Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/x8QVY_V5EGstVsjI0VXNv3BLBoI.roa
File: x8QVY_V5EGstVsjI0VXNv3BLBoI.roa (raw, json)
Hash identifier: THMw22lQLettrVXxXdJElxROqdZeDO1CPK+e9xrPeE0=
Subject key identifier: C7:C4:15:63:F5:79:10:6B:2D:56:C8:C8:D1:55:CD:BF:70:4B:06:82
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC5012A86F2501F6E3974410D3C95CF67
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/x8QVY_V5EGstVsjI0VXNv3BLBoI.roa
Signing time: Mon 01 Jan 2024 12:30:37 +0000
ROA not before: Mon 01 Jan 2024 12:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210558
IP address blocks: 45.92.1.0/24 maxlen: 24
185.241.208.0/24 maxlen: 24
45.80.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 12:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:2a:86:f2:50:1f:6e:39:74:41:0d:3c:95:cf:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7c41563f579106b2d56c8c8d155cdbf704b0682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:5d:87:5a:87:e3:50:19:bc:22:82:ed:23:
43:6c:31:a1:a5:ea:0b:ce:25:57:cc:72:6b:6b:57:
a9:a8:fa:79:4e:de:31:bf:fb:19:1e:8f:4d:6b:d3:
4f:ab:87:3a:bd:90:7f:4f:2e:08:db:a4:10:42:c3:
80:9c:0e:a7:86:d0:ab:38:dd:12:5c:39:73:97:07:
5e:fe:5b:7d:d7:b2:5e:4f:23:f3:37:c7:58:c9:ad:
7e:4c:7e:80:c4:4e:12:8e:d2:41:7c:35:f2:25:c1:
a5:f5:74:78:84:23:59:61:2b:04:6e:9c:ad:66:6a:
f0:6e:75:60:fe:bb:65:38:07:55:ff:4d:b2:89:34:
2d:66:9e:45:a8:a9:9f:4a:d5:76:86:5d:0d:ed:10:
63:38:ad:db:52:a4:3f:c0:0c:d7:8b:fd:d3:ac:03:
7f:92:1e:5c:7d:64:20:2b:92:90:95:b9:78:b6:6f:
3c:5b:39:50:43:80:35:60:9c:8e:09:32:d3:6e:7d:
75:35:4f:fb:0e:5d:89:64:05:bc:d7:33:77:76:c5:
06:4a:bb:74:8e:0b:cd:86:02:4b:35:40:3e:16:02:
c4:c8:1e:cd:0c:16:53:9c:63:81:33:ac:f4:6b:3a:
8c:92:f4:0d:c4:13:8b:27:aa:86:82:0e:06:74:d7:
02:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C4:15:63:F5:79:10:6B:2D:56:C8:C8:D1:55:CD:BF:70:4B:06:82
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/x8QVY_V5EGstVsjI0VXNv3BLBoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.158.0/24
45.92.1.0/24
185.241.208.0/24
Signature Algorithm: sha256WithRSAEncryption
65:34:d3:6a:90:b6:f9:74:05:a8:5e:6b:a6:c7:88:37:f4:5d:
7e:9d:64:90:86:07:45:de:99:4d:9d:67:e1:54:7f:da:63:3a:
30:f3:6b:ca:78:df:4c:36:97:f2:e5:f1:30:82:74:61:ef:86:
7f:2e:e6:35:64:9b:d9:bb:3a:55:d8:2f:64:e2:87:36:03:4e:
a8:0b:10:ae:4b:0b:de:94:84:ae:5a:e0:02:1d:f6:0a:93:10:
e0:2f:87:3b:db:14:16:4b:f8:be:73:48:f1:9b:a8:51:cf:f5:
d8:33:34:33:2a:7a:e2:ba:d0:8e:6d:73:2b:c6:b3:d5:cc:d7:
73:93:71:07:49:11:c3:5b:9c:80:a6:da:59:90:79:2c:d1:2f:
c9:b4:37:8d:16:1f:cf:f5:af:35:5e:d0:1b:47:d7:fd:af:92:
36:93:f3:a4:a2:e3:44:49:dd:ca:d9:82:ce:66:93:b4:41:2d:
e5:e6:d3:bb:b6:00:c8:fd:84:79:8f:05:24:17:cf:00:5b:23:
7e:e4:bc:5e:30:de:b2:ea:06:b7:dd:7f:88:e2:94:76:02:f0:
76:aa:9b:2f:98:fe:4f:7f:dd:97:47:3b:90:e4:78:99:79:4d:
6a:c5:76:a9:ec:83:77:98:94:e1:1b:f1:f0:a5:9e:ef:09:56:
66:68:5c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 17:51:05 2024 by rpki-client on console-ams.rpki-client.org