Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/_tl5eHQdhu0dqw1qc3_isEFUWvA.roa
File: _tl5eHQdhu0dqw1qc3_isEFUWvA.roa (raw, json)
Hash identifier: 3PjL8biQr4pKBec6JE1cvukuDKReRNou4DVZlpR3rKk=
Subject key identifier: FE:D9:79:78:74:1D:86:ED:1D:AB:0D:6A:73:7F:E2:B0:41:54:5A:F0
Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Certificate serial: 0185730C9D2BA8BCCCD81AACA63D9D2781C2
Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/_tl5eHQdhu0dqw1qc3_isEFUWvA.roa
Signing time: Mon 02 Jan 2023 15:14:44 +0000
ROA not before: Mon 02 Jan 2023 15:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207910
IP address blocks: 45.67.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:9d:2b:a8:bc:cc:d8:1a:ac:a6:3d:9d:27:81:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Validity
Not Before: Jan 2 15:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fed97978741d86ed1dab0d6a737fe2b041545af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:66:dd:1b:75:d8:6d:0e:9c:57:74:ef:44:c3:
3d:c1:d8:e2:df:7c:e8:b7:77:ac:0f:c6:79:b4:14:
d0:c4:7c:ae:2b:06:2a:ee:fe:1d:44:9d:29:39:e4:
bc:e7:7f:02:e2:b5:a1:f0:a3:93:03:30:8c:ad:15:
95:98:53:1e:7d:cb:45:2f:1e:98:d0:0a:2d:df:0c:
a9:e7:ac:5e:3d:e3:d2:2b:6a:36:05:00:07:ac:6d:
2d:de:c2:c0:fb:cc:8e:ec:85:87:45:c5:91:3c:19:
6a:b1:29:b4:97:45:23:d8:50:ee:26:f7:8f:b3:ee:
b4:10:c5:16:21:e1:e5:9b:9d:ad:ea:0c:0d:dd:04:
b3:57:f5:88:16:07:ea:db:fa:3e:7b:16:42:b9:dd:
d4:5a:00:fa:a4:4a:75:af:1b:56:03:95:b1:f5:92:
ae:5e:fb:8e:ef:20:ef:2c:3c:72:33:ee:23:85:88:
c7:a4:06:5a:a4:5c:4c:1b:1c:c6:3e:09:43:63:c3:
8b:5e:ee:3f:63:47:84:ae:05:04:06:81:df:2a:e6:
f5:5f:67:c6:f4:a9:c2:7e:63:5b:db:2a:8e:dc:2d:
23:d4:dc:5e:6d:84:d2:dd:d4:46:63:82:89:b7:60:
71:5b:ba:17:96:1a:3d:49:52:51:b2:c2:9b:8e:03:
b0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D9:79:78:74:1D:86:ED:1D:AB:0D:6A:73:7F:E2:B0:41:54:5A:F0
X509v3 Authority Key Identifier:
keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/_tl5eHQdhu0dqw1qc3_isEFUWvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.83.0/24
Signature Algorithm: sha256WithRSAEncryption
46:34:8f:ab:43:24:80:a1:cc:4b:08:35:32:5e:e1:da:66:b0:
19:90:a0:f9:51:8e:75:5e:80:1c:ee:61:8d:06:0d:8c:07:99:
dd:cf:97:9c:c8:2b:51:70:59:51:2b:8b:ef:58:8f:cc:b1:cf:
00:f2:7c:3b:19:e6:0d:ff:68:db:18:8c:9b:bd:d2:11:52:0c:
41:af:90:22:4a:6c:91:9e:df:2c:b4:13:58:66:69:42:13:82:
f7:a8:91:81:88:2c:51:67:6d:e9:25:be:49:c8:a5:02:35:e5:
70:e1:fb:8c:9c:ce:2f:26:37:ad:e2:a9:40:46:e4:0b:84:41:
6b:83:ec:10:3b:b9:a5:ee:21:53:0e:bf:c3:84:3e:57:3b:5a:
ef:9c:14:31:c9:53:0c:de:d2:59:e2:e1:07:b9:cc:2d:55:26:
a8:96:8a:0a:39:c1:3c:88:a2:d0:93:77:c5:64:a6:0b:5d:ce:
b4:6c:37:e9:67:82:41:8e:9f:cf:3f:ba:de:7a:d9:3f:3e:48:
0e:35:35:cb:38:b7:30:3a:98:2a:77:5a:80:d4:1b:83:fa:57:
3c:bc:80:5d:b2:07:d7:ef:6c:ca:17:38:f2:8a:99:0f:a0:18:
2c:7d:e0:36:a6:1c:64:15:30:68:25:63:fa:31:6f:d3:6b:e8:
cc:3d:0a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:56 2024 by rpki-client on console-fra.rpki-client.org