Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/adVsQNpfNGPwIND6nq7SV6MqZLY.roa
File: adVsQNpfNGPwIND6nq7SV6MqZLY.roa (raw, json)
Hash identifier: FIf88tH8LgCrOE+94DpxcQpXhKCllTkxp/uuygRRuNY=
Subject key identifier: 69:D5:6C:40:DA:5F:34:63:F0:20:D0:FA:9E:AE:D2:57:A3:2A:64:B6
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018B8A06D6CADFD16499B7E74808A4C625E4
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/adVsQNpfNGPwIND6nq7SV6MqZLY.roa
Signing time: Wed 01 Nov 2023 08:36:25 +0000
ROA not before: Wed 01 Nov 2023 08:36:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213220
IP address blocks: 45.8.209.0/24 maxlen: 24
213.108.196.0/24 maxlen: 24
2a0b:da00::/29 maxlen: 29
2a0c:aa40::/29 maxlen: 29
2a0d:2dc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8a:06:d6:ca:df:d1:64:99:b7:e7:48:08:a4:c6:25:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Nov 1 08:36:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69d56c40da5f3463f020d0fa9eaed257a32a64b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:19:5d:e3:13:a3:0c:de:3d:d0:4e:5c:26:
df:89:a1:a0:74:38:42:97:09:89:42:af:5c:9d:04:
1a:8b:ba:8a:07:bc:4b:08:fe:2e:91:05:93:c0:fd:
db:c6:b6:d7:5c:10:bb:45:ae:6e:37:39:f2:38:5d:
b1:f2:28:57:73:2e:73:35:18:a2:b1:08:00:9e:ab:
df:9a:ef:01:29:f6:7d:a0:9e:d6:ea:22:8c:b8:20:
e2:70:cd:31:51:37:9f:48:48:8b:0e:2f:53:a2:3a:
44:0d:5a:74:3b:3f:48:9e:3d:94:0d:f0:b3:0c:0e:
fa:0d:ec:ed:65:43:db:86:6b:73:b0:bc:f8:fa:31:
17:c9:1d:a1:75:9b:f9:46:d4:77:93:0b:dc:4e:f4:
74:83:27:fb:9a:d2:62:ae:df:f1:28:70:8e:66:10:
80:13:93:40:56:b8:71:77:f4:91:fe:89:ca:b4:62:
82:07:3f:69:0e:2d:56:41:bc:8b:8c:24:38:87:5f:
6a:1b:70:14:8c:32:0d:ff:0e:f2:72:40:49:ad:66:
5f:83:7c:bb:3d:bc:57:17:c0:4b:90:01:14:b3:98:
ea:82:e3:07:c3:c7:3e:10:9d:c4:c9:5e:9b:02:a3:
c2:c3:b1:0b:7b:ab:38:f4:a9:78:8d:2a:ee:7f:a2:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D5:6C:40:DA:5F:34:63:F0:20:D0:FA:9E:AE:D2:57:A3:2A:64:B6
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/adVsQNpfNGPwIND6nq7SV6MqZLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.209.0/24
213.108.196.0/24
IPv6:
2a0b:da00::/29
2a0c:aa40::/29
2a0d:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
41:3e:9a:30:a6:3a:9e:3d:60:8d:2c:52:93:35:79:88:b8:49:
5c:4c:4f:69:b3:15:7d:8f:69:ca:79:d4:ec:ff:dd:eb:0e:a1:
e8:a6:9e:00:79:0d:5a:3c:81:dc:a0:45:44:ad:5f:f4:3a:fc:
4f:3e:ec:43:cb:f5:dd:58:2c:92:63:eb:76:66:78:e0:77:47:
45:65:20:fd:c1:ad:71:b9:40:42:71:61:0c:59:9b:76:6b:f6:
78:74:b6:01:b2:88:e1:9a:30:9d:43:2b:43:58:4a:52:d1:79:
2d:fa:bf:85:1e:9d:56:cd:bf:03:99:b0:a6:49:b1:fc:5f:39:
1d:7e:26:0f:bc:dd:3c:dd:c1:9d:31:14:61:fb:c4:08:77:ec:
75:82:fe:0a:63:43:e0:03:87:5e:cf:5e:6f:80:df:77:48:f2:
11:17:47:ac:68:f7:c5:ad:7c:40:92:3e:30:f8:3a:ac:c8:09:
e4:70:51:5c:c4:24:f7:9e:f2:24:57:53:29:31:af:00:26:79:
85:1c:d8:a6:b9:b8:eb:ec:69:aa:35:c5:e4:33:ee:42:0b:9c:
4b:f6:00:5e:81:7c:3a:4d:14:6d:5a:03:bc:6a:e8:4e:00:d6:
ca:59:45:44:2f:bc:cc:c8:a3:c2:02:60:be:9f:62:10:81:f0:
b2:2c:40:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org