Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/6XH-OS02p8mRTcMcyEr0glFHlXk.roa
File: 6XH-OS02p8mRTcMcyEr0glFHlXk.roa (raw, json)
Hash identifier: J9v9rliyq1nE/LKeS042PBc1SupiqEMwVIkVmeAfnIQ=
Subject key identifier: E9:71:FE:39:2D:36:A7:C9:91:4D:C3:1C:C8:4A:F4:82:51:47:95:79
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 01856CEF368474D98658210EBFD0CA802A46
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/6XH-OS02p8mRTcMcyEr0glFHlXk.roa
Signing time: Sun 01 Jan 2023 10:44:54 +0000
ROA not before: Sun 01 Jan 2023 10:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35251
IP address blocks: 45.145.230.0/24 maxlen: 24
45.145.231.0/24 maxlen: 24
45.138.68.0/24 maxlen: 24
45.138.69.0/24 maxlen: 24
45.138.70.0/24 maxlen: 24
45.138.71.0/24 maxlen: 24
45.158.22.0/24 maxlen: 24
45.158.23.0/24 maxlen: 24
45.158.20.0/24 maxlen: 24
45.158.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Apr 2023 11:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:36:84:74:d9:86:58:21:0e:bf:d0:ca:80:2a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Jan 1 10:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e971fe392d36a7c9914dc31cc84af48251479579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:06:79:c0:cd:11:de:bd:54:ea:ad:ad:5d:
64:77:0a:6e:4f:0c:9d:73:6c:0a:21:7b:3a:98:20:
3b:3a:31:67:14:4b:92:f5:07:ad:30:0c:9e:0a:7c:
d2:07:bf:37:53:eb:62:49:5b:09:13:8a:a5:df:03:
88:61:2a:c5:42:87:96:c1:16:46:da:fb:5a:de:46:
45:55:b4:06:79:f7:0c:23:c4:5c:e4:96:a0:45:64:
07:6a:7f:b8:31:20:47:ca:bd:44:3e:52:16:da:b1:
03:b1:66:77:65:af:cc:b2:f6:60:4a:35:45:bf:31:
95:31:80:1f:78:f8:28:40:24:cd:75:d7:c0:17:94:
1a:27:71:ff:ce:dd:45:ee:2a:73:16:c6:85:18:63:
33:ff:ad:0e:ca:bc:df:fa:04:7c:68:fc:a4:69:46:
6a:bd:b1:e2:c8:4a:c7:42:a9:1c:30:52:7b:3f:77:
a9:1f:e7:63:26:95:d3:4a:9e:56:c9:bf:f6:4a:fa:
c3:66:18:93:34:7c:13:5b:b1:fd:f1:19:6c:e3:5a:
45:13:64:53:ee:f8:6c:eb:04:37:30:5b:b7:b7:54:
df:21:2b:e0:a6:01:a3:51:4a:50:85:ed:dc:9e:08:
ac:90:57:36:44:83:7a:89:2b:75:d3:37:e5:d4:20:
71:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:71:FE:39:2D:36:A7:C9:91:4D:C3:1C:C8:4A:F4:82:51:47:95:79
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/6XH-OS02p8mRTcMcyEr0glFHlXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.68.0/22
45.145.230.0/23
45.158.20.0/22
Signature Algorithm: sha256WithRSAEncryption
03:81:34:31:45:52:86:20:e1:d2:08:97:37:1b:91:7c:da:9e:
14:08:25:c4:3a:cf:58:d8:5e:82:16:34:41:f9:6b:54:c1:1c:
57:5b:38:8b:93:30:a1:b9:1a:ae:94:59:8b:38:8d:c1:da:8d:
7a:4a:45:08:ba:6a:b5:da:2d:1f:b4:2d:34:fc:1e:81:55:02:
e6:73:34:07:88:78:23:75:ce:d1:19:52:68:42:7e:00:3a:d9:
36:8c:8e:2d:05:9b:3e:a5:a4:d4:99:be:a4:91:e2:11:36:55:
30:f0:f0:6c:79:77:31:79:cb:89:da:61:10:3d:e1:5a:76:8b:
29:45:b0:ed:c9:98:a1:81:89:a9:d2:2e:56:88:3a:7f:bc:35:
0a:0b:24:a7:d2:0e:7e:7d:89:c4:0a:bc:d7:9a:f9:61:41:3d:
29:b4:94:21:c7:bb:a8:18:cb:9f:f2:b8:5d:47:19:e0:18:2d:
c1:76:b3:a3:71:3d:be:5f:5d:84:49:75:af:27:af:e2:f5:3d:
08:4a:6f:19:a7:7f:30:ae:7d:5b:c8:c6:97:7e:d6:af:dd:b5:
ea:92:ab:bf:69:14:17:3f:34:36:09:b2:93:dc:09:b8:9f:85:
99:4d:a7:9d:7d:ea:e7:75:b1:b6:71:97:2e:e7:9a:35:90:b6:
24:ce:b3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:56 2024 by rpki-client on console-fra.rpki-client.org