Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/I6M-CxoX_8CnT2_thOZiMCDy-CQ.roa
File: I6M-CxoX_8CnT2_thOZiMCDy-CQ.roa (raw, json)
Hash identifier: Kk5ohZe4pQpJH2tX7PnQRBgoRaUMw+kOXCOQTKM3QGs=
Subject key identifier: 23:A3:3E:0B:1A:17:FF:C0:A7:4F:6F:ED:84:E6:62:30:20:F2:F8:24
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01856FB118B4D8F7094FF8292FB09A444068
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/I6M-CxoX_8CnT2_thOZiMCDy-CQ.roa
Signing time: Sun 01 Jan 2023 23:35:55 +0000
ROA not before: Sun 01 Jan 2023 23:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 45.86.162.0/24 maxlen: 24
2.58.14.0/23 maxlen: 23
46.30.191.0/24 maxlen: 24
46.30.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Feb 2023 22:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:18:b4:d8:f7:09:4f:f8:29:2f:b0:9a:44:40:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 1 23:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23a33e0b1a17ffc0a74f6fed84e6623020f2f824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:43:f9:88:5d:30:a5:28:f3:e7:2b:3f:d7:9d:
d9:4b:de:7e:10:a1:8d:b9:ef:d9:18:12:b1:77:97:
b4:4e:89:e7:30:79:7b:de:85:6d:1e:f8:df:4d:44:
8e:f8:a1:eb:f6:27:8f:76:34:15:1f:5d:39:3c:0c:
0c:64:c9:28:7f:d4:6f:f9:39:cf:15:6b:88:af:5e:
ab:f3:3d:7d:a7:24:c6:96:40:82:e5:f8:d5:b0:b6:
37:3e:0a:68:1e:3b:24:13:e9:36:fd:b4:5f:93:8b:
46:0b:66:64:40:37:c4:0f:47:20:81:5f:f4:0b:4e:
50:31:89:8a:51:c3:dc:dd:0f:ee:3e:a1:b5:1e:aa:
46:5a:de:d0:1c:fa:53:b1:a7:3f:62:0a:6b:3f:cc:
1c:69:60:7f:b4:01:11:a3:74:fb:37:f6:4a:80:c0:
46:54:e6:e4:6a:9c:ad:09:47:67:93:a2:93:66:3c:
03:6c:08:25:0d:d3:af:77:48:4c:89:b8:da:38:1b:
96:39:14:27:6f:44:1e:b4:53:6e:d2:87:46:bb:5e:
89:42:f8:ce:87:86:f4:59:a5:e0:93:ac:62:b1:b9:
f3:7c:3b:d5:2c:f1:52:a3:9e:91:c7:0e:27:13:4e:
fa:d0:8b:20:6b:5c:d0:a3:eb:57:ed:00:22:56:b2:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A3:3E:0B:1A:17:FF:C0:A7:4F:6F:ED:84:E6:62:30:20:F2:F8:24
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/I6M-CxoX_8CnT2_thOZiMCDy-CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.14.0/23
45.86.162.0/24
46.30.188.0/24
46.30.191.0/24
Signature Algorithm: sha256WithRSAEncryption
54:5a:5f:f6:49:f2:88:30:05:7a:4a:7a:db:79:17:e2:26:4d:
ba:82:9f:ee:0c:7f:78:72:32:62:64:8f:a5:37:21:f6:4c:3d:
3a:37:71:c8:ba:1f:48:e2:9a:86:4a:f6:75:5a:bc:f8:d9:bd:
a4:8a:de:cd:ca:a3:5b:b8:39:fa:ab:5b:af:1f:17:0f:88:66:
da:f3:7b:2c:d7:93:b1:d8:62:70:5d:1d:37:4f:0c:29:37:b5:
82:d2:7e:1f:00:7d:71:25:04:f5:3a:cc:a9:af:1e:5a:4b:9a:
e5:82:30:57:29:f2:32:bc:84:f0:a2:8e:f0:60:09:20:62:73:
e1:1c:03:26:64:14:e9:86:e0:7b:9f:3a:d7:58:3d:26:d4:7f:
ff:3f:67:0e:fd:0f:e9:02:5f:7a:b2:11:3c:19:5f:f1:20:84:
c4:5e:b5:08:bc:ab:e8:c7:e9:a7:9b:1e:99:b9:6b:6f:03:a9:
12:6a:fa:3f:c3:e9:d7:22:10:64:14:ad:3a:8b:e3:ac:67:e8:
82:6e:bb:88:e0:a6:76:dd:70:11:b4:ee:e2:7c:b5:5e:52:16:
11:f5:d6:d4:e1:4a:f9:86:9c:86:e9:18:f0:d8:4f:ca:39:fa:
31:eb:ed:87:89:ac:16:16:26:e9:1b:bf:9d:45:87:e0:9e:b8:
18:a5:b3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:48 2024 by rpki-client on console-fra.rpki-client.org