Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/co_FHNDuGhbCICQxIP6Pvb9iW6g.roa
File: co_FHNDuGhbCICQxIP6Pvb9iW6g.roa (raw, json)
Hash identifier: cu8FVDrVPwHBDM9itc/R9cR2bwrbt63f4lomX4+8JSI=
Subject key identifier: 72:8F:C5:1C:D0:EE:1A:16:C2:20:24:31:20:FE:8F:BD:BF:62:5B:A8
Certificate issuer: /CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Certificate serial: 018572C36BDBAE1D67B776C22617E83A1859
Authority key identifier: A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/co_FHNDuGhbCICQxIP6Pvb9iW6g.roa
Signing time: Mon 02 Jan 2023 13:54:47 +0000
ROA not before: Mon 02 Jan 2023 13:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35009
IP address blocks: 45.82.181.0/24 maxlen: 24
45.82.182.0/23 maxlen: 23
45.82.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:6b:db:ae:1d:67:b7:76:c2:26:17:e8:3a:18:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Validity
Not Before: Jan 2 13:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=728fc51cd0ee1a16c220243120fe8fbdbf625ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:81:db:7e:d7:f4:0e:d7:65:ef:23:87:80:
ec:18:dc:98:b5:a6:0a:2a:27:dd:b9:58:33:12:51:
6a:c7:84:f4:c8:4e:91:97:1d:52:53:6b:0e:6d:72:
88:93:9f:83:12:df:ea:50:aa:39:e6:7e:46:53:49:
6f:c9:0f:50:9d:9a:4e:eb:3b:74:ed:3c:5c:9d:cf:
a2:2a:3a:31:9e:fb:b0:f5:0f:c9:7b:b0:f5:10:db:
d1:cc:4b:f3:2a:f9:31:93:94:7e:d6:4b:a8:01:55:
0b:bb:fd:f2:e3:e7:ea:16:ea:92:09:be:8e:a3:fb:
04:9c:93:0e:3c:f7:a3:40:4d:cc:6e:7d:32:1d:89:
d0:49:ec:75:c7:9f:c2:de:6a:54:9d:9f:bb:e3:67:
81:7e:2c:2d:10:9b:25:2a:9e:7a:19:8e:64:f4:9b:
34:85:bf:d4:b4:74:ce:81:86:5a:1c:67:ec:b2:75:
7f:cc:d5:3d:11:65:2b:0b:f2:6b:aa:42:d6:e1:ff:
8e:b5:31:5d:9a:55:74:b1:a1:8c:f3:3b:d1:a9:37:
7f:28:86:9d:ee:c1:78:b7:19:f5:de:42:3f:0c:7f:
dc:fe:79:d0:4b:71:f4:b2:f5:c1:fc:f9:51:bb:1b:
f9:69:5a:f7:56:a7:b4:e5:17:d9:01:59:8b:07:d6:
aa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8F:C5:1C:D0:EE:1A:16:C2:20:24:31:20:FE:8F:BD:BF:62:5B:A8
X509v3 Authority Key Identifier:
keyid:A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/co_FHNDuGhbCICQxIP6Pvb9iW6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.180.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:8b:f5:8c:f1:da:7d:22:79:f3:18:e1:57:5e:78:f6:7b:49:
9e:31:4b:b4:4c:54:45:47:d1:05:07:f9:54:fb:20:85:b6:7d:
c8:bc:7a:24:ee:94:66:83:7f:a8:b2:c9:a6:21:50:6d:04:91:
16:1b:bf:09:32:9b:ce:f4:6e:b2:2f:dc:41:f1:3a:a3:7a:c6:
e8:0f:bc:f7:a3:69:53:4d:6a:05:b4:62:fa:a9:45:a8:0e:fd:
7d:c0:ff:91:05:4d:df:77:9c:e8:5b:03:a9:72:67:6b:8f:fe:
f8:23:a8:60:e8:8d:09:90:ea:5f:a8:c3:96:bd:4e:8f:8a:4a:
8e:b8:b2:a5:94:44:74:22:bf:19:4b:60:1a:4c:95:02:1d:aa:
31:9e:65:65:01:14:fd:7a:fc:33:c6:74:dd:5c:bb:27:16:51:
62:d8:6b:a6:9a:61:f2:f1:51:4f:36:44:d6:13:1e:11:7b:a8:
15:c9:6c:85:59:ac:e8:0e:dc:17:ad:ae:bf:c0:8d:0f:34:2c:
b5:5c:e2:85:7f:03:08:9d:83:bd:8c:46:59:91:74:e2:c7:3f:
dc:68:08:1a:e3:32:2f:4a:16:b4:6d:65:73:32:8f:93:7b:46:
06:89:9e:2d:9d:dd:30:6d:0d:db:b3:0a:a2:2f:da:ba:1a:87:
bb:2c:a1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:50 2024 by rpki-client on console-fra.rpki-client.org