Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/ydnt8tRtZQY1LcpmrSJHEUy8hMc.roa
File: ydnt8tRtZQY1LcpmrSJHEUy8hMc.roa (raw, json)
Hash identifier: bdnH6MY0uROpcbaknpEmhIgyvZ+rQiEWDg+xAyjk1Z4=
Subject key identifier: C9:D9:ED:F2:D4:6D:65:06:35:2D:CA:66:AD:22:47:11:4C:BC:84:C7
Certificate issuer: /CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Certificate serial: 01856CF85E7662B5007A5ADAB06F7BC9B3E8
Authority key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/ydnt8tRtZQY1LcpmrSJHEUy8hMc.roa
Signing time: Sun 01 Jan 2023 10:54:54 +0000
ROA not before: Sun 01 Jan 2023 10:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61125
IP address blocks: 45.66.35.0/24 maxlen: 24
45.66.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Nov 2023 19:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:5e:76:62:b5:00:7a:5a:da:b0:6f:7b:c9:b3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Validity
Not Before: Jan 1 10:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9d9edf2d46d6506352dca66ad2247114cbc84c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:75:7b:46:86:a1:0f:b7:81:c5:fc:3a:39:6b:
57:06:9d:09:7c:2b:35:04:c1:f0:9c:13:2d:86:2b:
de:70:af:1b:52:79:c7:1f:fe:6b:f7:4d:18:cd:d3:
fa:e9:78:1b:7f:dc:7e:4e:8d:4b:98:07:07:d5:d7:
d5:7a:30:e3:a7:c4:56:02:96:e8:f5:03:47:ce:17:
a8:d9:e2:a2:f1:f5:36:a1:2e:5f:fe:5b:f1:ae:71:
46:36:01:4f:17:ab:63:73:0b:58:5e:8f:72:0f:9c:
d8:ca:7f:64:70:2b:6d:0b:11:27:71:b8:6b:08:da:
44:90:c2:91:5e:7b:6a:48:f3:30:29:5b:1f:61:08:
1b:c7:94:f8:32:0a:d4:02:46:15:4e:66:19:08:32:
97:ce:c6:de:f8:d2:3c:e1:93:a4:02:52:08:5d:56:
51:35:c4:fb:21:88:4a:8a:8f:50:ec:93:89:08:1f:
27:d9:a7:6b:98:6b:4c:7b:3f:fc:ec:47:8b:2b:a0:
4e:1f:28:6a:53:bb:de:c1:3b:37:90:8a:b9:e4:97:
32:3f:a3:38:47:96:8e:40:86:79:0a:73:f9:88:77:
24:74:aa:d8:87:61:62:07:0c:ca:19:73:21:a9:d3:
5f:86:80:63:7f:6c:f7:f4:22:22:1b:38:66:7f:ef:
70:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D9:ED:F2:D4:6D:65:06:35:2D:CA:66:AD:22:47:11:4C:BC:84:C7
X509v3 Authority Key Identifier:
keyid:25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/ydnt8tRtZQY1LcpmrSJHEUy8hMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.34.0/23
Signature Algorithm: sha256WithRSAEncryption
27:61:66:b9:9b:fb:e4:5b:a4:49:63:ce:8d:33:98:8f:d6:fa:
97:4c:61:53:a9:04:b4:f7:25:14:33:c8:5d:c4:29:30:e0:d4:
e4:58:0e:ca:14:cd:44:68:e6:60:96:68:89:39:fd:11:7a:03:
e6:1a:f8:7a:11:b0:a5:17:e0:6a:43:b3:04:41:3e:74:8c:a7:
5a:e7:9c:e4:33:e8:b7:8a:27:e5:ad:b5:d3:a9:17:d3:2f:32:
0a:d5:b8:6a:ec:33:d2:53:bc:82:0e:2e:a9:4d:db:40:6d:46:
e5:c1:ba:57:02:1b:ff:98:56:ac:bb:36:20:fd:e8:9a:f1:48:
c1:25:e3:79:7a:b6:e5:9c:e5:3b:80:bb:d5:4a:f7:6d:46:8b:
74:4f:30:10:70:6a:ba:fc:b8:12:9a:fd:3f:51:59:7b:bc:0e:
44:28:2e:9d:4d:3f:75:ac:51:64:32:e8:fe:14:92:2c:cb:6a:
44:07:66:81:9d:7d:c8:d5:88:6e:88:b1:44:24:97:4c:48:04:
8e:d7:52:cb:a0:6d:1d:51:76:b3:dc:94:3e:b9:2a:9e:8f:28:
be:10:f0:c6:bf:13:e5:35:43:48:af:69:d6:a6:fb:df:9e:c5:
cd:db:32:12:fb:4e:34:7c:80:f3:58:d8:ec:da:3f:37:7a:72:
46:f8:d4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:54 2024 by rpki-client on console-ams.rpki-client.org