Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/cM7LpqxtdiL4s3kzO3LIsOd_GWk.roa
File: cM7LpqxtdiL4s3kzO3LIsOd_GWk.roa (raw, json)
Hash identifier: 0DxRQdxz3NUsd+Z3TObraZqvWlj9yB5xb2Kk2lpwm+c=
Subject key identifier: 70:CE:CB:A6:AC:6D:76:22:F8:B3:79:33:3B:72:C8:B0:E7:7F:19:69
Certificate issuer: /CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Certificate serial: 01856F6708ADB38E6B2F9FD431DB437BB5E7
Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/cM7LpqxtdiL4s3kzO3LIsOd_GWk.roa
Signing time: Sun 01 Jan 2023 22:15:01 +0000
ROA not before: Sun 01 Jan 2023 22:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8495
IP address blocks: 45.135.106.0/24 maxlen: 24
2a0e:6b40:20::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:08:ad:b3:8e:6b:2f:9f:d4:31:db:43:7b:b5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Validity
Not Before: Jan 1 22:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70cecba6ac6d7622f8b379333b72c8b0e77f1969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9f:fa:3b:af:ef:2f:5d:e5:da:5a:6c:15:3c:
6a:47:7b:7e:e2:35:1b:1e:55:00:7b:b3:f6:a8:b6:
ea:6c:ea:64:6d:76:78:08:e1:8b:e1:5d:64:47:98:
24:d0:ab:c7:5a:97:ec:dc:0f:02:84:a1:00:5a:1f:
4f:8a:58:fa:af:31:21:d3:b7:01:a7:72:cc:32:a5:
47:67:72:19:4d:f1:43:86:c6:3c:87:3e:62:ff:eb:
39:2f:77:6e:73:84:0c:cf:ba:ca:31:40:e9:ef:48:
11:ad:c6:00:72:73:34:a5:a7:b3:3c:20:99:0d:8a:
18:e7:73:d2:b7:2c:4b:b8:54:b4:dc:ed:67:c5:2e:
05:d7:8b:72:d5:81:19:85:e7:61:52:2a:17:24:61:
c2:12:b5:09:8a:5a:33:4d:a6:47:55:f8:db:88:08:
74:53:b0:a7:1e:35:88:c7:6b:0b:14:a8:88:24:b2:
7a:81:c6:85:4b:57:b3:bb:02:9a:fc:34:b3:95:d9:
c8:c8:24:79:a6:86:d5:33:54:bb:81:fa:45:70:5e:
be:41:54:67:df:90:02:a5:03:09:42:1a:b6:00:67:
ab:89:c2:88:70:2c:6b:a0:89:2a:37:23:7f:ef:ef:
d8:aa:53:c2:0c:cc:f6:20:9b:f4:34:da:ae:20:43:
62:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CE:CB:A6:AC:6D:76:22:F8:B3:79:33:3B:72:C8:B0:E7:7F:19:69
X509v3 Authority Key Identifier:
keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/cM7LpqxtdiL4s3kzO3LIsOd_GWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.106.0/24
IPv6:
2a0e:6b40:20::/48
Signature Algorithm: sha256WithRSAEncryption
5b:a0:96:f4:7a:54:6f:ee:17:d4:a6:f9:65:2a:d9:cc:5d:dc:
c3:2e:25:b5:85:68:0f:c4:88:fa:2d:08:3a:c7:aa:1d:5f:d9:
bc:ef:da:18:b9:2b:58:a4:50:b0:a2:8a:b5:0f:9c:7a:fb:56:
43:6f:f3:55:78:c4:77:21:44:b6:57:d0:c5:44:b7:4d:67:6a:
ec:74:18:8f:14:84:55:9f:ad:2f:04:86:b5:53:e5:04:34:16:
25:d1:e4:db:23:21:05:28:09:35:3d:69:d3:6b:9c:03:7f:46:
57:50:33:e7:c2:6d:75:5d:aa:d2:63:30:a4:19:d1:37:ea:53:
d7:ca:42:6c:c8:1e:82:97:1b:16:2e:14:fd:24:d0:6c:73:d1:
0e:10:d3:cd:d5:1e:74:a5:62:99:16:21:b7:97:c4:a7:ef:80:
40:57:d9:d8:2e:5c:a8:e9:56:85:5f:60:0f:85:11:c0:d7:38:
90:15:87:19:ab:22:67:2e:90:ce:a6:81:0d:bf:5b:38:b8:85:
d0:a4:13:df:76:d9:d5:73:51:48:c3:68:19:2e:cb:da:b2:44:
7a:25:1b:d4:da:8c:cd:ac:1e:cb:a3:d3:71:88:4c:1a:79:f1:
f0:32:67:3f:6b:a9:f4:d2:a0:6f:f0:db:c6:04:25:82:dc:f8:
36:b4:fc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:16 2024 by rpki-client on console-ams.rpki-client.org