Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/AtRh0QCjW2FxrMiBoFzuxmMHbDo.roa
File: AtRh0QCjW2FxrMiBoFzuxmMHbDo.roa (raw, json)
Hash identifier: rbVBu5UT8vlmW0ighpHKQCNNajdSpOLSiOtv2CAK2ZQ=
Subject key identifier: 02:D4:61:D1:00:A3:5B:61:71:AC:C8:81:A0:5C:EE:C6:63:07:6C:3A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0187A2BE3A3C2A978C96A0DFA7DADD47DAC4
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/AtRh0QCjW2FxrMiBoFzuxmMHbDo.roa
Signing time: Fri 21 Apr 2023 07:36:28 +0000
ROA not before: Fri 21 Apr 2023 07:36:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.88.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Apr 2023 14:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a2:be:3a:3c:2a:97:8c:96:a0:df:a7:da:dd:47:da:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 21 07:36:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02d461d100a35b6171acc881a05ceec663076c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:07:f2:45:16:f1:0b:6f:4c:48:53:99:4d:90:
ff:b3:3a:ab:6a:97:26:6a:fd:dc:d0:6e:ad:b5:ec:
bc:ac:c9:8c:48:be:f9:ac:0c:79:a4:1f:a7:67:0b:
06:68:e1:2f:91:15:69:5a:50:97:73:35:5a:e5:ba:
78:85:96:43:45:2b:c6:13:44:3a:f1:af:2f:bc:fb:
58:84:c8:55:33:fe:2c:f3:8e:d5:82:84:9c:1e:dc:
32:33:ed:da:d3:bc:0f:9f:03:7d:b6:9a:fb:54:bd:
ac:25:9d:3d:8f:f6:3f:4b:f0:b2:bd:5d:83:d3:49:
07:03:1e:11:eb:9f:e3:d0:ff:fd:fa:9b:3f:ff:e1:
fd:72:9b:f2:50:f2:bc:99:db:bc:4b:aa:ed:3a:7b:
1b:80:76:51:1a:8f:21:56:f0:b5:87:ec:58:a0:f5:
88:e6:0d:67:dd:0b:52:6b:a6:8c:9f:00:a9:0e:99:
37:7c:9c:e3:b0:b9:34:c6:f8:17:5e:6d:a9:21:a8:
da:a5:49:29:6b:bb:8f:1f:d8:46:fe:c3:aa:ac:df:
a0:b0:5c:3c:3a:21:a4:a1:1b:33:7c:26:40:0e:89:
21:ff:74:68:cc:8e:17:54:ce:80:06:16:79:45:05:
50:c1:31:6d:fa:6f:bd:0e:4c:95:ff:1b:cd:ad:9c:
29:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D4:61:D1:00:A3:5B:61:71:AC:C8:81:A0:5C:EE:C6:63:07:6C:3A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/AtRh0QCjW2FxrMiBoFzuxmMHbDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.138.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:15:67:d7:16:97:82:8f:40:c9:9b:7a:8e:39:20:46:b1:bb:
92:f3:b1:ce:9e:cf:cd:76:89:90:84:23:78:cb:50:78:16:ea:
00:66:d0:a0:20:ef:8c:b5:f8:35:06:7c:5b:7a:af:90:2f:2a:
4f:c9:c1:87:9a:47:82:46:f7:ed:66:cc:e0:e1:a4:0b:ed:dc:
a6:54:0d:52:e1:9c:8c:05:d6:31:ef:2d:11:c7:4f:a2:ad:bb:
66:21:96:ef:0b:ca:48:d5:c0:55:b6:bd:82:88:30:48:f0:0c:
83:84:0a:43:54:c9:4e:cd:6a:ac:6a:2f:76:e8:89:31:5c:d5:
61:e8:f3:b0:e1:47:f2:b1:5b:72:44:f9:7e:19:1d:5b:49:04:
a4:fa:44:14:9f:2a:4c:ca:53:e7:20:86:ff:a2:34:44:09:f0:
3a:9c:3d:6e:b5:88:b4:94:ba:bc:ef:9b:81:e6:cf:5e:71:65:
8d:64:58:86:d4:da:da:b7:e8:84:2e:86:fd:cf:ec:5d:c7:8f:
9c:43:cd:6f:da:e5:c4:3b:a7:10:8e:d2:fd:19:83:2b:6b:e9:
ed:c0:af:c8:af:4e:88:98:fd:70:d9:1e:ce:e7:f7:83:5e:61:
ed:c5:9c:b1:cb:75:e4:76:1f:4f:49:31:20:f2:85:2c:7e:f0:
ea:bf:70:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org