Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/4Q-_0IhaZkqr2RDfaPv11wsflC8.roa
File: 4Q-_0IhaZkqr2RDfaPv11wsflC8.roa (raw, json)
Hash identifier: MXDS8pjZcXo5CajoScgxrZgnXzE6kEAyHaGAjU/YCho=
Subject key identifier: E1:0F:BF:D0:88:5A:66:4A:AB:D9:10:DF:68:FB:F5:D7:0B:1F:94:2F
Certificate issuer: /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Certificate serial: 018CC492262E0E0B122623053EF72EE809EB
Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/4Q-_0IhaZkqr2RDfaPv11wsflC8.roa
Signing time: Mon 01 Jan 2024 10:29:21 +0000
ROA not before: Mon 01 Jan 2024 10:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203726
IP address blocks: 45.84.170.0/24 maxlen: 24
45.84.168.0/23 maxlen: 23
45.84.171.0/24 maxlen: 24
185.124.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 09:18:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:26:2e:0e:0b:12:26:23:05:3e:f7:2e:e8:09:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Validity
Not Before: Jan 1 10:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e10fbfd0885a664aabd910df68fbf5d70b1f942f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:35:f9:f4:d7:37:d6:c5:5e:c5:da:1e:52:56:
8a:e4:52:ef:62:eb:2f:8c:bf:41:29:48:7f:c4:78:
43:24:2b:a8:75:e4:83:ab:82:b5:53:2d:6f:7e:4d:
2a:84:51:c8:4c:08:47:37:6a:06:e1:e3:49:a1:53:
08:60:cf:62:25:2c:b2:92:bd:f3:a0:9b:e5:60:f1:
e3:3e:9b:59:14:e9:f4:da:67:46:35:87:5e:b7:c3:
b4:c2:e8:4a:a8:8f:9f:43:35:03:bf:78:95:d4:ba:
a0:8c:d5:db:e5:0d:e5:df:a3:54:b8:e2:fc:e7:a9:
35:68:2c:e1:28:a9:e6:ac:71:bc:14:75:ce:a6:fe:
0c:c2:40:f2:cb:6e:12:5c:4e:49:1f:ce:da:d3:14:
83:51:f9:2a:0a:d1:14:a5:e4:36:3c:4f:a9:ba:7e:
a5:a0:44:16:9d:54:2e:e1:4b:92:95:29:cc:f1:15:
07:3b:fe:5d:c3:68:0d:d4:e5:83:32:b1:1d:33:a3:
29:d7:f6:98:f1:93:f3:93:f7:0a:38:44:13:27:40:
10:a7:50:02:37:de:98:8e:00:d9:08:47:e2:aa:38:
9e:78:d0:c1:e6:ec:c9:57:bc:1d:81:88:85:4a:82:
61:db:3b:87:6a:af:b4:4f:32:67:75:eb:d9:8d:2e:
43:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0F:BF:D0:88:5A:66:4A:AB:D9:10:DF:68:FB:F5:D7:0B:1F:94:2F
X509v3 Authority Key Identifier:
keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/4Q-_0IhaZkqr2RDfaPv11wsflC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.168.0/22
185.124.180.0/22
Signature Algorithm: sha256WithRSAEncryption
45:c4:9c:11:53:e5:77:8f:09:4e:80:30:05:59:08:b9:a4:f6:
05:f9:67:0d:58:f9:06:2d:ef:7a:5e:6e:00:4e:ba:e4:98:b9:
2d:4e:3c:b4:22:e9:65:45:b2:03:35:0b:d4:41:43:ff:c0:ad:
b0:b4:a6:35:75:0d:59:51:27:dd:79:72:81:c4:05:b7:93:c0:
08:a2:6a:19:23:e4:1b:ab:f4:1a:c5:6f:b1:c0:15:ee:5c:22:
ae:82:90:f8:f3:2c:bb:95:c3:a3:2b:85:99:de:1b:6e:e0:85:
ce:86:42:e3:6a:53:1c:50:26:10:55:a1:f6:08:a2:51:b4:e0:
3e:8c:2f:a8:f5:6d:a0:86:da:11:8c:ee:0d:1e:08:f6:2e:d5:
3d:98:65:83:0e:f1:dc:a5:73:7d:9b:fd:ee:a1:60:51:b1:3e:
7f:5e:cc:47:10:a9:f9:4b:e4:5d:f2:03:70:6e:4e:1b:c8:b0:
79:2d:ca:b1:97:c2:29:45:33:fd:0f:32:f0:6d:71:d9:0a:0a:
24:a3:f8:76:27:c7:12:1d:ab:24:f4:84:6d:43:5e:f4:fb:45:
5a:0b:e4:b2:69:90:a9:5d:29:54:e0:7d:63:01:ee:0f:a3:0a:
45:4c:65:08:ae:31:f4:99:be:9a:9d:a0:93:97:9f:c3:1c:48:
f3:4e:b7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:02:55 2025 by rpki-client