Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/eoMErLRQtchaYqK18ByiJ_Mdghw.roa
File: eoMErLRQtchaYqK18ByiJ_Mdghw.roa (raw, json)
Hash identifier: fejOPFWtM1e1F+0LuARjOQ+ydaBlfivMnf8t1/EEF4c=
Subject key identifier: 7A:83:04:AC:B4:50:B5:C8:5A:62:A2:B5:F0:1C:A2:27:F3:1D:82:1C
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 018A31D1107703A29C8436B32CA5E0717B3E
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/eoMErLRQtchaYqK18ByiJ_Mdghw.roa
Signing time: Sat 26 Aug 2023 12:28:19 +0000
ROA not before: Sat 26 Aug 2023 12:28:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49103
IP address blocks: 45.15.248.0/22 maxlen: 24
45.86.196.0/22 maxlen: 24
45.86.196.0/24 maxlen: 24
45.86.199.0/24 maxlen: 24
45.132.168.0/22 maxlen: 24
45.86.198.0/24 maxlen: 24
45.86.197.0/24 maxlen: 24
45.156.196.0/24 maxlen: 24
45.156.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Aug 2023 13:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:31:d1:10:77:03:a2:9c:84:36:b3:2c:a5:e0:71:7b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Aug 26 12:28:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a8304acb450b5c85a62a2b5f01ca227f31d821c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:f9:54:23:be:7d:31:bb:4b:26:f3:95:55:
aa:29:45:e2:89:18:35:a9:6f:09:3b:34:4f:a3:01:
d1:6e:b4:df:a6:5d:6f:fe:60:93:bb:8c:a6:82:5e:
5c:61:f6:e6:79:18:bb:e2:2d:ac:50:01:37:52:d7:
30:73:cc:27:c0:64:69:44:ec:73:9d:b3:a9:e0:18:
bd:94:8d:20:b8:0c:cc:9a:d1:cc:aa:3e:c1:06:c1:
65:bc:45:27:22:61:b8:05:0b:dd:3d:fc:7a:bd:ca:
a2:49:fb:14:c2:bc:69:63:c1:e9:4b:04:d9:95:92:
4e:49:e7:1d:c5:22:31:d9:ac:15:ef:39:35:16:19:
5e:bc:ac:e6:bd:ea:fb:a2:9a:f0:b1:11:b2:47:de:
3d:f1:bc:14:0e:49:52:81:f0:98:d5:26:ff:c0:15:
de:72:02:b2:ec:7f:7c:90:49:74:05:8c:2e:94:8e:
01:d6:4f:4f:f7:af:7c:b2:1c:eb:ce:f5:9f:fc:cb:
4a:78:87:df:58:07:11:06:d5:57:79:9f:ac:f3:e4:
5a:00:f5:d8:0e:18:1d:85:58:7d:df:f6:a6:c5:4b:
86:32:3d:70:e1:74:c4:38:8c:95:c3:e2:09:88:db:
55:ac:2b:c1:04:98:5b:62:eb:23:fc:3f:59:7a:96:
42:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:83:04:AC:B4:50:B5:C8:5A:62:A2:B5:F0:1C:A2:27:F3:1D:82:1C
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/eoMErLRQtchaYqK18ByiJ_Mdghw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.248.0/22
45.86.196.0/22
45.132.168.0/22
45.156.196.0/24
45.156.199.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:27:fc:0b:a0:71:1e:ca:e9:d8:0c:8a:53:4e:e9:5d:f1:c9:
3c:7f:37:61:36:7b:13:c2:14:96:9e:bc:75:99:b9:94:b3:78:
ac:4a:26:06:eb:e4:5c:1c:7d:fa:00:6e:4b:4a:ca:ad:6a:74:
4d:97:53:56:82:9c:f5:c7:9e:2f:a3:9b:db:43:31:b1:0c:7b:
5c:20:c7:9a:1c:f3:c8:be:20:fe:e9:bc:6f:e4:3f:f5:3f:62:
33:2b:eb:2c:ca:a9:d2:ea:e1:f8:fd:83:f7:60:9d:e6:4e:58:
87:eb:44:50:b2:6f:c8:b6:69:8e:bb:01:c9:c8:ec:ac:78:ab:
27:ba:f1:98:bf:8c:7a:7c:e2:65:6f:45:01:ae:40:3a:93:de:
33:62:c3:d8:6c:87:4f:25:e9:4c:98:6c:5c:44:e8:78:95:e3:
de:ad:c1:f3:2d:a2:b7:fe:a6:19:b4:06:61:64:e3:4f:80:4b:
01:df:1a:0d:0a:59:45:17:ea:d3:80:3e:05:98:ff:ee:c4:9c:
7b:1a:59:7c:c7:0a:01:ff:f9:3e:35:de:8d:65:17:fd:7e:90:
1d:94:fb:ad:3a:ed:62:bf:db:9c:48:9e:58:f7:a6:e5:bb:ee:
60:6f:22:a8:9c:7b:31:4b:2c:54:c5:ca:ea:00:3f:29:b6:17:
6d:ff:f0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:37 2024 by rpki-client on console-fra.rpki-client.org