Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/HdiPaw7GKodkYPt3aSMGP3MwvqA.roa
File: HdiPaw7GKodkYPt3aSMGP3MwvqA.roa (raw, json)
Hash identifier: jWg1nSLzD3BbzD4+xAuR2lpXmgqB4A+uQHok9UH1WH8=
Subject key identifier: 1D:D8:8F:6B:0E:C6:2A:87:64:60:FB:77:69:23:06:3F:73:30:BE:A0
Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
Certificate serial: 018A50763DD92A4F3F40F9154981052160D0
Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/HdiPaw7GKodkYPt3aSMGP3MwvqA.roa
Signing time: Fri 01 Sep 2023 11:17:20 +0000
ROA not before: Fri 01 Sep 2023 11:17:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.92.107.0/24 maxlen: 24
45.92.106.0/24 maxlen: 24
45.92.104.0/24 maxlen: 24
45.92.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Sep 2023 14:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:50:76:3d:d9:2a:4f:3f:40:f9:15:49:81:05:21:60:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
Validity
Not Before: Sep 1 11:17:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1dd88f6b0ec62a876460fb776923063f7330bea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:86:5e:7b:ca:68:1c:0a:5c:2e:ac:31:a1:
82:e3:6b:8c:d8:8d:17:5e:df:79:0f:dd:a1:e0:8c:
06:44:40:05:e2:7c:20:e1:8c:33:f5:26:ee:c5:57:
6b:e7:10:d4:aa:d5:c8:03:c4:b2:8f:ee:21:b6:a9:
6c:21:71:37:33:8f:d0:5f:89:05:59:57:68:d8:20:
e5:74:87:60:aa:9c:a5:a4:a4:70:ff:a5:ff:e3:f1:
8c:db:b3:f6:df:3c:ab:c4:c4:88:42:4e:21:c4:59:
f6:e9:82:e6:a4:2a:55:0e:a3:45:7c:24:4a:3c:57:
1c:ae:ab:23:fd:2b:5b:0f:de:97:89:3b:7c:51:a4:
56:42:1c:ae:4e:b0:a1:dc:e0:a8:91:d1:2d:1c:13:
35:9a:f1:17:5f:84:75:be:3a:43:36:59:40:e7:2e:
f7:eb:8c:c4:5d:4e:e1:bb:b9:c3:3e:2e:33:dc:a5:
37:08:c9:6e:60:35:24:d3:e2:1b:59:52:e8:99:e9:
6b:67:35:74:8b:af:65:f4:e8:67:22:56:f0:7d:15:
e7:95:e7:53:3f:06:bb:7c:31:ab:45:9e:ff:3f:c8:
61:75:1f:65:f9:68:6e:28:27:13:ed:02:fb:5a:2f:
95:91:74:a6:e4:8f:93:26:62:f0:49:c7:4a:46:c9:
72:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D8:8F:6B:0E:C6:2A:87:64:60:FB:77:69:23:06:3F:73:30:BE:A0
X509v3 Authority Key Identifier:
keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/HdiPaw7GKodkYPt3aSMGP3MwvqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.104.0/22
Signature Algorithm: sha256WithRSAEncryption
08:61:3f:ee:dc:a8:b5:f6:ff:f9:86:cb:48:3b:fc:a0:05:96:
6a:8a:d2:d3:91:db:04:ed:84:d4:c9:f5:6d:03:5d:36:f6:37:
a1:3c:fb:88:54:49:e6:7e:90:32:82:62:2a:9d:61:2b:3c:c7:
31:8f:6d:56:5f:f6:5e:30:72:d2:57:b4:a0:f6:d9:27:de:25:
cd:ab:af:cd:cc:bc:16:be:61:99:df:27:0f:71:90:19:b4:06:
52:88:86:95:ee:c0:04:53:cf:0a:3a:32:15:ad:16:34:84:2e:
87:4b:fe:1f:99:ae:2a:7d:86:48:de:55:9e:ee:c5:0d:61:a2:
67:6d:bf:85:37:6c:94:a6:bc:86:01:67:4b:fb:d0:cd:bd:6a:
59:9e:a0:7b:70:ab:3f:5a:44:00:48:76:98:5a:bd:d3:f6:78:
b3:7e:10:79:79:fe:aa:2b:3c:e5:df:44:3f:85:c3:3d:aa:c6:
8f:2d:66:5f:03:3b:22:b9:c3:8b:7f:28:72:cf:7a:5c:8e:63:
66:24:8e:18:31:c8:3d:1f:54:8c:ce:20:f9:85:c9:e6:41:4e:
c2:48:ea:9e:c4:4f:21:31:23:5e:8e:4f:7d:22:13:1b:5e:07:
9c:3d:05:98:93:93:f2:cd:69:ab:aa:61:f7:4e:60:c9:13:36:
0d:21:38:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:58 2024 by rpki-client on console-ams.rpki-client.org