Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/t2ot1pX6GgQC7hF51HDGYjhs5PU.roa
File: t2ot1pX6GgQC7hF51HDGYjhs5PU.roa (raw, json)
Hash identifier: x1TOeW+JgYZlLIZs3TrgnaVSzDKFXFhFSljyvQeU4wU=
Subject key identifier: B7:6A:2D:D6:95:FA:1A:04:02:EE:11:79:D4:70:C6:62:38:6C:E4:F5
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C446B3C733D3AA4BB2FDC29E2B04F
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/t2ot1pX6GgQC7hF51HDGYjhs5PU.roa
Signing time: Mon 02 Jan 2023 05:55:07 +0000
ROA not before: Mon 02 Jan 2023 05:55:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213220
IP address blocks: 45.8.209.0/24 maxlen: 24
45.9.74.0/24 maxlen: 24
45.9.74.0/23 maxlen: 23
213.108.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Jan 2023 09:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:44:6b:3c:73:3d:3a:a4:bb:2f:dc:29:e2:b0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b76a2dd695fa1a0402ee1179d470c662386ce4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c4:ae:74:ef:e3:73:ab:f2:d1:2e:e7:5a:ee:
af:25:a7:cd:16:93:75:19:e8:dd:51:1f:d7:ed:47:
60:6f:bc:b7:4f:4f:21:85:9d:df:95:af:d1:bb:f6:
78:2a:04:11:2a:5a:20:a4:c2:d0:2d:b6:4c:a6:e5:
a9:1a:39:3b:c4:d3:3c:ab:32:b6:d4:e1:77:35:f8:
17:81:36:2f:72:8f:aa:95:d9:17:9e:ed:6a:0f:74:
69:1e:a0:f4:5e:3a:cc:65:97:ad:0a:87:18:b8:5e:
10:2b:f7:b2:84:40:ae:0e:50:5e:dc:03:31:ef:eb:
17:5b:ae:2f:2f:a6:52:a2:2a:08:5f:92:41:ea:1a:
ae:ea:83:d2:94:ca:59:22:d9:9f:0c:2d:8b:93:71:
ef:be:32:42:8e:d4:22:00:05:26:8b:fa:09:e7:e6:
71:e1:94:3a:97:7f:0f:55:2a:25:8e:3d:75:e9:2a:
5a:5d:05:fe:cf:a9:8d:a0:97:83:f2:95:a1:9e:e3:
cb:9e:5c:49:38:5d:72:d5:53:4a:40:1a:d1:8b:59:
44:39:68:36:dc:0e:82:72:92:b6:44:f9:15:c8:e0:
01:7b:f4:cb:4b:d2:81:6e:c4:01:51:92:43:07:a7:
d5:35:4a:22:7a:42:bc:18:40:0d:95:b3:8c:60:65:
15:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6A:2D:D6:95:FA:1A:04:02:EE:11:79:D4:70:C6:62:38:6C:E4:F5
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/t2ot1pX6GgQC7hF51HDGYjhs5PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.209.0/24
45.9.74.0/23
213.108.196.0/24
Signature Algorithm: sha256WithRSAEncryption
37:96:f1:f8:a8:14:f7:69:32:81:7a:29:1b:72:10:08:ea:50:
0d:cf:3b:6e:5d:ec:0a:fb:23:3d:6b:f0:3c:da:38:77:7f:9b:
a0:bc:aa:76:73:c7:4a:d0:36:79:5d:95:08:ff:80:b4:68:46:
27:9c:e3:5e:7b:84:2a:1d:87:bf:59:5d:f5:dc:f0:c9:34:ce:
3c:fa:d4:0a:d3:c7:0a:f6:31:8a:74:1f:c4:e7:42:3b:37:61:
b1:ee:85:51:f0:2c:20:ed:6d:c3:da:0e:f6:47:67:3b:06:9b:
ac:9c:c4:28:f3:2d:09:cd:9a:b5:84:e9:ad:89:24:55:4a:20:
bd:21:40:11:53:77:1d:42:09:4d:52:9a:90:e5:28:0d:ff:d2:
e5:e5:13:7f:44:f1:32:b9:94:f3:e9:57:d1:41:b3:58:fd:f9:
cf:23:99:32:e8:8b:02:8b:a8:31:68:52:e2:2a:27:75:1d:92:
4c:fc:c1:58:08:42:75:7a:61:97:1e:b0:b3:eb:7f:c4:5e:81:
89:d1:d8:bb:40:6a:4d:ff:2b:2c:02:84:77:8d:1a:d2:6b:e5:
1f:ad:15:0a:ac:47:a9:3c:5d:b7:d5:64:71:b0:6f:b0:67:2d:
78:b2:f4:70:ad:53:e5:ef:9e:6c:b8:12:0d:dc:c2:61:52:71:
90:fd:64:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org