Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/8uAg7BtJZDV3nJNcms0L25tgW5Q.roa
File: 8uAg7BtJZDV3nJNcms0L25tgW5Q.roa (raw, json)
Hash identifier: x6BVgIuE7kJB3Wh9xW21lCiE34z3nDMKEUPu+IFqbRI=
Subject key identifier: F2:E0:20:EC:1B:49:64:35:77:9C:93:5C:9A:CD:0B:DB:9B:60:5B:94
Certificate issuer: /CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Certificate serial: 01857283787B79BBC967C3E59850DBBC05D5
Authority key identifier: 7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/8uAg7BtJZDV3nJNcms0L25tgW5Q.roa
Signing time: Mon 02 Jan 2023 12:44:56 +0000
ROA not before: Mon 02 Jan 2023 12:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4785
IP address blocks: 45.82.239.0/24 maxlen: 24
45.82.236.0/24 maxlen: 24
45.82.237.0/24 maxlen: 24
45.82.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 09:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:78:7b:79:bb:c9:67:c3:e5:98:50:db:bc:05:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Validity
Not Before: Jan 2 12:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2e020ec1b496435779c935c9acd0bdb9b605b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7b:37:70:72:a6:21:bb:8f:26:72:df:3c:c1:
1e:7c:3f:ee:77:0d:af:32:7e:f2:32:80:86:9a:74:
33:ef:56:ea:55:84:53:ef:8e:af:89:d8:b9:81:03:
14:dd:47:21:91:f2:65:b7:db:dc:d0:e0:ab:25:4d:
e4:5c:74:07:02:1e:84:7d:1f:6d:96:89:75:e7:c5:
00:d2:e5:9f:36:18:99:84:9e:39:52:24:8a:92:9c:
87:bd:dc:78:77:4e:7a:13:52:e8:1d:b2:ad:e5:ca:
81:0c:67:67:60:57:e1:b2:ef:99:c2:28:2b:86:e7:
9c:18:52:f2:d5:e4:3a:74:c0:18:f4:26:1f:56:b8:
2a:45:08:f3:44:89:0e:ad:84:82:bd:db:f3:47:aa:
df:19:c4:a9:49:49:6b:e9:46:bb:1a:76:ff:b2:52:
12:6c:4e:4a:35:4f:1d:6f:76:3f:29:7d:4f:1e:0e:
7f:75:31:29:ec:ef:49:9d:f4:7b:b6:58:2c:eb:9a:
56:87:f6:0c:c2:0d:b0:dd:ee:d9:05:5f:e2:be:b4:
d2:f6:ed:6d:62:d2:76:57:32:5f:a0:2d:6f:88:d6:
41:ba:00:65:26:d8:45:dd:aa:74:c2:7a:97:11:31:
07:49:7e:57:c7:47:7a:1d:75:53:8f:78:d1:4a:21:
c5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E0:20:EC:1B:49:64:35:77:9C:93:5C:9A:CD:0B:DB:9B:60:5B:94
X509v3 Authority Key Identifier:
keyid:7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/8uAg7BtJZDV3nJNcms0L25tgW5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.236.0/22
Signature Algorithm: sha256WithRSAEncryption
36:78:cc:38:84:22:6a:04:15:18:ec:a0:6d:79:c1:d4:61:dc:
99:bb:a8:1e:32:af:ca:20:e6:30:32:df:2c:36:c5:22:68:26:
d5:d7:e4:e2:c1:6b:c8:b2:f4:e9:9e:db:03:a2:b0:ac:3d:67:
34:d6:da:c2:1c:42:a7:7f:c9:f7:9f:77:80:84:91:88:56:68:
a1:ef:84:e1:5c:67:62:6e:90:c0:65:43:3e:87:86:12:ed:38:
c6:d5:c3:48:ad:2f:37:dc:9c:c1:e5:99:1b:7c:f5:7e:fb:f8:
97:fb:16:2d:90:f4:8f:00:1e:2f:7f:cd:05:8c:b0:cf:00:c7:
95:99:66:4b:08:0b:e6:6d:b0:0e:42:47:c8:aa:7d:d8:55:8d:
c6:67:a7:ba:92:f6:75:d6:03:bf:a7:eb:55:64:ea:4f:02:0e:
a3:03:c3:58:8a:2e:e0:88:0f:4b:ec:87:c2:53:f2:6f:48:c1:
3a:74:b9:74:67:27:ca:2e:21:35:e5:b5:fa:57:1c:28:e7:2e:
5a:4f:a8:55:e8:6b:bf:cc:0d:62:b5:f2:ca:3f:70:77:38:4e:
a3:4c:6e:c3:30:b2:5b:27:1a:f6:26:bf:79:92:4a:6f:28:3f:
e2:25:3b:38:8b:9e:3a:7c:a5:09:41:48:94:4c:7b:6d:b6:ba:
bf:f7:9c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:28 2024 by rpki-client on console-ams.rpki-client.org