Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/XuSKx25eNIojggeqB6hjx6WQ2Kk.roa
File: XuSKx25eNIojggeqB6hjx6WQ2Kk.roa (raw, json)
Hash identifier: kpqzziPlSGhXCb5djGFjKnXvQxiU2C7+e7lQw/tIg4o=
Subject key identifier: 5E:E4:8A:C7:6E:5E:34:8A:23:82:07:AA:07:A8:63:C7:A5:90:D8:A9
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0185729ECB881682DAB8BE798BBEBA221197
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/XuSKx25eNIojggeqB6hjx6WQ2Kk.roa
Signing time: Mon 02 Jan 2023 13:14:47 +0000
ROA not before: Mon 02 Jan 2023 13:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211804
IP address blocks: 45.143.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 21:06:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:cb:88:16:82:da:b8:be:79:8b:be:ba:22:11:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 2 13:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ee48ac76e5e348a238207aa07a863c7a590d8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:a1:ab:55:90:84:73:0c:18:e7:c9:87:c2:
03:3d:69:bc:6b:a1:4f:67:5d:1d:dd:20:2b:79:22:
9b:22:7f:a2:47:d7:5c:62:f7:35:dd:69:7a:3f:b1:
93:da:c6:e9:f4:59:2c:0f:08:60:f1:5c:76:13:56:
5f:a9:bc:7c:25:12:f2:38:c9:48:db:c7:38:36:96:
59:90:62:18:6d:66:c2:6d:06:f2:54:64:d7:fe:57:
fa:1c:af:57:b5:92:73:30:3c:17:69:7a:0f:8d:9f:
f3:df:37:76:ac:f7:79:de:93:77:8f:7c:08:85:6f:
75:55:8e:dc:32:0c:2c:e6:37:08:55:2a:1b:08:03:
57:67:e9:24:52:fd:19:e0:0a:62:4f:15:e8:fc:5e:
a2:f2:3a:39:f5:4f:c8:f5:0e:7c:c4:a7:7f:a0:7e:
bb:76:65:ab:99:14:01:55:55:9f:75:cd:62:8d:fe:
ba:4c:e5:e4:63:0e:e6:ac:3c:d7:05:d4:df:0e:50:
9e:0d:9f:43:b9:26:5d:98:82:2b:db:ec:3d:f3:8e:
77:ce:0f:c4:00:8f:48:7a:57:ef:3f:d9:39:50:e3:
c9:01:13:38:b4:30:22:0c:b7:5c:4c:71:58:20:b6:
99:9f:ee:d8:e4:ec:af:4c:eb:91:fa:03:9d:5b:ed:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E4:8A:C7:6E:5E:34:8A:23:82:07:AA:07:A8:63:C7:A5:90:D8:A9
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/XuSKx25eNIojggeqB6hjx6WQ2Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.97.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d0:cc:b8:eb:e7:65:a7:f5:1e:e4:76:51:9b:a9:c4:da:73:
a3:28:6c:83:3d:df:04:0d:36:61:32:b8:62:d8:5e:86:86:fe:
a4:bf:a5:f4:c5:96:82:4e:33:e0:5d:fc:1b:f8:f8:10:f1:55:
f6:34:31:0a:ce:0a:83:e3:02:67:53:98:e8:99:72:1a:f3:6e:
ea:f1:06:69:cb:06:78:10:60:9c:e5:58:71:38:44:aa:1d:a7:
de:86:03:83:f7:3e:8a:19:f8:fd:30:4d:e2:e9:43:7f:0c:36:
76:ad:d9:c3:31:12:bc:42:f4:99:1e:32:ab:5e:e1:3a:2d:10:
e1:87:d5:83:37:5b:b7:3e:70:8c:42:b2:3f:22:32:c6:50:23:
f7:9f:c9:30:3c:6b:d9:4a:c9:46:84:e4:09:06:2f:cf:2a:66:
a3:71:ce:f0:dd:19:fc:c5:0c:a6:0f:4c:59:9f:51:63:e1:7d:
78:76:27:e3:22:07:fc:d3:59:30:8b:be:57:2c:bb:15:b7:00:
59:dc:f3:a3:07:9f:6f:5b:dd:76:8f:0c:db:29:85:5d:13:8e:
7f:f6:8e:04:91:26:bc:d2:95:9a:60:b7:6d:cf:d3:69:c8:71:
9c:ed:81:cd:10:9d:51:de:dd:bb:68:83:da:b1:a9:a6:d7:ee:
8c:9f:c3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:49 2024 by rpki-client on console-fra.rpki-client.org