Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/pXrGnbMFlLfduBC9-93WbBljcbM.roa
File: pXrGnbMFlLfduBC9-93WbBljcbM.roa (raw, json)
Hash identifier: mIPmOaJtj7rNIZqEPE76opza6qullBSKpznS6kBr3jA=
Subject key identifier: A5:7A:C6:9D:B3:05:94:B7:DD:B8:10:BD:FB:DD:D6:6C:19:63:71:B3
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0185729EC944B62BA1FA84DDD09321D0602A
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/pXrGnbMFlLfduBC9-93WbBljcbM.roa
Signing time: Mon 02 Jan 2023 13:14:46 +0000
ROA not before: Mon 02 Jan 2023 13:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 45.143.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:c9:44:b6:2b:a1:fa:84:dd:d0:93:21:d0:60:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 2 13:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a57ac69db30594b7ddb810bdfbddd66c196371b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a6:c5:62:0c:32:8b:06:ac:da:4d:45:39:ce:
df:73:00:76:13:7f:ad:c7:db:52:01:40:d3:78:ec:
bd:8a:f6:5f:c1:1d:c5:b0:91:79:88:a7:d2:d4:08:
ea:9b:e5:39:42:a5:10:57:43:fd:15:5c:56:77:22:
27:02:13:ff:28:ff:59:36:bf:ce:bc:e3:76:b6:3f:
93:ca:19:19:aa:83:f7:40:2e:00:fe:7c:ee:9c:cb:
df:0e:e6:ee:97:59:f8:c5:17:9a:4f:06:69:ac:11:
1f:ba:53:df:62:2b:38:a1:87:4e:a2:ac:1a:3b:d3:
f0:a7:75:49:fb:16:0a:a3:e0:d7:14:00:44:53:84:
ad:65:79:fa:55:b3:74:84:35:8e:5f:50:a6:80:b4:
60:0a:09:5c:a2:18:c6:65:8f:15:4f:ee:1c:ae:51:
b0:f1:c1:f4:bb:e1:f7:71:fd:a3:9e:9a:c7:4f:10:
27:d1:f6:12:62:99:61:cf:71:66:39:2f:69:0e:89:
ad:56:a6:9b:71:3f:2f:53:d8:46:0e:76:cb:bc:c1:
ab:aa:9e:da:bc:fe:d8:66:96:74:13:f8:1c:82:d3:
43:b3:2c:e1:db:6e:e5:b4:47:c9:b1:ba:e3:cc:0a:
38:88:62:e3:39:37:ad:da:9d:43:b5:7d:4d:59:b4:
f4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7A:C6:9D:B3:05:94:B7:DD:B8:10:BD:FB:DD:D6:6C:19:63:71:B3
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/pXrGnbMFlLfduBC9-93WbBljcbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.99.0/24
Signature Algorithm: sha256WithRSAEncryption
34:1f:b5:63:5c:2e:d7:24:99:85:35:e7:87:66:f3:d2:de:01:
f4:26:42:02:fa:32:82:3a:eb:51:73:4b:a4:e7:c4:da:65:26:
f8:22:7f:6c:ca:d1:3a:92:4f:ae:f1:ab:27:3f:f0:9b:57:2f:
97:99:a3:18:1a:b1:f6:23:d7:c1:28:c6:55:68:ac:8d:96:e9:
a0:3c:61:ec:73:69:2b:77:6e:7e:7a:21:19:24:45:6d:2e:91:
ef:65:56:47:3d:3b:41:47:82:25:56:2d:a2:43:20:47:72:c5:
67:a5:0b:c4:b6:f9:07:d6:9b:58:b7:ab:bf:05:61:f2:50:c9:
16:77:75:f4:f1:76:fa:0a:98:07:7d:af:9f:47:fa:c4:6d:83:
65:15:5f:e0:32:fc:b9:32:3e:65:61:15:fa:d1:fc:da:e1:eb:
d2:67:94:da:6e:37:e2:3b:57:65:bd:7f:41:0a:6b:dd:f7:92:
2d:fb:64:50:11:e2:97:c0:08:80:5b:f9:42:9c:4f:50:d5:d0:
e0:dd:0c:a0:16:ac:17:5b:ed:48:df:9e:1a:08:01:88:73:63:
bf:5c:8b:bc:c1:20:cf:47:29:da:54:47:ad:b9:f6:df:20:a6:
57:a8:ea:68:02:61:c2:f3:1c:2c:08:bf:94:f2:34:c0:56:b5:
e4:24:bc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:49 2024 by rpki-client on console-fra.rpki-client.org