Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/XHNYqsa8BJ6iK08NiB5AAXD5CBk.roa
File: XHNYqsa8BJ6iK08NiB5AAXD5CBk.roa (raw, json)
Hash identifier: jAuV05ePkDBabYeo5OTpUUpZusq4T+IrdgysyxSR0J8=
Subject key identifier: 5C:73:58:AA:C6:BC:04:9E:A2:2B:4F:0D:88:1E:40:01:70:F9:08:19
Certificate issuer: /CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Certificate serial: 01856F66D411C5091E416649A9326EF837E6
Authority key identifier: B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/XHNYqsa8BJ6iK08NiB5AAXD5CBk.roa
Signing time: Sun 01 Jan 2023 22:14:47 +0000
ROA not before: Sun 01 Jan 2023 22:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49870
IP address blocks: 45.67.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Jun 2023 15:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:d4:11:c5:09:1e:41:66:49:a9:32:6e:f8:37:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Validity
Not Before: Jan 1 22:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c7358aac6bc049ea22b4f0d881e400170f90819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:b5:95:25:65:1d:5b:9a:6c:79:3c:95:df:
46:82:87:e8:6e:c2:b5:34:60:59:e7:e9:e7:0f:51:
dc:76:b1:d9:79:1a:7d:1f:81:7b:e9:1b:a5:b0:3a:
e5:c0:82:59:8d:74:69:d3:c2:62:78:fe:51:64:db:
d7:cb:e1:88:1d:a8:fa:d2:fd:20:0f:fb:8e:9f:7f:
aa:64:cd:2e:3a:9e:d1:d2:5e:f2:0c:e5:0f:32:18:
e7:d3:39:7b:b8:32:6d:c4:a1:06:f5:ef:72:87:a7:
dd:b3:cf:3a:00:7a:eb:05:46:bd:5f:df:43:a7:fb:
d1:e4:26:7a:79:94:b0:2a:22:ea:a1:0a:ac:fa:53:
6c:13:49:42:d5:8c:20:e8:14:22:5b:53:96:c7:e8:
fa:ce:06:3c:3a:bf:22:19:33:a9:58:67:27:cb:ab:
85:f9:99:b3:e7:4b:50:ce:b9:3d:07:84:ac:cc:e7:
dc:de:b6:5b:af:ba:58:fe:85:15:a1:60:e6:07:51:
9d:7a:a1:eb:fb:1d:61:d6:1b:af:4c:d3:a7:72:7f:
c0:cd:8e:fa:be:cc:b1:1d:ad:24:26:e7:39:91:e1:
1e:3b:27:dc:62:7c:b4:d8:a6:76:56:42:e2:a2:2b:
d5:7c:b5:00:b4:6c:0b:fc:67:92:32:e6:56:25:a9:
6f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:73:58:AA:C6:BC:04:9E:A2:2B:4F:0D:88:1E:40:01:70:F9:08:19
X509v3 Authority Key Identifier:
keyid:B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/XHNYqsa8BJ6iK08NiB5AAXD5CBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.13.0/24
Signature Algorithm: sha256WithRSAEncryption
36:87:1c:8e:50:d8:62:37:a6:d5:3b:1f:54:20:e4:d5:bd:17:
87:34:43:2c:d2:ce:97:67:ec:ea:9a:49:fe:c4:c9:57:2f:68:
84:5f:0a:8c:7f:c8:01:0d:41:4e:28:4f:58:2f:2b:a6:5a:b0:
93:4b:c2:2a:35:2f:06:e9:dd:a2:e4:03:c8:78:c8:0b:77:85:
a1:dd:80:ec:b7:26:2c:17:f8:b3:ab:70:6f:bf:ba:88:41:a3:
e6:60:fe:6d:13:e0:4b:bf:40:82:d7:31:28:c1:5b:a1:ae:45:
24:16:d0:d6:35:89:b3:62:46:d8:27:95:f9:da:bc:bb:2a:2f:
e6:1f:53:8b:98:a1:5a:05:9d:0d:e3:26:dd:5e:d9:7b:14:fa:
ea:dd:10:80:27:78:35:33:5b:26:f4:ff:ed:a2:a5:cb:5f:47:
ad:00:00:d8:9b:57:11:cd:b4:ac:44:da:e9:3d:ec:00:bd:4a:
59:e6:20:6d:df:22:e2:64:19:5b:38:3e:64:34:66:37:a9:dc:
69:b4:77:db:10:49:0f:b5:f4:c3:2e:55:35:75:b9:cf:2d:52:
25:08:61:71:60:a7:42:b4:31:a0:27:ee:96:8a:34:94:e6:3b:
7b:11:49:f5:03:b6:70:c1:a5:96:d7:ae:e0:9e:68:ee:ca:57:
2c:4b:2a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:37 2024 by rpki-client on console-ams.rpki-client.org