Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/L5fG6sdO3YMjHeS7wUUXVKKBBCM.roa
File: L5fG6sdO3YMjHeS7wUUXVKKBBCM.roa (raw, json)
Hash identifier: 8tuvDNWbU5O7hoEqXTUUQ2orGQOvsAzha9IRFesRQ2o=
Subject key identifier: 2F:97:C6:EA:C7:4E:DD:83:23:1D:E4:BB:C1:45:17:54:A2:81:04:23
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01856FB121222F05A462AE5BEAF324334B5C
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/L5fG6sdO3YMjHeS7wUUXVKKBBCM.roa
Signing time: Sun 01 Jan 2023 23:35:57 +0000
ROA not before: Sun 01 Jan 2023 23:35:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 264617
IP address blocks: 45.82.220.0/23 maxlen: 24
45.82.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:21:22:2f:05:a4:62:ae:5b:ea:f3:24:33:4b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 1 23:35:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f97c6eac74edd83231de4bbc1451754a2810423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:99:74:6c:86:10:a6:55:b3:10:bb:8d:40:68:
02:48:84:b7:da:74:42:c5:09:39:5c:48:05:5c:de:
49:c7:b1:e7:b6:1e:94:00:d5:9a:18:cc:23:84:f7:
33:4b:08:99:cb:55:a9:6f:84:93:c5:87:bd:c5:a3:
64:83:82:49:ab:c5:69:9f:99:33:81:2d:b0:06:16:
14:ec:28:90:71:0c:58:da:a0:28:ab:91:ff:6c:45:
8a:db:e3:fa:e1:66:ad:e2:c8:ca:ae:e7:16:dd:f9:
78:da:ce:a0:75:12:00:3c:63:03:c3:7a:11:6e:54:
42:50:6f:01:a2:f4:79:f5:0f:d3:36:9d:00:14:3e:
da:ee:bf:59:0f:15:7f:92:c7:71:30:6a:51:60:f7:
e5:71:e7:9b:99:0c:08:cd:83:42:05:00:b3:23:0c:
07:72:f5:1b:6c:44:1b:0d:15:cd:a9:4e:42:93:12:
fa:de:da:ab:d1:5c:66:57:84:86:36:cc:3c:e5:9b:
05:6a:2d:0f:13:db:96:37:f3:20:02:52:c4:aa:4a:
a0:f3:67:28:eb:c7:af:8f:f7:0f:92:0d:6a:88:36:
c0:4c:51:bb:b9:12:9d:56:fc:f2:8e:8c:03:b9:af:
5f:04:a5:11:c9:05:4d:75:74:73:94:ea:e0:04:60:
0a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:97:C6:EA:C7:4E:DD:83:23:1D:E4:BB:C1:45:17:54:A2:81:04:23
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/L5fG6sdO3YMjHeS7wUUXVKKBBCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.220.0-45.82.222.255
Signature Algorithm: sha256WithRSAEncryption
9a:68:67:6f:69:c9:97:41:8e:d9:82:e0:08:63:b6:94:e7:6f:
65:7d:cd:27:91:bc:47:a6:d9:90:aa:70:09:db:1d:8e:5b:d5:
f6:af:86:32:87:44:a1:4b:a2:ad:db:33:39:8c:14:cb:55:94:
22:10:2b:2b:38:18:4a:b2:f3:96:68:5a:eb:f7:8c:72:2f:55:
89:f2:e1:a4:6a:11:f1:a8:c7:54:17:ee:64:34:c2:49:44:31:
7d:19:ca:74:87:3b:e2:7f:0f:96:c2:f4:a9:33:be:13:eb:24:
2c:9e:de:cb:db:0d:f5:b0:35:1e:5e:cc:ad:d3:67:23:94:13:
d8:e4:2e:f9:fb:9e:66:f8:c5:78:b7:28:65:0c:ec:6e:27:64:
ec:86:b1:b9:e1:71:23:02:1b:55:5a:44:2f:90:a4:0f:7d:57:
da:59:9f:04:25:70:cd:97:a0:cc:04:ce:e3:3e:cb:22:19:e9:
2e:46:d3:c5:11:54:10:78:fd:24:07:0b:cf:c0:44:b2:11:f6:
b5:c4:5b:62:90:3d:3b:e4:26:cf:19:fe:28:cd:49:45:e1:d8:
97:7c:d7:49:9c:a2:e3:fd:7e:b5:06:24:6e:8e:40:3a:df:f6:
9f:ff:48:ee:71:93:b2:8e:28:0e:0a:5d:d3:f8:9a:5a:56:9d:
a6:9c:85:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:48 2024 by rpki-client on console-fra.rpki-client.org