Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/j2S0ca2Mz3ugVILFWK9gFsdoMS8.roa
File: j2S0ca2Mz3ugVILFWK9gFsdoMS8.roa (raw, json)
Hash identifier: T5lx/8bqnC/Tr6MNnZuHd/CY6VZKo3lHEbVadSJmaZc=
Subject key identifier: 8F:64:B4:71:AD:8C:CF:7B:A0:54:82:C5:58:AF:60:16:C7:68:31:2F
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 018CC80133725EF4481C652A11AA912C7F63
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/j2S0ca2Mz3ugVILFWK9gFsdoMS8.roa
Signing time: Tue 02 Jan 2024 02:29:30 +0000
ROA not before: Tue 02 Jan 2024 02:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 45.139.44.0/22 maxlen: 24
45.83.152.0/22 maxlen: 24
45.139.56.0/22 maxlen: 24
45.139.64.0/22 maxlen: 24
45.83.124.0/22 maxlen: 24
45.83.132.0/22 maxlen: 24
45.83.144.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 14:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:33:72:5e:f4:48:1c:65:2a:11:aa:91:2c:7f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Jan 2 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f64b471ad8ccf7ba05482c558af6016c768312f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:30:28:11:da:27:8f:fd:17:95:a1:ac:03:36:
45:db:49:c0:f5:30:01:15:e2:e5:da:86:1d:ec:09:
ea:a3:03:d7:31:91:bb:68:ba:bb:c0:b9:32:9b:67:
23:f9:23:dd:fc:08:6d:83:ce:06:13:12:72:9b:f6:
ad:70:6c:dd:b8:e8:e0:64:fe:aa:15:a4:5c:b0:10:
4b:7f:72:46:ca:4c:0f:de:aa:d6:7a:49:55:38:8f:
b0:e9:56:36:f5:4b:5b:05:44:61:16:d7:db:42:68:
ee:c9:39:0a:d4:85:4f:d5:dd:ff:4b:61:d2:20:51:
bb:fd:22:b3:67:0c:65:a7:70:99:ae:c4:89:03:01:
81:5c:af:48:0d:cd:d8:c3:bb:e0:c4:46:f2:dd:00:
45:03:f2:24:fa:bf:23:08:36:8b:f4:56:98:d2:71:
b0:93:1e:d4:13:34:36:22:88:5a:a6:e4:63:ba:ce:
2a:90:46:56:82:e7:96:7c:a7:91:15:06:38:da:b1:
34:b2:79:e9:49:c8:b1:2d:fa:35:07:d3:10:40:ba:
ff:7d:14:0f:9d:78:17:f9:84:76:b0:59:ac:d5:7b:
93:00:ee:73:a6:10:9a:12:93:1e:c1:5f:27:e7:4f:
df:b3:79:54:b0:ba:5c:f5:ea:ee:7b:3d:ea:b6:b8:
b2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:64:B4:71:AD:8C:CF:7B:A0:54:82:C5:58:AF:60:16:C7:68:31:2F
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/j2S0ca2Mz3ugVILFWK9gFsdoMS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.124.0/22
45.83.132.0/22
45.83.144.0/22
45.83.152.0/22
45.139.44.0/22
45.139.56.0/22
45.139.64.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:6d:26:33:0a:17:14:19:e6:1f:0f:e0:5f:05:c1:a5:00:b5:
dc:90:57:51:22:dd:41:74:ff:d2:5c:1d:88:ae:89:7f:80:fa:
c4:f1:86:48:a9:14:43:36:e4:e8:80:aa:62:81:6b:4e:6a:28:
e3:fb:37:af:09:2b:45:f8:f6:c3:5d:93:9d:80:37:bd:56:7d:
cc:e1:b7:4d:33:d4:34:5f:22:eb:9a:f6:87:bd:2f:96:bd:dd:
65:df:19:51:bb:7a:73:c5:da:eb:a6:96:b2:59:6e:23:09:ca:
36:84:37:e7:d9:47:3d:a0:2e:f5:2e:18:8f:e6:0b:94:cb:a2:
f6:20:40:4a:35:03:48:8d:62:66:f3:2e:7f:4e:88:d0:61:8d:
82:31:e0:88:d5:f6:eb:2a:9e:e2:37:26:37:ed:46:5b:e2:3d:
1c:cb:fb:68:f0:10:52:b1:dc:15:0a:23:07:88:e7:fb:f7:a6:
a2:20:d0:5e:f4:32:80:12:38:92:54:15:5a:fb:56:b8:69:68:
9e:b8:cf:91:16:f0:5c:e4:d3:1f:20:4e:82:63:82:78:e8:05:
72:96:8c:e3:7a:c6:55:22:3c:65:41:7a:38:5a:bf:c6:7e:30:
7f:4f:9d:41:6a:c1:47:01:08:fa:c0:fc:7f:03:30:4f:4d:01:
2c:83:63:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 17:41:22 2024 by rpki-client on console-fra.rpki-client.org