Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/M8Vk_1AZ0q8ZO5chlfJGbZBlG8Y.roa
File: M8Vk_1AZ0q8ZO5chlfJGbZBlG8Y.roa (raw, json)
Hash identifier: Bufh01djABlnhsfBSVzh+cFM7c/Y71G3fKgxZOG+IxM=
Subject key identifier: 33:C5:64:FF:50:19:D2:AF:19:3B:97:21:95:F2:46:6D:90:65:1B:C6
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018B107682ABAC6E48FE695AA751751EDBBA
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/M8Vk_1AZ0q8ZO5chlfJGbZBlG8Y.roa
Signing time: Sun 08 Oct 2023 18:04:44 +0000
ROA not before: Sun 08 Oct 2023 18:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.149.92.0/24 maxlen: 24
80.246.231.0/24 maxlen: 24
80.246.228.0/24 maxlen: 24
80.246.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Oct 2023 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:10:76:82:ab:ac:6e:48:fe:69:5a:a7:51:75:1e:db:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Oct 8 18:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33c564ff5019d2af193b972195f2466d90651bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:ba:26:b7:9b:6e:63:f0:fb:20:c1:24:3f:
b8:5f:c9:a6:5d:32:ae:49:95:79:49:83:66:2b:32:
30:7c:8c:e4:00:82:3b:92:6d:2a:9a:6f:de:d0:3b:
07:0a:23:b1:62:03:46:78:37:b0:bb:0d:63:3e:90:
dd:04:5b:5b:90:d6:e9:8d:f5:b3:63:2e:38:20:55:
b4:49:79:98:a6:34:2d:2a:b8:6d:f0:e4:f5:88:4d:
3b:07:02:40:ae:cd:e7:1f:da:65:74:fe:f8:f6:3f:
26:c8:90:66:cf:9c:3e:d7:44:43:5e:93:5b:14:d4:
e0:71:45:96:95:b3:a3:e9:47:66:4b:8b:6b:e6:a6:
15:49:94:ea:fe:f3:ef:bf:6f:f8:2d:dc:8c:5e:98:
cc:68:07:66:b8:f0:d7:89:0d:43:92:c9:31:1c:4f:
c3:bf:54:02:01:74:58:c3:cd:33:52:00:44:2c:5c:
8d:e2:80:0f:d3:74:b9:2b:87:c6:d5:87:1f:f6:6e:
b7:3e:aa:58:9b:57:69:ce:89:cd:bd:34:1c:21:f7:
da:56:84:83:38:9c:e0:21:76:a2:3a:5c:8b:e1:24:
65:66:32:5b:c3:b9:85:e1:5a:a8:d9:3f:75:38:e2:
ed:95:1f:12:d6:54:90:3b:15:af:14:02:11:3b:c0:
cf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C5:64:FF:50:19:D2:AF:19:3B:97:21:95:F2:46:6D:90:65:1B:C6
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/M8Vk_1AZ0q8ZO5chlfJGbZBlG8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.92.0/24
80.246.228.0/23
80.246.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:6b:af:33:a8:3c:1e:b0:06:87:c9:be:a4:e3:c8:b8:8c:ca:
82:9e:ad:3a:af:db:96:34:67:c5:d0:0f:e7:92:b1:05:12:3e:
43:aa:e0:b9:cf:c4:f0:c8:d7:84:90:39:6b:98:1d:a4:d6:4c:
10:87:62:0a:b0:fc:ce:9b:bd:28:4d:f9:26:43:ac:60:24:72:
75:39:d2:e4:0c:7a:5d:07:36:a9:b8:f7:56:fb:ee:a4:98:48:
37:3f:71:87:3f:81:57:d0:86:10:93:0d:98:0a:d5:6f:52:51:
b6:a4:dd:2d:08:01:4d:19:14:f8:0b:27:a5:bd:d5:e8:87:a7:
3b:cc:f4:c1:b0:73:a3:57:58:85:28:cb:08:97:33:87:87:0a:
ee:c8:8c:d8:f0:97:d9:62:b5:4b:f9:9d:c0:f8:ab:30:f7:38:
bf:83:92:f2:93:a1:90:16:5f:03:bb:fb:40:ea:46:bd:ed:02:
bc:3b:ca:19:c4:84:8b:2b:46:f3:52:2b:3d:fe:3a:b4:3f:8f:
cd:d0:69:84:27:94:d6:b4:aa:4c:3d:45:cf:48:58:76:9e:4a:
da:53:ae:7d:eb:6b:7d:eb:e2:64:a3:b5:b8:e3:14:3c:dc:be:
3a:e2:fb:bc:a6:24:60:37:c6:35:18:b7:21:35:71:42:7c:16:
81:5d:71:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:52 2024 by rpki-client on console-fra.rpki-client.org