Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/k-Qr856hIJ7FSg-YPGZWEfGkx7s.roa
File: k-Qr856hIJ7FSg-YPGZWEfGkx7s.roa (raw, json)
Hash identifier: OaSOjFLBbIF4S6NxW2KWiGa2z2Gz0dC8HUZruOnFDAI=
Subject key identifier: 93:E4:2B:F3:9E:A1:20:9E:C5:4A:0F:98:3C:66:56:11:F1:A4:C7:BB
Certificate issuer: /CN=2c6d462d6584e3da1ff251554a345e49c6ad0fb1
Certificate serial: 01856F0B3325A91934506B0CCD56EA1E04A8
Authority key identifier: 2C:6D:46:2D:65:84:E3:DA:1F:F2:51:55:4A:34:5E:49:C6:AD:0F:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/k-Qr856hIJ7FSg-YPGZWEfGkx7s.roa
Signing time: Sun 01 Jan 2023 20:34:43 +0000
ROA not before: Sun 01 Jan 2023 20:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35267
IP address blocks: 45.93.198.0/24 maxlen: 24
45.93.199.0/24 maxlen: 24
45.93.196.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:33:25:a9:19:34:50:6b:0c:cd:56:ea:1e:04:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c6d462d6584e3da1ff251554a345e49c6ad0fb1
Validity
Not Before: Jan 1 20:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93e42bf39ea1209ec54a0f983c665611f1a4c7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d0:80:55:60:fe:72:ba:06:06:10:be:c2:07:
16:ae:21:57:a1:a2:4f:c5:08:7f:b8:45:75:c7:1e:
c4:90:f4:7f:d5:4e:49:6c:13:5c:b5:2e:91:ea:2e:
89:dc:93:c6:10:fd:f4:39:45:1d:75:cd:b3:2c:b0:
fa:e6:12:21:33:93:8a:27:73:b8:ba:4c:5e:3d:76:
82:34:8c:da:b7:ff:1d:e1:69:40:2b:44:b8:d6:ff:
0a:a5:ba:8a:f4:76:35:18:cb:f3:62:c4:13:65:89:
8c:42:8a:3e:d2:55:36:9f:ae:60:9d:96:c1:41:e7:
ed:11:b6:9b:d5:a4:26:d9:e6:ca:a0:60:01:45:da:
c7:1e:41:fb:35:b3:f7:3b:8c:87:48:74:85:1e:d5:
bc:ae:73:c2:68:7d:87:c9:32:1b:9d:00:cb:a8:6f:
d7:8e:17:5b:ab:d6:34:1d:6c:d4:b9:18:2c:cc:be:
e0:24:b2:d4:35:0e:53:7d:7f:61:61:5b:19:a4:12:
21:7c:3e:ed:01:2a:0d:1a:2c:47:cb:af:58:ae:3f:
31:31:b4:cd:5c:f3:37:ce:2b:03:88:dc:7e:59:f4:
d5:43:d7:7a:2b:7b:2f:ff:94:a9:00:47:cc:22:42:
2a:82:00:51:3f:bf:c3:5b:dd:fa:89:49:4f:b2:7d:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E4:2B:F3:9E:A1:20:9E:C5:4A:0F:98:3C:66:56:11:F1:A4:C7:BB
X509v3 Authority Key Identifier:
keyid:2C:6D:46:2D:65:84:E3:DA:1F:F2:51:55:4A:34:5E:49:C6:AD:0F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/k-Qr856hIJ7FSg-YPGZWEfGkx7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.196.0/22
Signature Algorithm: sha256WithRSAEncryption
62:5e:6a:3f:85:8a:5e:99:e5:bb:6d:d3:84:42:8a:ec:75:79:
4b:c9:b3:d8:50:bd:1c:0a:16:94:03:0d:b1:5a:7f:85:42:49:
cd:dc:7a:b6:db:66:ab:4e:40:bc:d3:34:ce:a4:0f:a7:ca:56:
09:04:9f:68:d8:7f:08:0e:b5:ed:b9:09:0e:d4:7d:ce:0d:e0:
7d:3d:78:43:5b:53:3a:e2:e2:1c:1b:55:74:cb:3d:15:f7:98:
24:3b:53:34:45:e9:3b:e9:3f:7f:7c:2e:24:f0:ed:48:7e:1b:
5c:3b:a0:f7:62:01:47:62:c6:57:43:37:4f:b2:36:0b:d2:7e:
63:b7:f1:11:cd:bf:09:80:3a:f5:c1:54:1c:70:7a:b0:c1:f3:
9f:8c:1a:ce:2d:2b:4e:75:51:a3:b2:85:24:34:b7:7d:71:56:
95:bf:41:7a:31:a9:12:a5:46:59:38:df:e0:a2:3e:0d:c6:94:
d3:11:59:3e:49:79:20:7d:3c:5e:fa:d5:e9:9f:10:b0:f9:af:
b6:c8:18:92:86:6c:ea:35:61:c9:d7:32:65:54:a1:04:da:94:
57:7f:dd:6c:5a:2d:fe:d7:e4:dc:d4:5b:a7:2c:3a:59:03:5d:
3d:ec:14:dc:e4:7d:21:11:67:5c:52:c1:cb:d2:2c:64:3b:67:
b9:b2:2a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:12 2024 by rpki-client on console-ams.rpki-client.org