Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/7VjFHcrs-Mi9TJlRrxHLeY8smZI.roa
File: 7VjFHcrs-Mi9TJlRrxHLeY8smZI.roa (raw, json)
Hash identifier: R31GBBFMCJTq6hk4T2za9ytix+/05tWDjb3j/CoANb4=
Subject key identifier: ED:58:C5:1D:CA:EC:F8:C8:BD:4C:99:51:AF:11:CB:79:8F:2C:99:92
Certificate issuer: /CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Certificate serial: 0189984158C0C386EF58CB7C4EFF510D5817
Authority key identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/7VjFHcrs-Mi9TJlRrxHLeY8smZI.roa
Signing time: Thu 27 Jul 2023 16:49:26 +0000
ROA not before: Thu 27 Jul 2023 16:49:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198895
IP address blocks: 45.140.133.0/24 maxlen: 24
46.229.242.0/24 maxlen: 24
46.229.241.0/24 maxlen: 24
193.16.149.0/24 maxlen: 24
2a13:2580::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:41:58:c0:c3:86:ef:58:cb:7c:4e:ff:51:0d:58:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Validity
Not Before: Jul 27 16:49:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed58c51dcaecf8c8bd4c9951af11cb798f2c9992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:11:dd:6b:5d:90:69:57:17:6a:fe:fb:a7:
94:09:1f:17:ea:f8:cc:f6:28:81:a7:8f:83:6d:26:
20:33:b3:e2:c9:72:f8:61:b7:4f:a1:06:ba:f9:58:
52:ce:14:1b:a9:a4:e8:a7:cc:5f:ee:45:63:a9:d8:
32:c4:87:f8:e8:81:81:00:f9:9b:9a:46:38:c9:c1:
a4:b8:84:d4:36:c0:13:64:2f:e7:b8:ff:75:10:6a:
56:1e:7c:68:75:00:27:9c:ff:b9:6b:87:f1:8d:24:
e6:8a:d4:47:61:57:62:65:e8:1f:51:d1:90:f5:d8:
9a:a4:ea:c1:10:5a:40:d0:d5:52:c8:58:a6:92:48:
0b:9c:7e:15:a9:25:b1:90:c3:b1:50:69:5c:8c:13:
68:f8:ce:21:5a:de:b6:a6:be:8d:91:d0:fb:33:d4:
43:a7:2c:b9:ec:61:8e:35:12:11:22:a2:32:24:a6:
37:2c:0a:f4:99:1f:f3:30:d1:66:68:2b:61:33:e9:
2d:e6:2c:f5:44:44:b7:bb:f1:24:47:5e:ad:7f:0b:
e3:45:e1:fd:a5:ea:b8:34:60:18:0e:46:d4:c5:59:
99:76:8c:7c:4b:b2:ec:64:99:61:c2:42:b4:92:cb:
f8:2b:b4:ba:2e:1d:9c:31:56:ca:17:40:3e:d3:b5:
1f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:58:C5:1D:CA:EC:F8:C8:BD:4C:99:51:AF:11:CB:79:8F:2C:99:92
X509v3 Authority Key Identifier:
keyid:B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/7VjFHcrs-Mi9TJlRrxHLeY8smZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.133.0/24
46.229.241.0-46.229.242.255
193.16.149.0/24
IPv6:
2a13:2580::/29
Signature Algorithm: sha256WithRSAEncryption
68:79:51:09:c0:ae:f7:1c:f7:d8:18:95:7c:c0:39:43:87:5d:
c2:ef:6a:c0:88:68:2e:9a:f6:fe:48:18:db:cb:16:20:78:7e:
1b:0e:b9:cf:c1:97:47:e0:de:1f:81:2f:00:33:c0:fd:a3:be:
81:74:c4:56:d7:4a:fc:5b:4a:af:51:a3:15:57:47:15:a9:b2:
61:a8:61:e7:9f:f3:1e:98:14:58:d8:f6:f9:1e:ef:b9:0c:b0:
0b:70:b7:b6:35:87:dd:ff:e7:bd:59:45:fd:93:17:07:4f:f2:
19:83:67:28:f8:39:92:9a:7e:1d:ce:2b:81:a5:b6:70:0e:6a:
41:ec:c5:30:c4:20:24:82:08:ae:97:a5:7d:98:7c:88:0f:af:
a1:b6:69:d1:78:4c:45:e0:9c:9f:c6:d7:44:e8:da:5c:b2:26:
31:54:f6:59:7f:ee:01:77:51:5b:08:f9:56:09:f8:f4:20:f2:
e6:05:c2:ab:bb:9d:51:58:f4:19:b3:87:80:aa:ff:ec:a4:ca:
e9:92:ad:a3:4d:05:72:d5:f0:56:eb:16:3c:a1:37:b9:2b:46:
ab:b9:0e:54:e4:78:96:a5:35:75:c2:0e:a6:d2:2c:b4:3c:23:
3b:cc:aa:ba:4f:d2:29:95:35:32:cd:e3:fa:03:e0:72:54:b3:
d9:0d:01:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:34 2024 by rpki-client on console-fra.rpki-client.org