Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vq6mUQufBSNe6N9am8-u2Dmxido.roa
File: vq6mUQufBSNe6N9am8-u2Dmxido.roa (raw, json)
Hash identifier: nTJvEizo6sxvWpYKpu0tDtSovjZ+htaNQ15IZYolAss=
Subject key identifier: BE:AE:A6:51:0B:9F:05:23:5E:E8:DF:5A:9B:CF:AE:D8:39:B1:89:DA
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0185FEAE84FE8CD9408E89BAB535DA0402A8
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vq6mUQufBSNe6N9am8-u2Dmxido.roa
Signing time: Sun 29 Jan 2023 17:58:48 +0000
ROA not before: Sun 29 Jan 2023 17:58:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58110
IP address blocks: 45.88.169.0/24 maxlen: 24
45.92.162.0/24 maxlen: 24
45.15.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fe:ae:84:fe:8c:d9:40:8e:89:ba:b5:35:da:04:02:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 29 17:58:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=beaea6510b9f05235ee8df5a9bcfaed839b189da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:96:a0:82:d1:48:63:16:c6:47:99:67:91:fb:
72:36:cd:1a:ed:d2:cf:a4:79:d3:cf:3a:8b:a7:d0:
da:4c:2a:67:5b:96:bf:50:0f:c7:a8:58:d6:2e:49:
53:17:0e:9d:e7:2f:8a:3f:39:76:02:12:e6:3a:ad:
b7:cd:35:5f:0f:83:cc:d4:d7:84:20:10:bc:4b:c6:
ba:76:59:9f:9e:ca:4d:84:d8:a0:39:38:cf:75:ee:
2d:25:90:4e:97:5c:4b:b9:88:3b:71:ad:00:47:f6:
1c:09:04:a2:4c:81:2b:67:95:ac:75:4f:62:96:dc:
5f:66:64:78:1e:16:d5:f6:34:b5:fd:3f:66:64:c8:
c5:10:88:06:c5:fa:e8:d1:b1:9f:c2:8c:54:5c:a0:
27:1c:55:9f:e2:dd:0a:c7:39:2b:31:aa:6d:c8:07:
bb:b4:be:08:2e:cb:6a:54:f5:a9:57:53:7c:61:cf:
bb:db:a0:3f:4e:c6:7b:82:ed:b2:da:2e:eb:b7:d5:
fa:e4:c8:69:6e:d6:44:5c:28:7b:b6:a0:f2:54:25:
e7:8b:e2:89:3c:4a:43:4b:98:df:6c:d3:ff:48:b2:
b5:4a:25:7c:e6:e5:c3:8a:f4:5a:62:d2:29:86:c0:
00:0e:f7:2d:15:ab:97:12:55:41:a3:ff:9c:8b:21:
86:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AE:A6:51:0B:9F:05:23:5E:E8:DF:5A:9B:CF:AE:D8:39:B1:89:DA
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vq6mUQufBSNe6N9am8-u2Dmxido.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.184.0/24
45.88.169.0/24
45.92.162.0/24
Signature Algorithm: sha256WithRSAEncryption
08:d4:80:11:d2:bb:13:c7:1f:12:da:5c:d1:f2:5e:50:1d:eb:
34:99:35:a3:15:a7:3a:b0:fb:93:65:78:2d:bd:bb:bb:85:40:
f6:b8:a1:82:50:31:1f:0c:8b:a4:00:26:45:f0:f5:f2:c6:7a:
91:25:55:62:77:de:80:23:ab:4f:13:2e:10:e3:89:a3:30:af:
40:56:2e:4f:63:fc:db:de:8b:ae:0d:ba:d4:e2:b8:02:e6:60:
d8:7c:05:f6:bb:da:51:29:0f:f8:7a:0f:59:47:91:b6:00:f4:
88:cf:24:8d:04:ac:f9:6b:11:dc:4d:d9:d9:f4:ff:8c:61:aa:
29:1a:95:a6:a6:c9:35:35:1d:ca:19:a2:c0:a8:59:5f:0a:ea:
f7:c7:67:af:7f:03:48:04:ac:e3:fd:ab:7e:7a:87:d0:7d:f7:
dc:fd:a5:da:c9:d3:e4:1a:d7:91:59:63:5d:d2:cd:5f:49:0b:
a9:70:76:5e:2c:98:df:17:82:b6:bd:9c:2d:0f:f4:c6:fa:74:
2a:1e:51:a4:f9:69:9c:77:86:56:8a:ba:e0:67:f4:15:b4:da:
2f:17:40:63:e3:ea:59:66:de:b2:b5:b9:1a:76:f6:24:7b:0f:
d7:e7:f5:5f:8c:72:ff:6e:e5:9a:36:49:bd:78:86:ba:04:39:
8a:72:12:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:03 2024 by rpki-client on console-ams.rpki-client.org