Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/8GyR6UIucIzY8jVHs-frfjAn2KM.roa
File: 8GyR6UIucIzY8jVHs-frfjAn2KM.roa (raw, json)
Hash identifier: rmvFSfIKRFGENRze5/LIc5QHJXlIEh/1Dx7CQFLEdcE=
Subject key identifier: F0:6C:91:E9:42:2E:70:8C:D8:F2:35:47:B3:E7:EB:7E:30:27:D8:A3
Certificate issuer: /CN=667d377dd4c830c246cb48a934699699e4b37741
Certificate serial: 01890DAF4579DFE6945199437E22AF9B74FC
Authority key identifier: 66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/8GyR6UIucIzY8jVHs-frfjAn2KM.roa
Signing time: Fri 30 Jun 2023 19:02:17 +0000
ROA not before: Fri 30 Jun 2023 19:02:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43619
IP address blocks: 45.66.108.0/22 maxlen: 22
45.66.108.0/24 maxlen: 24
45.66.109.0/24 maxlen: 24
45.66.110.0/24 maxlen: 24
45.66.111.0/24 maxlen: 24
2a09:6840:203::/48 maxlen: 48
2a09:6840:133::/48 maxlen: 48
2a09:6842::/32 maxlen: 32
2a09:6841::/32 maxlen: 32
2a09:6840:134::/48 maxlen: 48
2a09:6840:111::/48 maxlen: 48
2a09:6840::/32 maxlen: 32
2a09:6840:110::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 07 Sep 2023 01:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0d:af:45:79:df:e6:94:51:99:43:7e:22:af:9b:74:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667d377dd4c830c246cb48a934699699e4b37741
Validity
Not Before: Jun 30 19:02:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f06c91e9422e708cd8f23547b3e7eb7e3027d8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ea:45:63:97:13:16:26:87:11:c8:c0:0e:32:
30:b3:c9:ba:da:2a:df:be:e3:a0:ab:df:62:60:44:
0a:8a:24:11:13:2d:28:98:06:f2:1c:8f:93:00:75:
c3:8e:19:66:1b:e9:cd:78:9b:ae:13:b6:41:38:20:
3b:12:26:53:d0:57:11:9c:70:f7:96:1f:47:cd:c0:
17:55:6f:fe:0a:6c:53:94:6e:f1:6f:b0:bf:73:da:
26:1a:be:24:84:7c:f6:e2:5a:89:4f:4e:78:7d:90:
47:e8:7f:8d:60:36:02:3a:fd:ce:b2:07:24:f0:06:
d7:b9:58:87:81:50:24:eb:62:38:ed:c1:42:33:c1:
4c:31:1e:63:7a:e9:f6:88:6a:dc:9c:08:89:26:2d:
ac:a8:15:1e:03:3a:1f:9e:19:e5:89:11:39:0b:b8:
ce:c5:b4:87:8d:55:96:53:7c:33:d4:40:b6:8c:18:
1d:10:ec:e6:6b:b3:0f:8d:dc:a6:14:1f:d1:23:85:
1f:da:9d:21:18:6a:6f:a8:30:94:74:91:ff:7f:42:
0c:c4:5d:f8:fe:71:2a:f5:4a:ca:56:fe:09:6d:f2:
4e:3f:c1:2d:45:b1:dd:67:fd:8c:44:80:a1:9c:58:
21:6b:58:53:30:75:db:e4:e4:5c:34:e1:d3:4d:d4:
37:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6C:91:E9:42:2E:70:8C:D8:F2:35:47:B3:E7:EB:7E:30:27:D8:A3
X509v3 Authority Key Identifier:
keyid:66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/8GyR6UIucIzY8jVHs-frfjAn2KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.108.0/22
IPv6:
2a09:6840::-2a09:6842:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6c:40:ce:31:aa:d9:0c:f3:77:fb:1e:88:04:57:78:4b:ab:d7:
6d:8d:9a:cc:0c:ed:0c:b9:fc:8b:85:49:03:2f:c7:a1:cf:23:
66:7a:10:7e:15:d9:72:a3:3e:aa:5f:63:c9:0d:c3:9e:77:77:
02:8d:c5:0e:2b:49:2d:71:5d:55:d7:ea:7f:93:3c:93:29:5a:
4e:f5:a1:ee:be:85:86:2a:06:10:de:0c:57:36:86:bc:6f:5f:
ae:b9:08:84:ad:04:e7:2a:d7:bf:9b:06:a3:ce:c4:ec:4d:d2:
07:f1:3d:e9:bd:44:05:c8:dc:b8:7b:e3:62:57:6e:23:68:f1:
c9:27:a9:6c:d0:8a:fc:9a:34:27:dc:d8:a1:9b:9e:b9:ed:d4:
1c:32:e4:44:82:7c:e8:d7:e2:81:ff:06:6b:b1:3e:36:05:56:
59:83:14:e0:ec:e4:15:ba:d9:3a:61:b9:11:07:60:42:14:6c:
66:d8:42:ca:ec:cf:fc:8b:ac:8e:0c:e2:89:01:f5:05:1f:52:
59:bb:cc:8e:f4:9e:65:5c:82:2e:7a:45:32:5a:3f:ab:b6:a7:
13:58:04:48:36:9c:f1:20:3b:0d:b9:a7:6d:25:2f:14:70:c7:
d1:2b:68:08:a4:2a:e0:d8:58:8b:06:6c:11:2b:e5:f9:71:47:
a5:70:9d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:11 2024 by rpki-client on console-ams.rpki-client.org