Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/RlQEa518fwTLuaztQ98c09x1cY8.roa
File: RlQEa518fwTLuaztQ98c09x1cY8.roa (raw, json)
Hash identifier: 4UbVpCjDtf68ipP8rHUycP+IetW9b7ysLAZSS0Vro0E=
Subject key identifier: 46:54:04:6B:9D:7C:7F:04:CB:B9:AC:ED:43:DF:1C:D3:DC:75:71:8F
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185737AD21FCEF76D87101173729CEDE00E
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/RlQEa518fwTLuaztQ98c09x1cY8.roa
Signing time: Mon 02 Jan 2023 17:15:07 +0000
ROA not before: Mon 02 Jan 2023 17:15:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202833
IP address blocks: 193.19.148.0/22 maxlen: 24
45.158.84.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:d2:1f:ce:f7:6d:87:10:11:73:72:9c:ed:e0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 2 17:15:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4654046b9d7c7f04cbb9aced43df1cd3dc75718f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a2:24:80:7c:79:6e:fc:2f:a0:c5:1f:89:ca:
30:88:c9:fa:6b:8d:35:59:69:9e:db:d8:e4:f3:9a:
dc:f3:44:df:36:bf:dc:7b:76:b2:6d:87:9b:a1:d6:
04:7a:b7:1f:d0:76:2a:ef:7d:81:d7:7f:62:d5:c7:
a8:92:54:20:a4:93:7e:91:bc:98:90:e1:16:f8:a1:
eb:8c:69:de:cb:f1:54:76:a5:88:1a:99:84:96:4e:
89:df:6a:5c:a8:c5:51:20:d4:92:4f:8e:17:b3:d5:
b7:bc:80:f5:49:bd:1b:b6:e6:44:de:9c:0e:e0:f4:
25:6f:c7:8a:01:f2:ac:44:ea:49:34:c2:5d:48:c7:
27:dd:ba:fd:93:52:df:4a:3a:e7:15:6d:e3:7c:84:
de:b3:a9:5e:b9:73:3e:cf:1b:0b:48:74:0a:21:d3:
84:52:9d:d3:8f:c5:82:5f:e9:65:a3:13:0d:c0:ba:
06:33:94:80:97:f4:97:ce:10:ec:5e:b1:e2:a9:bc:
28:e8:be:5d:e2:55:16:53:ac:7c:de:51:6b:fa:c1:
f3:5c:aa:cd:06:cc:51:0b:e8:59:bd:63:59:c5:b7:
f6:a3:9c:95:5d:27:7f:eb:0a:a0:d9:e8:3e:3f:51:
0c:d9:2b:3b:ea:32:ed:5d:20:f3:02:88:7a:83:68:
07:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:54:04:6B:9D:7C:7F:04:CB:B9:AC:ED:43:DF:1C:D3:DC:75:71:8F
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/RlQEa518fwTLuaztQ98c09x1cY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.84.0/22
193.19.148.0/22
Signature Algorithm: sha256WithRSAEncryption
76:4e:d6:98:77:cd:d1:8f:e2:e2:98:e8:7c:05:8a:68:67:33:
80:05:79:d7:44:21:e2:96:1d:ae:26:c6:03:ce:6b:3b:8b:44:
b7:ee:e1:26:a6:44:3a:f2:52:a8:3e:0e:35:da:3b:6f:3f:37:
d2:0c:94:89:f2:58:f2:dd:4a:4a:ca:77:de:54:50:30:cc:6a:
47:15:57:cc:83:7f:14:3e:36:d2:41:9e:86:b2:70:29:82:df:
a2:0d:8a:cf:ba:2c:bb:dd:9e:cf:1e:39:5d:81:8e:8d:a7:5c:
d4:1f:4e:67:f4:a5:4b:ad:45:6d:50:a6:8f:1d:78:eb:99:3c:
64:50:26:23:81:bc:d1:3d:63:28:6e:e6:a5:53:9f:7f:be:8b:
ce:7e:3b:66:ba:f4:35:d2:f4:dd:cb:21:3b:14:a1:e3:ea:11:
bd:60:0b:fa:b5:a3:2c:94:5f:af:39:93:4b:4f:9d:a1:a2:71:
9b:c3:81:ff:20:ed:43:ea:e9:5c:82:9b:82:a4:8a:3a:b8:44:
9f:68:a1:51:ca:6c:94:d2:f7:dd:4e:49:02:83:3e:38:a4:16:
d7:ac:27:8f:74:9d:36:19:fe:93:42:38:56:c1:71:2d:45:21:
1d:28:c4:e1:31:bd:ec:10:21:a3:65:71:bf:51:e7:b4:b7:92:
8b:21:98:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org