Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/2-l-V_mJClE1AP4TMIOSBFIFb44.roa
File: 2-l-V_mJClE1AP4TMIOSBFIFb44.roa (raw, json)
Hash identifier: h6c13iWzIkRlEZjWvvg5hV2GpklPf4hK9vRAdGGd+pY=
Subject key identifier: DB:E9:7E:57:F9:89:0A:51:35:00:FE:13:30:83:92:04:52:05:6F:8E
Certificate issuer: /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial: 0188BF3ECC27FF8A85328B94CFA4F9558969
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/2-l-V_mJClE1AP4TMIOSBFIFb44.roa
Signing time: Thu 15 Jun 2023 13:29:03 +0000
ROA not before: Thu 15 Jun 2023 13:29:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208662
IP address blocks: 45.86.105.0/24 maxlen: 24
45.86.107.0/24 maxlen: 24
45.86.106.0/24 maxlen: 24
2a0f:95c0:4000::/34 maxlen: 34
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:3e:cc:27:ff:8a:85:32:8b:94:cf:a4:f9:55:89:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Validity
Not Before: Jun 15 13:29:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbe97e57f9890a513500fe133083920452056f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4d:51:75:6f:7d:57:55:7a:e0:ca:6b:cc:56:
f3:0b:a9:33:7a:cf:6a:2a:8e:a1:2f:57:82:fc:fd:
3b:3a:8a:9d:e9:2c:c4:0a:99:dc:80:c2:41:60:e6:
6a:55:a3:39:eb:b5:ce:b1:e3:b9:ea:3b:ce:17:91:
4f:95:36:9f:37:24:78:8d:fd:55:3a:16:07:09:ef:
2e:6c:68:95:8b:11:0b:e5:f8:d3:34:91:30:95:3a:
5e:60:28:6b:a9:d0:6e:42:8f:5c:c9:3b:c1:07:ab:
7b:ba:dc:94:34:e6:6a:75:0c:37:8d:12:d1:a9:b4:
21:e8:03:1a:7a:90:aa:c2:93:c0:d7:a3:b5:d8:07:
88:47:4c:80:0f:1f:62:b1:97:83:6c:aa:12:7c:d0:
b4:31:ba:92:d4:9e:6d:31:5b:87:3e:65:39:fc:22:
82:6e:30:97:ed:81:4d:4e:c9:5c:20:23:b1:6e:ae:
ec:53:ce:b6:c3:ec:2f:33:78:73:90:df:f4:d6:75:
b2:76:d5:02:c8:b3:b7:20:61:01:ca:7e:85:21:cf:
52:f4:f2:71:92:44:ac:f1:53:9a:2b:bb:14:6b:22:
7a:23:b5:7d:2b:ee:16:8a:e0:fd:35:e4:7a:40:90:
88:1f:21:5a:af:35:3d:31:c7:ae:70:be:e9:ef:79:
23:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E9:7E:57:F9:89:0A:51:35:00:FE:13:30:83:92:04:52:05:6F:8E
X509v3 Authority Key Identifier:
keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/2-l-V_mJClE1AP4TMIOSBFIFb44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.105.0-45.86.107.255
IPv6:
2a0f:95c0:4000::/34
Signature Algorithm: sha256WithRSAEncryption
b5:6f:27:e2:c3:ff:4e:53:30:da:fa:3c:d4:dd:a5:85:c8:d2:
72:c7:94:0c:c5:fe:c2:18:1d:f9:9a:65:47:bd:94:cb:39:54:
3d:fa:8f:1f:f4:d7:50:3c:5d:e5:4d:16:b7:92:d7:81:e3:db:
d2:3f:5a:3d:b9:3a:cb:64:a7:6f:63:26:97:88:18:4d:78:6c:
7d:75:cc:b4:f8:07:ba:9b:bb:b4:0e:2f:82:f4:2a:5d:4f:c9:
6f:93:1f:20:7e:3b:70:56:b9:c3:9f:b6:a4:d9:0d:27:b9:f3:
68:6b:d9:3d:65:33:b5:12:a3:06:b7:b1:4e:8f:0a:16:d4:bb:
db:ba:8e:96:a8:35:34:ff:1f:47:57:ae:d8:90:31:4e:fc:9b:
61:fe:b3:78:36:d9:91:81:1e:c3:0f:aa:84:d0:c1:49:06:e8:
a0:cb:3c:9b:47:9a:01:2b:0b:26:2e:37:61:d4:0e:17:65:0e:
10:06:ef:95:af:22:ab:b4:ef:89:72:2d:42:76:34:31:51:80:
aa:72:3c:32:f1:32:5f:9d:ce:bd:50:8d:b5:f9:e9:64:c8:a5:
00:86:ab:4d:e7:71:8c:f0:61:37:c3:3d:89:46:11:cd:09:db:
95:bf:1e:02:1b:eb:cc:20:3a:72:d1:33:20:06:26:67:c0:fe:
38:58:a7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:53 2024 by rpki-client on console-ams.rpki-client.org