Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/15RdzzlB0R3gOOaADWFaEDibEEU.roa
File: 15RdzzlB0R3gOOaADWFaEDibEEU.roa (raw, json)
Hash identifier: Re5AB4yL53zLST4tY/lGQQz/AeiyaNkPQ7B0FyYo8yA=
Subject key identifier: D7:94:5D:CF:39:41:D1:1D:E0:38:E6:80:0D:61:5A:10:38:9B:10:45
Certificate issuer: /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Certificate serial: 01856FB1142731AE1016077822427E38F82D
Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/15RdzzlB0R3gOOaADWFaEDibEEU.roa
Signing time: Sun 01 Jan 2023 23:35:54 +0000
ROA not before: Sun 01 Jan 2023 23:35:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203726
IP address blocks: 45.84.170.0/24 maxlen: 24
45.84.168.0/23 maxlen: 23
45.84.171.0/24 maxlen: 24
185.124.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:14:27:31:ae:10:16:07:78:22:42:7e:38:f8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Validity
Not Before: Jan 1 23:35:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7945dcf3941d11de038e6800d615a10389b1045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:6a:fd:72:37:5a:09:8a:60:45:3e:56:a4:
3d:df:28:74:f3:eb:74:76:96:5b:0a:54:76:06:fe:
65:7c:fe:49:5c:44:b7:28:51:d2:fb:5a:30:cd:d7:
d6:0e:60:8c:57:cc:75:94:ad:76:71:56:e7:05:de:
0b:20:b1:b9:17:d6:0d:fe:b7:c8:ca:b3:90:8b:71:
1e:95:dc:13:d1:65:f2:c1:98:0c:45:9c:ff:2d:ac:
81:d5:77:fb:0b:37:96:5e:be:df:7b:e4:73:35:2c:
ee:4d:df:c0:89:f2:60:93:bb:7b:a7:d2:5d:82:17:
57:f3:03:ca:8d:44:16:0a:1d:9d:0d:b1:28:25:10:
a2:41:1e:94:66:cc:9c:53:d6:94:34:1b:ae:e3:e5:
6a:58:7e:d6:5f:40:ca:b9:43:59:4c:17:2e:51:ad:
b3:e5:5a:43:9b:e4:9e:e8:6f:8f:aa:e2:5c:e9:5f:
0b:49:99:4e:45:6f:03:e1:a8:d0:2b:f4:ec:e6:08:
28:f9:62:8c:62:70:da:e3:74:cd:ba:88:d4:35:5e:
c7:8b:81:62:e8:fb:09:f2:db:9d:ec:50:22:26:30:
fc:57:82:d6:5c:a7:e4:ee:b2:80:0f:6d:fe:01:a8:
ac:42:1f:58:e4:c7:14:ee:cd:96:9a:f4:44:84:95:
c9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:94:5D:CF:39:41:D1:1D:E0:38:E6:80:0D:61:5A:10:38:9B:10:45
X509v3 Authority Key Identifier:
keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/15RdzzlB0R3gOOaADWFaEDibEEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.168.0/22
185.124.180.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:ad:e7:a4:85:d0:04:99:de:d0:91:a4:18:90:ef:c7:3c:0a:
3a:d3:bd:95:1e:16:af:ae:19:27:e8:3d:d2:eb:f2:90:82:48:
67:48:25:7b:f7:71:04:49:83:21:cc:8b:f9:66:b2:2c:6a:af:
83:db:1b:b8:2c:18:8e:34:fe:b2:57:70:b8:85:26:ff:2a:1f:
19:2d:5e:0b:d5:fd:ac:70:17:46:38:ca:c3:97:a1:7e:22:a0:
a8:22:72:ab:88:b4:55:05:3a:4f:3c:47:3d:11:ef:e8:e8:18:
a6:84:6a:7e:05:9c:24:e0:c2:e3:47:d9:0a:33:ef:fd:c7:d8:
1b:8e:21:2e:ce:d0:c2:b6:12:cd:ad:25:c9:2d:ad:47:84:08:
fc:0b:f1:28:db:a8:ca:a6:5e:6b:1e:c9:da:ef:c3:d6:ac:e2:
ff:d8:26:c1:79:36:90:de:76:6b:e8:25:19:d0:23:51:71:e2:
34:3d:d4:6b:de:b0:95:0b:d9:3f:f7:f4:60:a7:68:1f:24:27:
25:1b:dd:cf:36:f4:bb:7f:36:84:ca:83:aa:75:65:3f:78:ec:
c0:3f:ea:3a:be:0a:0d:b7:bf:4c:69:0a:60:4b:76:b2:99:b1:
76:e3:78:94:a2:05:a8:50:c0:d6:fc:f2:bc:bd:ce:1f:d0:89:
01:95:71:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:32 2024 by rpki-client on console-ams.rpki-client.org