Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/fSYobymUrHsu3M7SBl-Dlmc4Xqo.roa
File: fSYobymUrHsu3M7SBl-Dlmc4Xqo.roa (raw, json)
Hash identifier: qYC7qQNS2sUqraYHmrNkaDIs4W6U+McJrHgFOOblWIU=
Subject key identifier: 7D:26:28:6F:29:94:AC:7B:2E:DC:CE:D2:06:5F:83:96:67:38:5E:AA
Certificate issuer: /CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Certificate serial: 01856BD343B62080EE29CBFBFE9AA46DE6AE
Authority key identifier: 6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/fSYobymUrHsu3M7SBl-Dlmc4Xqo.roa
Signing time: Sun 01 Jan 2023 05:34:45 +0000
ROA not before: Sun 01 Jan 2023 05:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39452
IP address blocks: 45.13.40.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:43:b6:20:80:ee:29:cb:fb:fe:9a:a4:6d:e6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Validity
Not Before: Jan 1 05:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d26286f2994ac7b2edcced2065f839667385eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9f:77:89:4e:b3:22:23:02:ba:3f:19:c5:0d:
a4:0d:c1:3e:1b:d2:d4:24:88:5f:ee:0e:f8:90:6f:
e3:f6:99:c8:8f:a8:4e:b7:4c:3f:e1:f3:74:0d:df:
4c:d8:90:b4:3e:b1:41:29:08:ae:fe:22:10:2b:96:
d8:6c:87:c6:12:85:0d:6e:1b:41:ea:b5:5a:b6:f7:
b0:38:50:b3:cb:5b:0a:62:67:37:06:e5:f4:6a:05:
a7:e4:8d:f0:b3:b3:a0:98:1d:e4:2e:da:03:4b:44:
29:70:6b:cd:9c:4c:3d:89:eb:39:4e:48:9f:ad:93:
c7:b4:62:6c:af:0c:bc:44:ac:26:da:c4:6f:e3:67:
22:64:83:9e:cb:87:0f:ea:09:7c:00:cc:8f:3f:e5:
c4:dd:11:70:a4:6d:48:fc:27:c4:db:61:96:78:41:
23:e4:ce:3e:2a:c9:d6:bc:c9:1f:eb:cb:df:bf:44:
48:45:06:36:dc:e8:88:f2:f9:73:db:56:42:bd:d3:
8f:3c:07:15:4d:06:c1:14:b8:05:91:1c:3b:89:c6:
5e:52:7d:97:81:28:0f:88:f6:7b:f1:f4:7c:cb:0b:
98:04:1a:d7:e6:09:61:12:da:55:0f:6d:50:6b:d4:
85:57:fe:90:06:c7:8c:fa:ac:06:de:05:8d:6c:46:
b9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:26:28:6F:29:94:AC:7B:2E:DC:CE:D2:06:5F:83:96:67:38:5E:AA
X509v3 Authority Key Identifier:
keyid:6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/fSYobymUrHsu3M7SBl-Dlmc4Xqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.40.0/22
Signature Algorithm: sha256WithRSAEncryption
88:b1:08:98:40:93:25:ea:08:a6:07:d7:6c:7b:d9:73:9f:a7:
78:d3:7d:2d:03:e2:a6:f2:1b:ed:f3:4e:de:d1:70:c2:51:e4:
05:48:b8:b8:d9:68:36:68:fe:a3:b8:1b:b9:db:e6:2a:88:c6:
78:fc:9e:02:4d:08:f8:97:37:cf:df:e4:4d:af:03:c2:c9:04:
d2:07:75:cb:c8:56:65:57:6d:1c:f5:00:b9:1c:4a:90:86:5a:
9d:2a:b2:bc:99:9c:5e:9f:5e:87:ae:13:13:47:db:44:57:8b:
7f:8e:1b:ba:c0:92:98:85:ba:0e:05:c0:ce:e5:5b:1c:7b:54:
5e:5a:05:da:c6:16:1b:bb:5f:e8:de:73:12:6f:d5:7c:36:3d:
6c:8c:4e:f1:16:69:61:3f:a9:c4:52:e1:8d:31:21:5d:ae:74:
75:26:86:89:d7:8e:30:ba:e4:9a:61:2d:a1:fd:40:6b:bc:13:
2e:0c:7e:62:a3:d6:97:79:7e:cd:4b:a2:75:86:ff:62:fd:60:
d1:66:41:08:37:01:85:5c:c7:c6:d4:ae:d7:59:1b:e2:e5:1a:
04:57:4d:d7:24:7a:f3:52:7d:61:86:85:fe:af:73:b5:d4:a3:
14:27:33:64:17:93:fb:34:70:77:03:e7:4e:ff:dc:d3:08:99:
eb:f0:a7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:09 2024 by rpki-client on console-ams.rpki-client.org