Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/QQuZGFsW1Y06JlAensnCk2pzN84.roa
File: QQuZGFsW1Y06JlAensnCk2pzN84.roa (raw, json)
Hash identifier: ym+0caUGzGng24uBADQDfSD0MR3MqEFuIjDMEKu1A2o=
Subject key identifier: 41:0B:99:18:5B:16:D5:8D:3A:26:50:1E:9E:C9:C2:93:6A:73:37:CE
Certificate issuer: /CN=377c264d388333d342372931aa0d192b0fba62c1
Certificate serial: 01856CF83E9246161359DBE56FE556D17A28
Authority key identifier: 37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/QQuZGFsW1Y06JlAensnCk2pzN84.roa
Signing time: Sun 01 Jan 2023 10:54:46 +0000
ROA not before: Sun 01 Jan 2023 10:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208108
IP address blocks: 45.159.232.0/22 maxlen: 22
45.159.232.0/24 maxlen: 24
45.159.233.0/24 maxlen: 24
45.159.234.0/24 maxlen: 24
45.159.235.0/24 maxlen: 24
2a0f:8780::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:3e:92:46:16:13:59:db:e5:6f:e5:56:d1:7a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377c264d388333d342372931aa0d192b0fba62c1
Validity
Not Before: Jan 1 10:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=410b99185b16d58d3a26501e9ec9c2936a7337ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c8:b0:24:bb:1e:fa:f4:45:dc:8c:b0:93:5d:
9a:96:1c:57:87:c6:41:4d:e3:fc:98:e3:c5:f7:dd:
f8:4c:0b:aa:b5:5c:7e:9d:bd:28:9c:ad:31:14:0b:
ed:d7:d0:17:f3:7a:8e:3a:c8:07:f7:36:00:33:27:
76:e0:02:85:bf:92:75:83:f8:fe:1d:c4:6c:33:6a:
56:7a:59:2f:7b:40:d0:48:ba:cb:87:ff:f8:d8:d9:
88:df:0f:da:7c:68:2b:46:b1:d6:45:f3:54:a5:7d:
d2:d1:8f:35:06:eb:1c:03:f8:37:46:2b:f1:e9:20:
1e:7c:0a:fb:a4:c5:a1:d4:c3:5f:1e:ae:ce:e2:3a:
ca:13:a1:a3:63:bd:76:93:13:77:a5:5e:74:7f:81:
d0:b5:5c:00:5a:2d:25:aa:66:b1:ca:31:6e:f9:28:
0a:7c:ad:4b:ce:7f:94:7d:a7:9b:46:13:eb:13:e0:
78:0a:e2:83:a8:2a:cf:8f:2e:64:dc:58:d6:82:ba:
b5:50:66:d1:0a:d3:8f:93:3b:8c:b2:27:b4:49:60:
5a:00:6a:79:04:7b:69:c2:63:49:32:fc:25:ec:e9:
d9:54:6c:81:dd:cf:31:7f:94:4e:19:c1:29:a8:a5:
1e:15:f9:0d:93:e1:e9:c7:3c:46:37:88:9b:7b:c7:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0B:99:18:5B:16:D5:8D:3A:26:50:1E:9E:C9:C2:93:6A:73:37:CE
X509v3 Authority Key Identifier:
keyid:37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/QQuZGFsW1Y06JlAensnCk2pzN84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.232.0/22
IPv6:
2a0f:8780::/29
Signature Algorithm: sha256WithRSAEncryption
0e:bb:57:18:04:c4:44:85:f0:4f:72:b6:b9:3a:96:e7:c3:e4:
a4:a6:27:91:a4:a2:8a:18:42:5c:ce:57:76:54:4b:4c:8f:ab:
db:6c:ea:16:4f:db:a3:f3:43:f5:38:de:ec:8d:05:95:6a:60:
0d:3c:7d:93:aa:17:ea:56:e9:74:c9:2b:7a:d7:33:e3:fc:1b:
ee:30:38:23:67:d4:ac:ff:e4:10:69:7a:33:40:45:64:50:45:
d5:84:92:3e:27:e0:e5:40:fd:5b:70:d1:30:9f:85:ef:fe:7b:
32:bd:e6:c3:38:67:d8:23:b0:1d:3f:09:7c:eb:07:20:e0:f4:
62:c0:08:96:e6:d1:49:ff:94:0b:fa:b4:20:84:7f:53:ae:93:
df:b1:67:50:34:ba:e3:6b:7f:2a:22:2b:5d:4f:95:02:49:30:
5e:7d:4b:ea:10:d0:fb:7d:63:ed:49:b0:16:e6:52:e6:23:c4:
78:81:d5:79:f0:03:3f:38:d9:27:9f:af:66:bc:2b:1c:78:e8:
c0:6a:50:30:84:02:35:9c:d6:a8:d2:f0:4a:c4:34:c8:49:5a:
a3:ee:cc:33:95:d0:3a:05:d7:f5:2a:fc:ef:7f:6e:34:fa:3c:
68:b9:cb:27:f3:22:0e:15:93:67:0d:ed:d7:12:2b:14:5b:7d:
16:03:17:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:51 2024 by rpki-client on console-ams.rpki-client.org