Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/68udtFs2o1ESQWlbZFpxwToVvi4.roa
File: 68udtFs2o1ESQWlbZFpxwToVvi4.roa (raw, json)
Hash identifier: nBMvI99g+AtOWYvFw4GkVJjTe23J3aSm67XJ87OdCps=
Subject key identifier: EB:CB:9D:B4:5B:36:A3:51:12:41:69:5B:64:5A:71:C1:3A:15:BE:2E
Certificate issuer: /CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Certificate serial: 01856FD526BFFDEBC0D3BA65E35FD7B8F2B7
Authority key identifier: C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/68udtFs2o1ESQWlbZFpxwToVvi4.roa
Signing time: Mon 02 Jan 2023 00:15:18 +0000
ROA not before: Mon 02 Jan 2023 00:15:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61438
IP address blocks: 194.93.76.0/23 maxlen: 24
45.84.144.0/22 maxlen: 22
2a04:d200::/32 maxlen: 32
2a04:d201::/32 maxlen: 32
2a04:d200::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 29 Dec 2023 09:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:26:bf:fd:eb:c0:d3:ba:65:e3:5f:d7:b8:f2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Validity
Not Before: Jan 2 00:15:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebcb9db45b36a3511241695b645a71c13a15be2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:58:79:b1:7d:a8:ba:d4:d7:52:7b:1e:04:50:
5e:cd:e5:f8:ca:80:d5:e3:cb:ea:8e:4c:82:3a:02:
e1:65:ca:6b:e6:41:59:74:54:53:05:b6:da:f3:c2:
9c:ce:36:31:0a:08:d6:2b:9a:8d:9f:83:66:c3:9d:
9f:c9:79:6d:6c:ad:1c:ef:6a:c9:c2:5f:90:b8:2f:
21:99:58:bb:72:9a:e4:3b:9b:f4:ed:c9:9d:d3:93:
ae:92:25:1f:11:74:b1:a4:54:5f:06:ba:f4:85:af:
a9:d9:69:ab:47:90:37:7c:5d:81:4e:68:46:1f:5a:
94:c7:90:75:fc:9e:ed:d6:a7:a1:cc:37:ec:4d:ab:
86:83:6e:cb:ec:97:2a:07:4d:1f:f0:1d:c8:5c:41:
5f:62:58:66:6b:37:59:50:62:7a:2c:71:ce:2b:a3:
52:0d:da:d7:3a:cc:32:f6:92:66:f3:1d:15:6c:a5:
9d:c6:aa:be:b2:bf:f0:11:68:1b:95:87:44:cf:ba:
2e:be:3a:e2:56:bc:0c:0a:a2:7e:84:f8:23:ed:32:
62:f3:fb:08:bb:76:82:09:27:a1:d2:71:08:5e:18:
f9:36:7a:31:50:1a:0e:9d:a2:c7:53:8d:bc:24:6f:
38:7f:17:ff:d1:ba:7e:39:2d:7e:1b:7c:0f:fa:c8:
b2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CB:9D:B4:5B:36:A3:51:12:41:69:5B:64:5A:71:C1:3A:15:BE:2E
X509v3 Authority Key Identifier:
keyid:C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/68udtFs2o1ESQWlbZFpxwToVvi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.144.0/22
194.93.76.0/23
IPv6:
2a04:d200::/29
Signature Algorithm: sha256WithRSAEncryption
a7:b5:cc:2f:7a:3e:fa:a6:05:30:10:cd:b5:94:ff:aa:0b:03:
a6:39:21:d4:ae:38:c7:9d:e5:b5:f3:c0:a3:1f:78:d4:0b:26:
1d:14:c1:6b:53:93:91:6d:d0:5d:bc:8b:7b:ef:c6:52:40:30:
1b:b4:6a:dc:bc:fb:57:b9:ef:eb:03:2e:77:75:67:62:6b:7e:
03:22:da:98:7e:0e:0e:60:97:7d:39:30:1b:10:db:d6:b6:11:
ad:cc:b7:37:d0:fa:ed:59:52:a8:da:f9:7b:f4:bc:3d:87:46:
8f:e2:bc:ba:6c:1d:93:61:49:ac:d5:74:0c:0e:ca:59:ff:6b:
26:b2:72:2c:1d:8b:00:2a:e3:5b:46:5f:c3:09:c3:d7:c9:78:
97:74:98:8b:c5:8b:dd:47:f7:ee:d5:99:f0:51:65:76:eb:e5:
45:06:06:04:3a:a7:07:78:14:e9:7d:dd:39:3a:f8:c9:ab:59:
91:63:d5:24:ab:14:55:f3:36:fb:04:68:9a:95:8b:3e:08:01:
b7:e4:3a:ea:c5:22:f5:10:ed:b4:5e:18:4e:e6:fd:00:ee:48:
2f:6c:c3:e0:14:f8:11:10:f5:cd:a0:36:11:26:23:78:55:4f:
ee:49:20:da:6e:c0:8e:37:5b:f2:e3:c3:66:fe:cc:33:e5:7b:
ca:8c:ae:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:43 2024 by rpki-client on console-ams.rpki-client.org