Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/h6vmcoNk_hymBmhxbPP-_ReKm_Y.roa
File: h6vmcoNk_hymBmhxbPP-_ReKm_Y.roa (raw, json)
Hash identifier: WaoNPLCmAM9k1dceWktB5qqGt1lAzD77UCYX8u1ZHKQ=
Subject key identifier: 87:AB:E6:72:83:64:FE:1C:A6:06:68:71:6C:F3:FE:FD:17:8A:9B:F6
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 01856D0AD8EA2868978D8A6B574DCA0DA00E
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/h6vmcoNk_hymBmhxbPP-_ReKm_Y.roa
Signing time: Sun 01 Jan 2023 11:15:05 +0000
ROA not before: Sun 01 Jan 2023 11:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 45.139.44.0/22 maxlen: 24
45.83.152.0/22 maxlen: 24
45.139.56.0/22 maxlen: 24
45.139.64.0/22 maxlen: 24
45.83.124.0/22 maxlen: 24
45.83.144.0/22 maxlen: 24
45.139.36.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:d8:ea:28:68:97:8d:8a:6b:57:4d:ca:0d:a0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Jan 1 11:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87abe6728364fe1ca60668716cf3fefd178a9bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:33:fe:3b:b6:54:0a:e7:3d:65:00:50:cc:b4:
1c:6e:11:25:15:48:b3:39:15:6d:eb:67:ba:f7:9f:
e4:de:25:30:a1:d4:c8:a8:f1:a5:97:84:69:6d:8b:
fc:6c:b7:c7:7a:4b:24:ab:d6:07:9f:f3:a9:33:d3:
92:3e:57:51:5c:e3:4d:b3:10:13:cd:87:5a:38:0d:
d7:30:a8:3a:28:e6:af:b9:fe:60:5e:35:50:70:74:
a1:60:c7:7b:f5:0d:26:e0:ef:92:cc:3c:5a:d0:b9:
c5:1a:82:0d:57:f9:cb:12:95:0a:4c:c0:ac:7c:b8:
0c:bc:43:d8:c0:20:25:b5:dc:e6:22:f1:12:38:1e:
d6:3e:fd:9d:9e:aa:b4:41:f1:ca:5b:80:c9:af:44:
1f:2a:0a:f5:03:21:3a:76:68:4a:0e:4d:43:07:7a:
d9:53:48:82:30:d2:8b:a7:20:08:30:fd:f8:ba:b2:
41:1a:1f:a8:88:d0:13:48:31:43:90:a3:43:9f:86:
78:41:cd:29:77:f1:7e:a8:b5:ee:71:93:79:3d:8b:
12:b6:a2:cd:35:95:6d:6e:ca:74:cb:ad:73:9b:a4:
07:3b:92:9a:cb:40:b9:b4:66:19:1e:a0:17:09:99:
b8:33:11:72:89:49:0b:ca:4a:cc:9e:31:73:41:57:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AB:E6:72:83:64:FE:1C:A6:06:68:71:6C:F3:FE:FD:17:8A:9B:F6
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/h6vmcoNk_hymBmhxbPP-_ReKm_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.124.0/22
45.83.144.0/22
45.83.152.0/22
45.139.36.0/22
45.139.44.0/22
45.139.56.0/22
45.139.64.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:61:66:0b:40:94:25:10:43:4e:c0:37:26:44:1c:06:e6:3f:
c6:d5:5f:d1:3b:83:e5:f6:53:40:b9:ee:3a:ea:bd:8f:dc:3b:
91:7c:4d:b3:fe:7d:5f:35:a5:d6:4e:4a:73:b4:6d:79:e0:bb:
67:41:07:66:b7:ab:be:85:35:36:98:20:ab:f0:60:0a:80:d9:
15:5b:aa:6b:4b:ed:2a:f8:12:2e:c2:dd:5d:64:53:e3:48:a0:
d1:1b:20:02:9a:39:85:54:10:d5:3a:0b:bb:a7:29:91:ff:60:
cb:84:1d:8e:96:06:b3:c1:8a:32:6e:64:4d:d8:15:79:17:9d:
43:8b:b6:42:42:54:f4:c8:ef:30:00:4b:75:30:da:59:67:72:
7d:88:32:0b:ad:af:a1:39:9c:57:59:ab:bc:d8:20:4d:a5:d6:
bf:17:77:2d:1e:d4:8c:e0:95:14:40:55:bd:55:60:9a:1b:87:
b4:b2:2a:3c:50:d6:93:1a:d0:3d:16:a8:33:76:c1:e8:38:86:
46:37:58:46:07:9d:14:ad:2f:db:9f:2e:76:3d:df:ab:32:90:
df:4d:1a:5c:de:9a:bd:9a:4f:33:fa:aa:6b:47:39:79:aa:b1:
74:d7:9e:1a:5c:da:47:9c:ab:37:38:2c:15:3f:f0:3f:06:4d:
f3:b4:fe:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:54 2023 by rpki-client on console-ams.rpki-client.org