Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/vixUzH09O_9Uj7oc-H2zaRKuf4o.roa
File: vixUzH09O_9Uj7oc-H2zaRKuf4o.roa (raw, json)
Hash identifier: 6l7Nyeii37dcVRILTBuoIQjxzsy2alwBDnMBGpQu0PA=
Subject key identifier: BE:2C:54:CC:7D:3D:3B:FF:54:8F:BA:1C:F8:7D:B3:69:12:AE:7F:8A
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 018BF6FFCEBAD864870CE8AA3E63FAA41DF8
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/vixUzH09O_9Uj7oc-H2zaRKuf4o.roa
Signing time: Wed 22 Nov 2023 12:27:21 +0000
ROA not before: Wed 22 Nov 2023 12:27:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 45.139.56.0/22 maxlen: 24
45.139.64.0/22 maxlen: 24
45.83.124.0/22 maxlen: 24
45.83.144.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:ff:ce:ba:d8:64:87:0c:e8:aa:3e:63:fa:a4:1d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Nov 22 12:27:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be2c54cc7d3d3bff548fba1cf87db36912ae7f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2a:da:09:a7:a7:1b:74:10:3a:da:5e:7a:49:
9d:a5:4f:f8:da:7e:a7:71:ae:55:f1:3b:f3:41:9d:
4c:dd:e1:c2:3e:b1:4c:f9:f4:7c:f8:f2:27:31:f8:
11:e2:2f:53:de:c3:3e:9f:15:bd:8b:d6:99:31:e4:
16:a0:bf:9c:5c:56:d6:25:a0:72:0a:0e:c4:63:c8:
33:15:83:c3:9c:85:91:25:77:10:c0:bb:9e:b1:66:
fc:ad:96:67:c0:08:fe:06:81:f8:46:c0:0a:09:b0:
10:80:18:d6:f1:ae:11:5e:b5:09:31:b2:a4:85:c7:
99:e9:7c:b2:7f:a1:0e:49:27:2c:25:e8:fa:79:f8:
22:2e:78:7d:12:f6:02:85:d4:3b:a3:9f:df:cb:4b:
a1:41:9c:8b:03:60:78:a8:9b:a6:0c:1c:9f:ef:86:
b7:79:c3:94:6d:24:24:56:74:89:d2:f6:75:2f:92:
07:a8:1b:9b:f9:d4:3f:30:8a:59:c8:50:29:85:28:
ca:91:41:72:37:f5:13:52:a5:2c:78:1f:22:f9:ad:
82:ca:8a:c9:2a:b2:2b:da:42:ae:ae:9c:62:8c:71:
c9:72:c7:00:7b:0e:5e:f1:ed:70:12:9b:ed:31:bb:
29:7d:34:1b:82:b3:b1:03:ad:5b:35:26:b0:4b:8c:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2C:54:CC:7D:3D:3B:FF:54:8F:BA:1C:F8:7D:B3:69:12:AE:7F:8A
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/vixUzH09O_9Uj7oc-H2zaRKuf4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.124.0/22
45.83.144.0/22
45.139.56.0/22
45.139.64.0/22
Signature Algorithm: sha256WithRSAEncryption
04:8b:a1:3e:d8:21:2a:01:78:18:15:c0:3d:17:d5:61:48:92:
21:98:b0:38:15:7b:80:c2:a3:14:0f:07:5e:8a:f8:a8:52:cc:
84:bd:38:a2:1b:1a:25:6e:55:31:1a:57:63:5a:fe:76:3b:b8:
01:0b:ed:fb:37:6a:01:4e:83:62:d9:ac:01:1a:1b:db:77:09:
cf:a3:a3:d8:a6:c8:66:a8:e8:fc:d1:ca:30:49:bc:16:61:a8:
74:2d:8c:21:cd:21:98:dd:ad:4b:81:cf:96:7c:86:f2:eb:b7:
13:70:6a:ef:ce:d3:1f:75:36:df:b5:94:29:f2:1d:94:23:3e:
96:66:a2:6f:61:6c:bb:d7:37:7c:73:1c:db:70:bc:94:07:a2:
4c:e0:f5:3f:8e:db:61:11:52:98:d5:09:da:25:22:45:6d:a2:
09:6b:fe:c6:f8:89:e0:90:b3:d9:1d:f0:c8:18:3e:f4:30:08:
e5:a8:df:a6:cd:83:ab:a3:9b:87:ae:31:87:80:76:a4:36:f4:
3c:69:b0:e5:55:9f:d2:05:10:eb:49:61:3d:74:2d:8b:76:a8:
1d:fd:56:2e:99:68:91:c6:58:17:0b:ee:79:44:24:57:2c:d9:
a6:f3:f8:a2:6d:a5:82:7d:08:bf:67:e6:58:67:9a:4a:23:68:
cd:42:53:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:27 2024 by rpki-client on console-ams.rpki-client.org