Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/7IZu5x2rQhxf126DcsHl2JKil8w.roa
File: 7IZu5x2rQhxf126DcsHl2JKil8w.roa (raw, json)
Hash identifier: lhv2mjAffq4/7/HVebr4lRA6dJmniUil6KprAsoiKuU=
Subject key identifier: EC:86:6E:E7:1D:AB:42:1C:5F:D7:6E:83:72:C1:E5:D8:92:A2:97:CC
Certificate issuer: /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial: 0188485894932FDB91C4D56B38375D6A94CD
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/7IZu5x2rQhxf126DcsHl2JKil8w.roa
Signing time: Tue 23 May 2023 11:22:24 +0000
ROA not before: Tue 23 May 2023 11:22:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 45.85.240.0/24 maxlen: 24
45.85.241.0/24 maxlen: 24
45.85.243.0/24 maxlen: 24
45.81.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:58:94:93:2f:db:91:c4:d5:6b:38:37:5d:6a:94:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Validity
Not Before: May 23 11:22:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec866ee71dab421c5fd76e8372c1e5d892a297cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:bd:29:3d:0f:62:ee:6e:af:f5:b2:f2:89:
de:0a:7a:1c:b5:26:29:d6:bd:e4:e3:06:b9:fb:1f:
03:b9:4d:a0:52:ec:0b:a0:97:2e:2d:e0:00:de:5c:
7e:88:77:39:ec:48:21:3d:dc:96:73:28:84:de:3c:
44:f1:98:ab:ba:63:6b:87:17:a1:6f:ca:c6:02:e9:
44:04:fc:aa:c6:7f:59:60:1e:f0:13:99:3e:71:92:
9c:1f:f7:a2:da:82:f7:31:60:95:f4:c8:7c:f0:02:
b3:89:80:4d:6e:84:66:a7:cc:29:61:cf:e0:aa:ee:
91:7c:91:0e:7e:0f:b1:f5:6d:8e:fe:f4:30:83:93:
80:1a:b0:5b:cb:c9:3b:ec:49:33:81:1c:f7:3a:c7:
9b:69:da:cc:42:75:d0:0f:c1:29:03:3a:21:c8:aa:
ea:f5:76:ba:df:74:fd:91:ee:d7:c3:2d:8f:e0:b4:
9a:2b:83:cc:87:da:25:2a:0c:80:f3:ef:5a:24:ce:
90:72:6c:94:87:56:74:0d:1c:11:ac:0f:e3:3f:97:
33:28:9b:7a:f3:f9:2f:6a:57:b9:fe:5c:99:83:9d:
e7:78:79:be:96:41:3e:43:ea:15:fc:6b:f8:b8:36:
da:47:9f:02:24:f2:48:25:5d:d0:3e:e1:98:17:ed:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:86:6E:E7:1D:AB:42:1C:5F:D7:6E:83:72:C1:E5:D8:92:A2:97:CC
X509v3 Authority Key Identifier:
keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/7IZu5x2rQhxf126DcsHl2JKil8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.118.0/24
45.85.240.0/23
45.85.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:36:2c:ed:2e:32:ce:d5:cf:22:4a:ed:2a:34:25:83:f3:cf:
7f:51:d0:6c:4a:3b:c6:80:e7:1b:6d:30:99:f7:76:fa:c8:62:
94:ad:51:55:89:03:b6:a0:9b:ed:b9:26:cb:64:98:93:52:a7:
af:9d:67:a4:b8:9e:e2:dd:b2:2a:bf:56:3b:05:f3:36:6c:9d:
1e:0e:da:fc:41:66:76:82:c3:c1:93:41:91:80:b8:eb:49:15:
d0:50:b1:44:58:93:08:12:ef:87:74:b4:33:b5:0d:fb:33:48:
3f:61:94:d1:e2:ad:95:8b:42:d8:4f:e4:11:45:06:9c:99:8a:
81:1b:c3:75:75:bd:88:a2:2c:ce:d4:60:4d:a9:4f:1e:39:bf:
bf:7b:f3:32:e2:d4:a2:20:54:26:e9:47:da:9c:7b:8b:9a:b5:
cb:29:82:78:be:52:f9:cc:07:7c:ad:f9:55:f2:1d:8b:8a:aa:
e9:6b:ef:2a:4e:59:d0:bc:90:68:ee:1c:91:2b:b0:51:5f:0a:
53:57:d3:2e:47:55:f0:94:81:ec:64:3e:24:41:08:7c:93:51:
30:d6:ff:9b:43:21:c9:59:7e:39:4a:1e:04:cf:7d:bd:0e:ae:
c1:e7:48:40:9f:a8:a4:d1:b7:d8:37:5f:46:0e:ef:61:b7:b7:
8c:97:89:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:59 2024 by rpki-client on console-fra.rpki-client.org