Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/0IPyuwLfct1bJ09GrbAcJK2SweM.roa
File: 0IPyuwLfct1bJ09GrbAcJK2SweM.roa (raw, json)
Hash identifier: QJxA0FOVioH63mSi1iUv4tHXP0jwxSIY4svkmWKwiOc=
Subject key identifier: D0:83:F2:BB:02:DF:72:DD:5B:27:4F:46:AD:B0:1C:24:AD:92:C1:E3
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 01856FA71C4AC8475890B5F3E56EF4A9C5C5
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/0IPyuwLfct1bJ09GrbAcJK2SweM.roa
Signing time: Sun 01 Jan 2023 23:25:00 +0000
ROA not before: Sun 01 Jan 2023 23:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208612
IP address blocks: 45.92.43.0/24 maxlen: 24
2a0e:1cc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:1c:4a:c8:47:58:90:b5:f3:e5:6e:f4:a9:c5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Jan 1 23:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d083f2bb02df72dd5b274f46adb01c24ad92c1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:27:04:53:d3:77:af:52:33:a2:54:32:eb:
ef:e6:c7:9f:c3:f0:74:de:ca:dd:a0:01:ba:e5:b2:
41:af:fc:69:f2:02:f5:b8:db:6c:c0:25:40:70:4d:
93:f1:25:fc:a9:46:ad:26:e4:05:f8:60:ae:1a:75:
f7:49:d4:e7:bb:c2:a6:b5:81:ff:0b:81:a0:dd:21:
f4:ce:22:8c:70:17:9e:cf:d6:2a:e7:df:97:44:b4:
0c:e9:3a:b3:11:26:9b:ec:41:0e:55:20:60:21:a1:
92:30:b1:43:5c:5b:09:e5:75:1e:19:73:25:bf:4c:
19:df:bf:24:0a:0c:37:f0:27:cf:41:39:ed:8f:6f:
7a:85:a3:6a:f1:12:1c:22:70:e4:b0:80:0e:3a:6a:
c6:1b:ca:21:b6:7c:64:06:5e:7d:36:49:1f:f7:ed:
9c:2c:bc:1f:17:7e:89:5a:75:2c:d1:34:fa:59:43:
b0:42:74:eb:e5:f2:26:52:e1:f9:c7:2b:21:fb:e8:
e7:e0:61:49:f9:e4:05:e6:55:10:2d:57:2d:a3:29:
61:0e:5c:c8:7d:ff:3f:94:70:8f:5d:fe:60:8f:6e:
de:6e:c2:d1:39:69:1d:0b:2e:5f:23:84:0f:8c:4f:
a9:5c:d0:23:6d:5e:38:5a:54:ca:8d:38:70:98:21:
76:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:83:F2:BB:02:DF:72:DD:5B:27:4F:46:AD:B0:1C:24:AD:92:C1:E3
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/0IPyuwLfct1bJ09GrbAcJK2SweM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.43.0/24
IPv6:
2a0e:1cc0::/48
Signature Algorithm: sha256WithRSAEncryption
b6:c8:1c:7e:0f:70:95:a2:d2:4f:47:a5:b7:cc:e3:77:96:34:
9d:24:cf:6a:37:e8:31:ef:3c:85:c6:4f:d1:01:26:28:c1:90:
d3:56:02:a0:dc:95:61:e8:56:d5:12:41:45:09:74:3f:fd:02:
9d:a6:c0:0e:be:e6:e1:22:10:06:7b:37:95:78:f8:d5:6a:ae:
40:28:47:c3:64:b0:a1:ba:a3:e4:ba:bd:dc:38:5b:07:1f:c3:
cb:b9:99:00:9c:2e:05:47:d2:fb:9f:d1:1a:dd:8a:c0:44:ed:
b5:6c:b3:97:f5:6c:83:e0:25:80:c0:d8:75:b3:92:67:cf:23:
2e:ba:17:c5:dd:35:2e:01:78:89:51:05:23:7b:b8:23:1e:97:
c7:7b:e6:ab:c1:56:f4:1c:dd:94:a8:92:fa:5f:71:9e:93:79:
01:92:48:70:13:d9:4c:a7:16:e0:c4:bb:36:41:b9:5c:80:24:
d6:22:fb:c0:db:d9:a1:98:db:dc:68:3f:56:d3:92:3b:b5:35:
28:ca:45:54:d6:5c:34:f6:10:1d:c6:b4:ff:2d:94:3a:14:f4:
d8:55:00:a5:69:a6:de:58:e5:f8:0c:97:d9:52:cd:b7:ad:e4:
da:a6:cd:54:95:9e:2e:ba:ce:03:2c:11:b9:ea:e1:5b:ab:c1:
24:19:db:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-fra.rpki-client.org