Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/CmDMYTYFmL1rBuKr_cfj0wRfN9Q.roa
File: CmDMYTYFmL1rBuKr_cfj0wRfN9Q.roa (raw, json)
Hash identifier: CFe5DW/ZBwUQ9Pa1dyFQc81TvwzYP5gtfAiftl0cvoY=
Subject key identifier: 0A:60:CC:61:36:05:98:BD:6B:06:E2:AB:FD:C7:E3:D3:04:5F:37:D4
Certificate issuer: /CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Certificate serial: 018CC79335FAA4262D164C6579B8F2F7B1B5
Authority key identifier: 9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/CmDMYTYFmL1rBuKr_cfj0wRfN9Q.roa
Signing time: Tue 02 Jan 2024 00:29:22 +0000
ROA not before: Tue 02 Jan 2024 00:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208288
IP address blocks: 45.147.112.0/24 maxlen: 24
45.147.112.0/23 maxlen: 23
45.147.112.0/22 maxlen: 22
45.147.113.0/24 maxlen: 24
45.147.115.0/24 maxlen: 24
45.147.114.0/23 maxlen: 23
45.147.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Feb 2024 22:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:35:fa:a4:26:2d:16:4c:65:79:b8:f2:f7:b1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Validity
Not Before: Jan 2 00:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a60cc61360598bd6b06e2abfdc7e3d3045f37d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:73:31:ca:ff:5f:2e:57:64:52:41:0e:89:
6f:2b:d4:6d:a9:07:37:f7:e1:60:40:65:8f:7f:c4:
d3:2f:00:aa:4a:88:ae:72:1a:66:c2:b0:54:8e:d2:
db:b8:6b:39:66:cb:b6:29:ca:79:12:39:fd:4a:5c:
65:69:0a:3a:4c:ca:66:88:c3:45:36:e5:bd:ed:7a:
3d:2a:a0:88:c3:a7:af:f5:92:6c:a9:63:c4:30:29:
ed:da:09:ca:c8:2d:46:3f:a3:78:20:45:79:b9:e5:
99:a4:04:9a:02:40:ec:85:e8:ae:d5:85:cd:23:35:
44:51:47:e7:41:98:e3:21:a7:aa:04:97:3c:ed:8d:
39:87:d2:69:3b:6b:f9:27:2f:5e:23:fc:c3:f8:74:
fa:03:64:41:f4:cb:c8:be:f1:76:78:7b:a2:4d:5b:
db:43:9b:dd:cc:33:39:66:86:44:6b:7c:6c:8d:1c:
16:0b:9c:a1:dd:5d:e4:84:8f:b8:f5:9b:d2:81:ee:
07:d9:98:3c:3d:8c:cd:1b:63:3e:3c:36:13:24:76:
ab:e1:c2:ac:dc:58:0d:d2:d6:08:2b:d5:3c:2f:f3:
23:5b:74:2a:91:1a:76:4b:a5:f4:95:18:3a:9c:67:
02:9d:af:ce:33:70:62:8e:71:48:60:69:b7:a7:12:
66:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:60:CC:61:36:05:98:BD:6B:06:E2:AB:FD:C7:E3:D3:04:5F:37:D4
X509v3 Authority Key Identifier:
keyid:9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/CmDMYTYFmL1rBuKr_cfj0wRfN9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.112.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:a0:34:e8:59:5d:2e:b7:3e:10:30:a2:9e:b3:5e:2f:e9:08:
2e:9d:ea:e8:10:ea:03:20:88:be:b5:d2:e8:13:98:8c:50:e3:
f4:cd:a8:49:fb:83:9d:03:06:71:c5:11:fe:11:62:bb:93:2c:
f8:86:97:15:05:93:91:43:28:be:3f:2d:bd:f6:d1:86:57:2a:
66:e9:90:ad:9f:a1:9b:d8:47:99:ad:95:b0:e3:7c:71:1b:cd:
09:90:b0:33:25:9f:5e:0f:9a:25:f1:0e:01:5a:96:2a:7a:39:
83:41:1b:aa:c7:45:62:eb:50:e7:3b:41:c6:ab:fe:d9:5a:5b:
91:29:d4:6e:7a:f8:ba:9a:b9:9e:af:7f:73:07:07:5f:1f:c6:
fc:63:50:0e:ad:bb:c8:aa:b6:b8:63:0e:70:eb:03:a6:0f:6e:
d8:4b:09:a1:cf:4a:25:2a:f1:68:7f:4d:01:bb:74:b9:13:ec:
34:5e:a7:fc:3f:ef:51:60:1d:2c:e0:0a:fe:09:48:80:fc:20:
81:2f:31:ae:f3:7e:1a:39:93:ac:7e:f8:27:12:31:c5:f4:48:
5d:e7:e8:26:0d:9f:e8:5c:7c:30:69:bc:3f:c0:1d:48:f2:56:
46:1d:84:56:ea:f2:41:ea:04:63:7e:9f:03:43:fe:3a:5a:17:
89:b8:93:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:14 2024 by rpki-client on console-fra.rpki-client.org