Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/x5Sx6MhbGYafa31gz5J5asrl9SA.roa
File: x5Sx6MhbGYafa31gz5J5asrl9SA.roa (raw, json)
Hash identifier: MDrKD5N80N6GgG5gzwhrVESN2yD3hjUXAGACTC4/JOA=
Subject key identifier: C7:94:B1:E8:C8:5B:19:86:9F:6B:7D:60:CF:92:79:6A:CA:E5:F5:20
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 018A6E9AD0FD53956E39CEA3652A4245B067
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/x5Sx6MhbGYafa31gz5J5asrl9SA.roa
Signing time: Thu 07 Sep 2023 07:45:54 +0000
ROA not before: Thu 07 Sep 2023 07:45:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34549
IP address blocks: 45.156.44.0/22 maxlen: 22
45.83.124.0/22 maxlen: 24
45.83.144.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6e:9a:d0:fd:53:95:6e:39:ce:a3:65:2a:42:45:b0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Sep 7 07:45:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c794b1e8c85b19869f6b7d60cf92796acae5f520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:5d:57:54:f9:2d:bc:8d:19:26:09:e5:b8:
7d:68:b9:c5:b1:92:45:eb:9b:e8:e3:41:50:80:dd:
2f:dc:96:52:9e:48:20:0a:3e:59:af:b4:46:61:bd:
ab:a4:1d:60:a0:ed:24:b5:19:a5:e5:16:42:9c:9e:
90:00:f7:c2:70:5d:95:36:77:65:78:c2:b2:2b:d0:
a3:c8:4e:86:bd:3f:db:0a:b5:7a:bd:2c:3e:43:be:
28:fc:e9:98:14:24:ea:06:91:a6:e9:21:c1:ba:85:
ae:2c:9d:d6:64:95:44:1b:94:20:b8:62:d8:a9:c6:
dc:1b:f7:e2:f1:47:24:82:27:86:05:fa:b8:df:a1:
1c:da:5d:89:d1:05:c8:82:2a:3a:13:fc:e7:b9:8a:
4f:a6:08:01:50:9a:2a:fb:09:f1:66:08:a0:8d:02:
a9:29:e4:4e:63:aa:b8:9d:7f:03:49:dd:5a:f7:fa:
a4:2e:85:c2:2b:0a:08:95:5b:c5:31:d9:57:ac:36:
ae:37:48:f4:7e:ed:0b:60:83:e6:3d:af:76:89:f3:
58:65:5c:4a:00:24:20:44:64:2e:08:2b:cc:89:1a:
8f:1f:28:f6:4b:2d:72:df:46:54:7c:38:b1:ed:15:
91:bb:9b:01:15:51:fe:b6:04:2a:85:c7:b6:83:85:
40:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:94:B1:E8:C8:5B:19:86:9F:6B:7D:60:CF:92:79:6A:CA:E5:F5:20
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/x5Sx6MhbGYafa31gz5J5asrl9SA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.124.0/22
45.83.144.0/22
45.156.44.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:e5:f8:ad:87:ff:ce:24:15:46:40:f1:df:5f:ef:51:ae:d2:
61:69:81:f8:28:a3:17:46:e5:ba:d2:26:5d:95:96:f7:a3:4d:
c7:96:0f:fd:04:c2:00:f4:6e:08:84:00:4e:23:4b:1b:59:b1:
22:ec:0c:b1:c8:a9:9f:0c:af:5c:4c:d1:8e:d4:66:96:07:e9:
87:75:46:25:00:43:67:f6:47:29:fe:4e:39:e2:5a:83:25:a2:
1e:4d:b2:a6:78:dc:8f:c1:79:ff:43:0d:de:de:8d:bb:6e:9a:
db:b6:a4:58:3b:ee:cf:23:c1:76:a8:06:02:c0:c8:31:90:71:
f1:fb:61:e0:f5:cb:b7:4d:93:43:19:27:31:23:42:ce:33:67:
a0:0a:13:f8:5b:91:1f:11:95:f6:49:3b:92:97:87:cc:3d:c2:
69:89:47:31:73:f5:03:26:18:41:d1:28:b3:8c:c3:2f:93:8f:
82:c2:d8:2a:c9:21:2a:a5:59:2e:39:52:68:c4:bf:50:41:d8:
e5:96:66:46:d5:f9:0b:ec:0f:3c:00:c8:b3:e8:37:64:b1:58:
eb:22:16:73:df:0a:e7:d0:65:56:29:0d:eb:9b:bf:67:b9:bc:
6a:78:99:b0:90:ea:32:ea:04:d4:6c:b1:7b:d4:a5:59:9f:22:
04:cf:52:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 18:07:22 2023 by rpki-client on console-fra.rpki-client.org