Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/hZpnnljkbbBwlbXPrxRJYfSYsDo.roa
File: hZpnnljkbbBwlbXPrxRJYfSYsDo.roa (raw, json)
Hash identifier: q5bjzpjunsdOPP1uY0r4QVJpFO883fYFhxdqsq3DEKo=
Subject key identifier: 85:9A:67:9E:58:E4:6D:B0:70:95:B5:CF:AF:14:49:61:F4:98:B0:3A
Certificate issuer: /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial: 018ADC9447F0A914CE92CAA8A7930A60F869
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/hZpnnljkbbBwlbXPrxRJYfSYsDo.roa
Signing time: Thu 28 Sep 2023 16:16:59 +0000
ROA not before: Thu 28 Sep 2023 16:16:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8881
IP address blocks: 45.129.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:dc:94:47:f0:a9:14:ce:92:ca:a8:a7:93:0a:60:f8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
Validity
Not Before: Sep 28 16:16:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=859a679e58e46db07095b5cfaf144961f498b03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7e:a9:75:f6:30:97:b2:9e:b1:1d:3f:fe:32:
32:48:66:e4:30:eb:62:60:97:19:cd:c0:bc:7b:95:
16:05:13:9f:f6:8e:85:f0:e9:d7:c6:a9:c0:f0:6f:
42:00:ec:68:9a:c9:fb:9a:83:4b:0d:31:f1:b2:5f:
8f:41:1a:72:93:e3:6e:92:c3:1c:ad:ea:62:b9:64:
8f:bf:e4:1c:93:63:b4:dd:3f:64:4c:74:d3:a2:ac:
d9:ae:71:bd:0b:ea:35:f7:d7:84:75:0a:32:28:5a:
db:8f:91:7d:36:fe:56:5c:ce:7c:13:73:28:d7:8c:
81:ab:17:29:ce:0a:8f:53:e9:ff:b0:5a:4f:c9:9d:
79:86:63:1a:03:c1:56:88:8b:ca:20:ad:c9:4f:ea:
0f:c5:8b:12:3c:4f:b7:2d:34:9b:14:f4:e4:c7:ff:
9a:e5:de:10:36:3e:1c:35:51:20:20:23:10:ae:c3:
01:d7:b8:6c:c3:3d:3e:48:15:82:a7:38:de:f1:f6:
4c:c8:82:f3:37:e5:a2:ae:74:72:c1:bf:3b:95:33:
6e:f0:7f:cd:30:18:26:84:5a:28:47:28:d6:16:db:
7f:ff:c4:ff:7e:3f:ca:08:e0:62:2c:cc:bc:80:cb:
78:e7:6c:74:66:29:fe:90:f5:33:b3:ab:98:49:a4:
c3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9A:67:9E:58:E4:6D:B0:70:95:B5:CF:AF:14:49:61:F4:98:B0:3A
X509v3 Authority Key Identifier:
keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/hZpnnljkbbBwlbXPrxRJYfSYsDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.246.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:63:ef:b0:29:2a:61:ac:05:e9:4f:f3:97:c6:7a:5a:06:96:
62:51:5c:c6:ab:79:fa:8f:f4:21:da:04:0a:5b:57:d0:3e:7f:
6e:ae:23:8c:93:b5:31:64:80:2c:ba:a1:83:14:9a:49:bf:23:
56:e3:91:4d:8e:3c:6e:74:ae:ad:14:5e:8c:d2:38:48:3e:37:
21:99:f4:7a:0f:85:1f:34:da:90:26:80:4f:cc:78:3d:c6:76:
5a:90:60:6a:98:49:a2:4e:da:43:c6:0c:11:9e:fd:7b:b4:f1:
f9:74:59:a7:c6:a5:99:44:ad:ee:ea:ff:4c:87:10:40:09:bc:
c5:24:64:9b:90:4a:7a:d1:db:3c:53:73:22:41:5d:a5:41:17:
96:27:76:d5:c6:8d:c1:9f:16:72:83:91:cb:89:d2:10:e9:0a:
26:5b:74:ed:4b:b9:8e:7f:39:1e:5f:e2:f0:20:e3:67:63:ce:
10:4a:87:46:34:ef:71:a2:79:48:31:e0:d1:e6:4e:64:47:41:
83:c5:29:a5:39:65:d4:a4:20:ea:4b:05:2b:40:28:ce:7a:b1:
cb:d8:ba:88:7a:67:d4:8c:94:6a:f5:0f:fc:07:ac:0d:b8:f4:
af:ca:06:1f:ae:65:29:f4:7a:06:0d:29:64:1d:be:59:50:bb:
80:ae:b4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:55 2024 by rpki-client on console-fra.rpki-client.org