Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/9tHCXJrk1JH6cvAxXKaEDpxx-RY.roa
File: 9tHCXJrk1JH6cvAxXKaEDpxx-RY.roa (raw, json)
Hash identifier: S4KvfDcxI5+Rb+uaYl/Aow7dftVvf25UpQqZf0+pFZs=
Subject key identifier: F6:D1:C2:5C:9A:E4:D4:91:FA:72:F0:31:5C:A6:84:0E:9C:71:F9:16
Certificate issuer: /CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Certificate serial: 01856D13BCD351B60AC1066CE5CDB10AA5C6
Authority key identifier: 8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/9tHCXJrk1JH6cvAxXKaEDpxx-RY.roa
Signing time: Sun 01 Jan 2023 11:24:48 +0000
ROA not before: Sun 01 Jan 2023 11:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51447
IP address blocks: 45.137.20.0/24 maxlen: 24
45.137.23.0/24 maxlen: 24
45.137.22.0/24 maxlen: 24
45.137.21.0/24 maxlen: 24
185.222.58.0/24 maxlen: 24
185.222.57.0/24 maxlen: 24
185.222.56.0/24 maxlen: 24
185.222.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:bc:d3:51:b6:0a:c1:06:6c:e5:cd:b1:0a:a5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Validity
Not Before: Jan 1 11:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6d1c25c9ae4d491fa72f0315ca6840e9c71f916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:db:01:05:41:ba:56:e9:3f:d1:9a:a7:06:17:
8e:02:2a:a9:20:45:08:3e:d1:95:8b:ed:cc:8d:9c:
1e:5a:8f:03:4d:db:97:51:b0:01:74:e6:41:9c:c8:
56:e1:3e:f7:07:db:10:93:b4:fb:21:4d:cf:b1:62:
e2:26:94:d7:36:0d:46:52:a1:37:e1:ec:05:26:4c:
49:c3:ad:0d:b4:d1:b7:39:11:b2:0a:1b:2c:04:26:
9a:97:15:85:a3:be:f9:6a:1f:26:e6:ca:cb:40:e8:
dc:bc:20:95:99:a2:cd:2c:6b:51:c4:3f:e5:ef:35:
4c:d7:eb:3d:57:88:0c:1f:17:60:16:68:33:16:78:
56:43:18:34:e6:50:d8:31:99:17:2c:44:55:c1:d1:
45:b6:0e:5e:8c:6e:a9:6c:96:7c:aa:5d:d4:9d:9f:
f0:dd:72:e0:10:08:ba:04:53:b9:1d:a2:a6:6e:1a:
97:da:2d:a8:d4:ad:d1:c6:a1:cc:61:8c:75:a7:72:
d3:08:f6:94:43:a8:b1:c8:67:e7:fc:c9:8e:e7:31:
cc:a8:5a:48:48:c7:2f:5e:3e:46:22:b2:ae:9e:40:
83:63:80:b8:0e:46:23:30:92:34:d8:d9:9c:f3:99:
5d:83:46:8f:44:15:6d:47:24:86:73:c5:cd:f6:95:
ea:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D1:C2:5C:9A:E4:D4:91:FA:72:F0:31:5C:A6:84:0E:9C:71:F9:16
X509v3 Authority Key Identifier:
keyid:8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/9tHCXJrk1JH6cvAxXKaEDpxx-RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.20.0/22
185.222.56.0/22
Signature Algorithm: sha256WithRSAEncryption
97:20:99:b1:35:17:89:43:e3:e4:6e:ee:5c:ec:5e:b2:3b:bd:
41:df:82:bc:e8:66:62:81:6b:4d:97:2a:b5:01:8f:26:ad:84:
74:f4:70:7a:0c:5d:a3:82:f7:d1:eb:80:b7:a2:f9:9b:3b:11:
26:77:5e:ef:8a:67:af:38:1e:52:40:07:a7:2b:3d:e1:98:95:
a9:16:23:23:ed:b5:f1:c6:45:dd:ff:f7:61:32:ac:69:4a:a9:
28:70:d8:cd:f9:47:84:2e:c6:f9:93:fc:f1:b1:85:9b:41:a0:
71:65:aa:5b:a4:71:4f:91:de:e7:9f:b6:1c:de:09:09:ef:19:
54:46:3e:13:36:00:68:90:d5:84:99:c1:75:7c:6a:cc:6e:26:
cc:6e:72:ba:4f:ab:5a:65:6f:56:97:ac:46:66:d2:9e:1e:41:
14:fd:37:51:f7:43:49:2f:5c:4f:90:6b:d8:c9:c5:94:96:30:
5f:6d:46:0c:76:1b:af:ac:c1:84:d9:fb:e9:fe:82:de:f5:9c:
ba:17:37:fc:0b:21:25:67:dc:8c:00:56:c5:b8:fe:56:e4:b1:
79:26:7c:07:de:0b:98:c3:a2:8a:09:7e:58:bc:3b:44:70:c7:
4f:10:ef:83:e4:d0:53:08:cc:ef:82:8f:bb:ae:7e:25:81:04:
0d:59:dc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:30 2024 by rpki-client on console-fra.rpki-client.org