Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/3ldMce6CcUUD5tLvGGQAkPTv5xM.roa
File: 3ldMce6CcUUD5tLvGGQAkPTv5xM.roa (raw, json)
Hash identifier: oDlutyoFYY4GZJFSXEkfnrT9CU7M7S6zcFQOt0edN50=
Subject key identifier: DE:57:4C:71:EE:82:71:45:03:E6:D2:EF:18:64:00:90:F4:EF:E7:13
Certificate issuer: /CN=ede7662d597fafc96dd765577508c3ed029d6567
Certificate serial: 018AE02D4D240165DB4AAF5765AE8A750D3C
Authority key identifier: ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/3ldMce6CcUUD5tLvGGQAkPTv5xM.roa
Signing time: Fri 29 Sep 2023 09:02:59 +0000
ROA not before: Fri 29 Sep 2023 09:02:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44205
IP address blocks: 45.144.180.0/22 maxlen: 22
45.8.120.0/22 maxlen: 22
185.115.120.0/22 maxlen: 22
2a0e:8900::/29 maxlen: 29
2a0e:f340::/29 maxlen: 29
2a06:7600::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e0:2d:4d:24:01:65:db:4a:af:57:65:ae:8a:75:0d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede7662d597fafc96dd765577508c3ed029d6567
Validity
Not Before: Sep 29 09:02:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de574c71ee82714503e6d2ef18640090f4efe713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:95:44:1b:26:da:fa:fe:57:44:61:31:e4:
cc:a2:c0:17:88:83:51:67:f6:53:d1:5a:b7:05:7e:
de:de:db:a7:1f:9d:3a:a7:7b:77:8a:d4:ff:06:28:
ed:69:00:a2:65:f2:12:31:a9:ea:94:41:bb:05:6d:
c3:17:f8:1a:cc:b3:cc:2a:ce:00:e5:db:c2:17:9e:
e5:53:a4:8e:83:77:7a:0e:1b:07:a8:6b:25:26:b8:
26:8a:c3:04:80:14:7f:bc:4b:d4:2a:45:e9:62:90:
8d:37:5e:bd:6d:bc:a6:18:5f:25:41:12:70:17:7d:
68:d0:a2:f0:0b:d0:72:fb:8e:83:00:77:61:36:95:
01:ba:5d:fa:ee:19:c2:5a:51:46:a4:9b:98:35:7f:
e0:c2:14:a6:3b:6f:fa:ff:25:3e:90:b7:00:c3:d1:
a9:83:c6:cb:e9:f6:f3:65:a4:fb:d5:59:f3:70:8b:
61:8a:01:99:43:83:b5:ac:10:5b:93:18:62:5b:08:
8b:85:58:00:2c:a9:80:98:bc:b0:b1:40:e7:5d:4c:
d3:8f:cc:5e:ed:02:7f:99:9e:af:a3:c6:3b:bb:fc:
06:2b:c2:65:ac:0e:82:89:73:43:ae:23:4c:f9:91:
f7:21:b4:44:d2:1f:d2:f9:3e:8c:32:50:d8:5c:ce:
16:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:57:4C:71:EE:82:71:45:03:E6:D2:EF:18:64:00:90:F4:EF:E7:13
X509v3 Authority Key Identifier:
keyid:ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/3ldMce6CcUUD5tLvGGQAkPTv5xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.120.0/22
45.144.180.0/22
185.115.120.0/22
IPv6:
2a06:7600::/29
2a0e:8900::/29
2a0e:f340::/29
Signature Algorithm: sha256WithRSAEncryption
56:0d:4a:2e:30:05:7d:22:73:66:10:ed:44:6b:e6:41:bd:cd:
8d:61:0e:12:82:c5:84:c1:0f:73:ce:5f:9d:f7:b3:a3:01:9d:
fe:b5:77:8e:8d:cb:05:9b:3b:88:3e:d7:cc:90:c7:f6:70:e5:
69:8e:cc:07:e3:26:e0:16:2b:1e:6d:4c:6a:ac:8f:57:90:fc:
5e:79:09:b7:c4:b4:d1:ea:55:d5:b8:f7:fd:de:94:1e:e5:68:
92:2b:49:af:6a:fb:1e:3e:b3:d4:02:b5:eb:b8:a8:a7:8a:45:
c2:fa:e6:5c:f3:ae:a6:17:de:c2:ef:4b:5a:65:db:81:73:0c:
8b:72:8c:22:f1:5b:14:1c:d4:6e:6f:b5:91:ed:2b:06:1b:4e:
fd:cf:92:fc:30:6f:a7:ed:b9:7f:6c:58:f7:fb:99:60:0d:89:
11:65:1f:0b:34:bb:d1:99:a8:63:b2:f1:13:35:1a:1a:6c:34:
8c:ac:20:44:b2:8d:c2:86:a3:a8:bf:2c:f4:9d:62:e5:86:9c:
2b:fd:c6:f4:19:62:80:04:35:0d:1b:51:ef:c8:44:9c:e8:3b:
00:cc:2d:0a:50:3b:b9:fc:ca:9a:61:d6:05:e3:6d:f9:99:90:
b4:36:3a:84:13:1b:19:47:e4:a6:10:47:6a:72:57:4b:7f:1c:
e1:d0:69:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:53:00 2024 by rpki-client on console-fra.rpki-client.org