Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/Q8EijZe_5qhzrGjjyaLRPds629E.roa
File: Q8EijZe_5qhzrGjjyaLRPds629E.roa (raw, json)
Hash identifier: IP4NswKRPmeXacjqFU4A3a3ktDtMrMdtZErbYBMiREs=
Subject key identifier: 43:C1:22:8D:97:BF:E6:A8:73:AC:68:E3:C9:A2:D1:3D:DB:3A:DB:D1
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 018BAE60E0DB04057699446626996C1C5441
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/Q8EijZe_5qhzrGjjyaLRPds629E.roa
Signing time: Wed 08 Nov 2023 10:01:06 +0000
ROA not before: Wed 08 Nov 2023 10:01:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 217.197.107.0/24 maxlen: 24
45.15.157.0/24 maxlen: 24
45.15.159.0/24 maxlen: 24
217.196.98.0/24 maxlen: 24
217.196.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Dec 2023 11:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:60:e0:db:04:05:76:99:44:66:26:99:6c:1c:54:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Nov 8 10:01:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43c1228d97bfe6a873ac68e3c9a2d13ddb3adbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:65:a2:a7:e4:f9:4a:f6:5e:18:3a:85:0d:ca:
7c:2d:48:5e:66:ed:95:ae:07:00:e4:6c:19:df:98:
c7:7c:1a:4e:a5:7f:92:1b:04:af:2e:20:bc:d5:c2:
2d:4c:92:35:54:3b:6c:0b:2c:7b:95:29:f0:be:85:
85:2e:46:63:8b:7b:03:fd:55:3b:ed:b9:fd:a5:6f:
c6:ee:b8:fe:e4:ff:9f:e5:8d:88:b3:aa:fe:83:be:
9e:f3:f9:4c:13:23:46:3f:c2:95:2b:6c:31:79:da:
c8:97:51:3e:28:c8:37:bf:84:18:8e:7d:ab:ba:cb:
09:40:2b:3f:2c:c6:72:5f:43:4a:59:29:f4:81:f7:
93:33:f9:ad:f1:04:83:0f:eb:ed:ef:ee:e1:f1:cc:
b1:76:8f:c6:94:5d:5d:a6:8f:b8:1b:fd:30:bf:d8:
13:f5:0f:3c:6e:09:d7:b2:20:12:57:a2:82:ed:0b:
a8:44:2f:51:2e:7c:01:07:0b:7a:f1:c0:e3:d8:05:
e4:7f:27:3a:ec:27:f8:47:e0:9c:86:22:aa:88:c3:
87:06:51:02:41:33:02:75:95:a2:b2:cb:62:61:d3:
58:82:1f:2b:0b:4e:41:1b:58:a6:47:0b:d6:41:54:
74:f6:95:a8:85:a1:7e:6e:38:fe:0b:6b:8c:33:3c:
55:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C1:22:8D:97:BF:E6:A8:73:AC:68:E3:C9:A2:D1:3D:DB:3A:DB:D1
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/Q8EijZe_5qhzrGjjyaLRPds629E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.157.0/24
45.15.159.0/24
217.196.98.0/24
217.196.103.0/24
217.197.107.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d6:8b:0d:cd:2a:c8:b8:1f:d3:ac:d4:68:92:db:e1:55:ac:
16:dc:e5:42:0e:be:90:6d:7d:9a:3e:8d:5a:03:70:56:eb:de:
02:40:cd:d8:d5:92:51:c7:f7:84:2e:86:7d:7e:93:9a:9d:09:
2f:2a:01:42:d3:6e:a0:ac:3c:bc:62:36:71:0b:9e:33:0b:8f:
66:69:86:0a:2e:75:ef:06:8e:1b:94:10:b2:5a:06:67:36:7f:
cf:46:2f:cf:5b:95:12:14:67:89:24:ca:fd:21:ba:ab:39:e6:
e2:b7:4a:75:d7:6a:52:4b:43:c0:e5:8c:25:0e:d6:e2:bd:f8:
ca:08:04:9d:7b:c7:3f:9f:f2:97:95:ea:d0:58:7c:4f:7e:ed:
ba:8b:63:65:53:b3:2a:51:ca:fa:17:dd:a5:ea:52:f2:25:fa:
35:46:4f:63:00:cb:1d:22:72:fa:00:4e:74:f4:a6:db:47:58:
69:81:4a:56:58:49:a7:28:c4:7c:ca:70:41:76:84:1d:b8:bb:
c3:eb:ff:2d:14:cf:a5:b0:0d:0e:7d:74:80:cd:f8:6e:8c:c6:
93:46:fe:6c:c4:ad:25:d6:c8:3d:90:a0:04:14:bd:4e:b5:b0:
e7:14:d8:a4:fe:c7:cf:9f:12:41:61:87:29:7f:6b:3e:29:ee:
11:1c:14:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:48 2024 by rpki-client on console-ams.rpki-client.org