Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/JY6fXKZPZxdnsCM4M_gIx-bMTOE.roa
File: JY6fXKZPZxdnsCM4M_gIx-bMTOE.roa (raw, json)
Hash identifier: 5zGaDngC69bRqptw87x1nn6S91pRMTwX3YDZ/N1e2ko=
Subject key identifier: 25:8E:9F:5C:A6:4F:67:17:67:B0:23:38:33:F8:08:C7:E6:CC:4C:E1
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F79713577807C15F2EA24085A1C95D4
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/JY6fXKZPZxdnsCM4M_gIx-bMTOE.roa
Signing time: Sun 01 Jan 2023 22:35:07 +0000
ROA not before: Sun 01 Jan 2023 22:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6848
IP address blocks: 45.131.63.0/24 maxlen: 24
45.131.62.0/24 maxlen: 24
2a07:e347::/32 maxlen: 32
2a07:e346::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:71:35:77:80:7c:15:f2:ea:24:08:5a:1c:95:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=258e9f5ca64f671767b0233833f808c7e6cc4ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:ee:9b:5a:be:5b:8e:4b:0b:e9:e9:ba:e6:
72:95:3f:34:d1:fc:0c:0c:b2:f1:a7:37:7c:70:6f:
fb:85:7e:8d:cf:63:f8:af:87:bc:40:af:84:61:d9:
dd:42:90:88:3a:e5:f6:44:e1:ec:d6:aa:3e:79:26:
9b:b7:a8:ae:f1:4b:9d:35:2c:86:7b:92:3f:41:6a:
36:f3:4f:7b:ca:39:21:12:6a:25:1e:dd:dd:8f:55:
9c:81:7b:d4:96:86:f4:74:a1:02:6a:f6:a0:6c:95:
8c:fb:fe:14:85:28:e1:f5:d6:7b:5b:71:b4:cf:6c:
78:34:de:7e:6c:db:ee:bc:63:51:b3:6b:4e:cd:68:
c4:a6:a3:36:fe:35:de:30:67:8b:24:79:46:f4:05:
46:88:2e:8d:bd:35:ba:32:c4:64:19:0f:3a:a2:99:
1f:1e:21:99:86:8f:92:26:17:c0:ef:37:45:c3:e0:
02:2b:aa:9d:b2:55:68:5d:64:97:5c:76:4e:3f:02:
8c:62:d1:e5:f9:31:17:53:4a:53:3c:c2:d6:c8:f6:
9d:a1:63:a6:36:bc:6c:d9:ad:83:43:c4:76:42:6f:
18:59:32:3b:b2:79:40:fd:a0:49:5c:53:9d:c9:e6:
87:95:63:df:4d:49:95:7f:dc:9f:92:47:00:c2:3c:
41:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8E:9F:5C:A6:4F:67:17:67:B0:23:38:33:F8:08:C7:E6:CC:4C:E1
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/JY6fXKZPZxdnsCM4M_gIx-bMTOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.62.0/23
IPv6:
2a07:e346::/31
Signature Algorithm: sha256WithRSAEncryption
b6:6a:af:c5:5e:dc:f9:87:64:59:66:18:e2:09:af:36:73:59:
88:c1:92:a4:2a:ff:1b:a5:de:6a:5e:5e:c5:07:98:6e:05:53:
41:ea:1b:59:ae:fe:d4:f6:77:08:2f:03:f6:d5:34:79:3d:71:
ac:4a:39:8d:c3:8f:2a:e0:15:d5:7b:9e:84:61:81:07:7d:3c:
8b:29:df:48:68:e8:72:63:c4:c1:b5:95:ef:9c:e4:f3:5f:6e:
75:b1:5e:b7:20:fd:df:65:32:4d:21:35:64:16:bc:a0:e8:51:
6f:86:6a:fe:02:6a:f0:ed:b7:2f:c1:bf:69:0c:15:be:64:2f:
3f:e3:f0:18:b2:05:1c:73:de:93:1c:ba:b3:94:63:3b:58:68:
e3:9e:10:2a:e4:45:64:2c:7d:08:03:87:2f:2f:3d:d9:74:61:
ad:33:3c:37:89:9f:ef:b6:ce:3a:d2:9c:95:1e:b9:a1:cd:98:
c7:d6:a7:f6:ce:be:c1:ac:42:50:8e:7a:86:ec:8b:47:92:55:
30:be:e0:25:cf:5a:25:8f:b0:ab:35:e9:eb:a4:75:b3:b0:73:
90:f6:e9:d0:e9:59:2d:ec:c6:a0:42:b7:5e:86:c1:b3:aa:56:
e9:20:a7:0f:e6:2a:bd:87:ad:f3:26:bf:86:7f:0a:a2:96:fd:
05:53:1b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:57 2024 by rpki-client on console-fra.rpki-client.org