Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/jQEkuhjYCqsAljL68GSinhlS9AM.roa
File: jQEkuhjYCqsAljL68GSinhlS9AM.roa (raw, json)
Hash identifier: 05O8622G7C7nox6yXMP3VzsNdF3bBtd0PheGGLZhnE4=
Subject key identifier: 8D:01:24:BA:18:D8:0A:AB:00:96:32:FA:F0:64:A2:9E:19:52:F4:03
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 018733F65589470878D5DDCB0ABB419864CC
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/jQEkuhjYCqsAljL68GSinhlS9AM.roa
Signing time: Thu 30 Mar 2023 19:19:54 +0000
ROA not before: Thu 30 Mar 2023 19:19:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42156
IP address blocks: 45.83.172.0/22 maxlen: 22
45.143.62.0/23 maxlen: 23
45.143.60.0/24 maxlen: 24
45.143.61.0/24 maxlen: 24
2a0e:8480::/29 maxlen: 29
2a0e:e2c1::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 21 Apr 2023 08:05:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:33:f6:55:89:47:08:78:d5:dd:cb:0a:bb:41:98:64:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: Mar 30 19:19:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d0124ba18d80aab009632faf064a29e1952f403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f5:58:47:dd:20:77:39:b0:79:ae:9e:70:ec:
7d:40:1a:54:2f:9e:49:98:23:17:f0:ba:31:c9:8c:
ff:c8:bd:9b:1c:0b:8f:06:91:91:fc:89:ae:f1:64:
09:2c:14:06:18:1b:7c:58:6d:72:64:e4:e5:6b:b9:
58:e8:fc:4e:d0:6e:ed:e4:bc:d8:45:0e:0a:5e:e6:
71:3b:cc:73:54:31:a3:37:7f:06:1d:45:a4:d1:f7:
4a:b9:b7:6f:2c:54:d7:24:e6:87:f3:b6:1e:5b:85:
c1:77:45:45:d3:0a:55:80:0d:58:3c:cf:f0:4a:f6:
29:d0:79:1c:05:a5:d4:1f:a5:02:c5:b5:23:68:00:
f0:b9:8e:f9:f6:08:bd:07:a3:30:8e:37:42:6a:8a:
57:e2:34:e0:52:3a:da:53:8f:0c:f5:80:da:64:87:
4b:8f:f8:04:d2:2f:9a:d5:76:22:75:aa:5e:f3:52:
43:fb:6b:b0:2b:af:6c:3a:4d:a9:7c:89:07:93:2a:
db:c3:1b:79:a8:6a:7e:e2:1d:13:22:b6:7a:f6:fe:
0f:5c:df:0d:32:73:dd:27:a5:81:98:fe:45:11:02:
44:02:59:35:5f:f0:23:80:92:36:1c:e8:e5:c8:77:
ca:25:8e:ba:fd:a2:8f:10:25:db:77:1a:1f:f2:84:
d7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:01:24:BA:18:D8:0A:AB:00:96:32:FA:F0:64:A2:9E:19:52:F4:03
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/jQEkuhjYCqsAljL68GSinhlS9AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.172.0/22
45.143.60.0/22
IPv6:
2a0e:8480::/29
2a0e:e2c1::/32
Signature Algorithm: sha256WithRSAEncryption
01:fa:50:5e:18:10:85:db:87:e3:a9:b5:06:2e:49:75:3f:d7:
07:de:67:bd:70:bf:18:22:32:2b:3c:a3:07:93:56:17:58:3a:
4d:e8:3b:85:ec:2b:be:44:de:1f:50:26:9b:fc:b1:ac:a8:19:
fa:2f:4e:0e:39:54:30:77:dc:fa:dd:f1:e0:7b:c9:f2:90:91:
ad:45:cd:e8:62:4e:15:06:05:b5:62:7e:6f:9d:eb:25:39:7f:
78:f8:02:96:35:6f:a4:15:46:2c:26:59:fb:40:77:68:39:d5:
34:85:71:7d:4e:84:6d:a5:c3:b5:97:72:39:69:b6:86:36:12:
93:8b:3d:85:a1:54:53:71:cd:10:3e:9a:dd:2d:d8:fa:af:3a:
a6:bd:61:15:8a:26:38:e6:d1:5b:4f:d4:77:cb:7b:73:19:0c:
d7:1d:74:fc:47:19:0c:86:6b:6d:02:5b:2d:37:df:b3:79:e1:
57:38:c4:0b:df:d0:32:60:7e:9e:a3:b6:53:8c:1d:42:e3:ab:
98:f9:03:ab:78:0d:00:0e:ec:3b:a8:e6:42:68:1c:a9:98:c2:
56:13:aa:c0:a1:d3:d4:cf:45:18:7a:5a:d9:5f:3d:12:74:32:
70:42:b9:47:90:b3:de:1c:27:e6:0d:a5:bb:f4:a5:f1:6e:cc:
b1:84:5a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:08 2024 by rpki-client on console-ams.rpki-client.org