Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/eLgEs5ZcPkWOPEWQcCRFNv-n3TY.roa
File: eLgEs5ZcPkWOPEWQcCRFNv-n3TY.roa (raw, json)
Hash identifier: z1qUq4eybIBd2sVYiZiYirixdzVAx6vd4Ypdwc4BqQ4=
Subject key identifier: 78:B8:04:B3:96:5C:3E:45:8E:3C:45:90:70:24:45:36:FF:A7:DD:36
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 018CC5DD122B0F6C7381521FABD70F39E43E
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/eLgEs5ZcPkWOPEWQcCRFNv-n3TY.roa
Signing time: Mon 01 Jan 2024 16:30:48 +0000
ROA not before: Mon 01 Jan 2024 16:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20668
IP address blocks: 45.145.19.0/24 maxlen: 24
45.135.224.0/24 maxlen: 24
45.139.68.0/24 maxlen: 24
45.91.4.0/24 maxlen: 24
45.91.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:12:2b:0f:6c:73:81:52:1f:ab:d7:0f:39:e4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 1 16:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78b804b3965c3e458e3c459070244536ffa7dd36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:99:b5:d9:1e:df:38:e5:42:b9:b5:db:b0:
b0:fc:61:27:d1:06:ec:73:d2:6a:23:55:bf:f3:3d:
60:52:1d:a0:88:aa:ac:68:98:be:4e:98:a0:db:7b:
2f:34:42:9e:35:6f:8d:94:69:cf:e5:66:31:6b:46:
f2:49:2e:86:8f:b3:ef:36:82:0f:91:51:04:e3:95:
e8:c2:37:a3:93:e9:77:70:35:29:81:af:9b:61:c4:
4a:76:31:d3:cc:b1:76:ef:2c:7a:a2:66:07:41:7f:
e4:16:13:8c:f1:c9:1a:79:11:8f:e2:60:42:45:39:
6d:f8:cc:de:61:85:1e:a5:79:ec:42:c6:96:83:a3:
d3:f2:90:60:88:c3:78:30:19:ce:7f:52:97:fe:5c:
fa:e5:7d:4f:48:56:ed:6a:8d:47:9d:b9:5d:e8:6c:
3e:f7:b1:88:98:2c:52:e6:12:89:c1:8a:a2:bf:51:
40:a1:f5:b4:c8:cf:88:3f:2e:fe:3a:d2:70:e7:ba:
ea:74:2d:1e:45:46:47:7f:22:7c:18:8a:d6:25:d7:
d1:a9:27:d4:0b:06:56:4e:2b:c2:d2:ea:c0:d1:ea:
3c:9e:d0:9f:dd:02:21:29:fb:ab:91:86:61:89:93:
2a:88:19:59:72:42:77:d1:5a:0f:f5:4e:2c:53:2b:
65:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B8:04:B3:96:5C:3E:45:8E:3C:45:90:70:24:45:36:FF:A7:DD:36
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/eLgEs5ZcPkWOPEWQcCRFNv-n3TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.4.0/24
45.91.6.0/24
45.135.224.0/24
45.139.68.0/24
45.145.19.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:57:bc:94:f8:5c:b1:87:ab:c6:e9:86:99:00:f7:8a:5c:85:
ca:78:2f:d8:bd:f5:50:10:fd:77:2e:dc:f2:1c:9b:0e:bb:48:
4e:6f:50:e5:83:c1:75:eb:7e:c9:41:65:c5:de:82:f5:f0:5c:
f8:56:96:19:de:99:59:06:00:47:85:f8:39:b2:46:94:0c:7e:
97:c9:45:c7:90:9d:19:da:3d:5c:ac:f5:7e:2c:b2:c1:17:d4:
d1:65:44:e4:33:6d:0d:ed:94:9d:95:31:70:49:56:68:3a:a3:
15:89:30:9b:f0:df:4a:0c:75:81:d4:a8:88:71:ac:da:11:b1:
8a:c1:62:f8:6b:00:5b:09:e4:78:30:6f:d1:65:b0:35:02:c4:
9c:0b:b5:3c:9e:4e:15:ae:15:9a:8e:62:84:b0:28:9e:1c:b6:
6b:23:9d:d8:b4:b2:a4:82:bc:86:26:57:75:8c:1d:30:13:f9:
2f:a7:76:46:09:79:18:7f:73:2d:2d:79:6c:ef:5f:e6:9e:9d:
30:d4:10:7e:92:53:21:07:73:4d:f5:10:c4:bc:c9:a3:e7:93:
08:99:56:3f:5f:eb:ed:1e:75:51:91:d0:95:27:ce:18:40:c5:
27:de:d6:cd:2c:76:03:ea:2f:62:c6:df:fa:95:a1:66:44:9e:
92:0e:74:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 6 11:38:06 2024 by rpki-client on console-fra.rpki-client.org