4c:c3:83:54:e1:ca:08:cf:c3:a2:
a3:fd:c7:65:97:5d:77:9f:d3:e2:41:01:e5:2a:a1:
94:7c:05:a2:86:1d:3d:85:ba:b5:9c:a4:95:9a:b9:
8e:91:8b:6e:b9:50:c9:22:07:62:fe:7c:87:01:df:
31:c3:d7:eb:09:03:6c:da:7e:f0:bf:28:ab:cb:63:
52:eb:3f:f3:cf:27:90:2b:2b:9a:94:f7:f3:aa:ff:
13:5e:1c:b3:78:f5:d3:36:36:d4:b9:e6:38:f9:42:
1d:c2:be:3d:72:f8:4a:56:af:65:06:22:d8:4e:1f:
c2:cf:5e:e1:41:d7:5d:ba:1f:03:3a:76:11:33:e4:
18:f9:cf:93:f4:ac:95:5b:c0:35:10:6b:39:f3:78:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9E:DA:05:75:6B:1C:BD:FC:A4:21:E6:59:47:4B:9F:DA:A3:E0:6A
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/4J7aBXVrHL38pCHmWUdLn9qj4Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.122.0/24
185.36.140.0/23
Signature Algorithm: sha256WithRSAEncryption
57:f4:39:30:95:e2:74:c7:d4:18:64:fe:32:d9:ff:d1:71:10:
7d:5f:ff:c0:94:dd:a1:70:f8:90:c1:6c:8e:9c:22:b6:2f:b7:
99:50:b4:d7:91:45:76:0e:81:1a:1c:b8:03:5d:8c:7e:21:ab:
73:0a:4e:de:2e:24:d5:df:e1:1c:8a:e4:dc:16:68:32:e9:dc:
4b:1c:91:18:23:5f:d9:73:42:c6:a6:ee:0c:80:1d:24:c9:02:
06:d2:10:74:08:50:1e:34:63:b6:49:9b:32:f4:8c:c3:0f:51:
83:7c:06:f3:a0:2e:05:0f:49:34:00:dd:f7:32:0d:3e:f5:cc:
e2:39:0b:0d:29:b8:6d:fe:b0:55:e2:fa:26:42:ce:15:f0:8f:
66:01:19:29:17:bc:42:b9:0e:de:29:33:fb:ac:80:58:44:88:
a8:87:d9:39:fd:09:b0:01:0e:32:70:91:cd:c5:03:aa:54:7d:
70:91:3f:73:01:24:50:f8:e8:94:89:ea:ae:e4:1a:cb:f2:0b:
70:dd:d2:6f:50:ec:39:b1:be:c9:33:9b:b9:95:8d:b9:69:17:
54:67:d2:41:8b:2c:a4:ff:6c:e8:ac:bc:9d:81:85:55:3d:f5:
3a:ee:27:30:6b:11:a7:40:4a:52:af:99:45:24:63:d7:ff:f1:
f7:02:09:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:25 2024 by rpki-client on console-fra.rpki-client.org