Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/9hh9EelSAST4a26UGDQ0rJwzGa8.roa
File: 9hh9EelSAST4a26UGDQ0rJwzGa8.roa (raw, json)
Hash identifier: AMqCXl0rruTgl0eogbgq2oAZsnOzi40Mypbu92VEeO8=
Subject key identifier: F6:18:7D:11:E9:52:01:24:F8:6B:6E:94:18:34:34:AC:9C:33:19:AF
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 018AD41AE625F7E72A64D28584FE2346F369
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/9hh9EelSAST4a26UGDQ0rJwzGa8.roa
Signing time: Wed 27 Sep 2023 00:47:27 +0000
ROA not before: Wed 27 Sep 2023 00:47:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46261
IP address blocks: 45.135.138.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d4:1a:e6:25:f7:e7:2a:64:d2:85:84:fe:23:46:f3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Sep 27 00:47:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6187d11e9520124f86b6e94183434ac9c3319af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:aa:81:d1:75:74:87:51:e0:0f:aa:fb:eb:d6:
65:40:bf:df:4e:70:14:58:e5:59:25:1e:11:c4:a6:
1b:c6:f3:de:63:c0:28:c4:29:37:b7:99:60:46:70:
e8:b6:46:3e:15:68:34:41:06:a1:ed:70:85:8d:2b:
52:78:67:90:4e:bf:45:81:cc:3b:96:b9:95:16:f3:
41:e3:bb:a2:30:0f:35:f5:38:e5:c6:77:47:f7:37:
51:a3:7f:f5:bb:07:d7:ad:97:77:2c:e5:91:0d:64:
80:58:e9:96:1e:3c:72:47:c0:73:ed:f9:f2:02:e2:
24:27:9c:8c:83:97:9a:14:26:a6:b4:94:8a:bc:e1:
36:f4:d1:5d:83:22:3b:e7:b2:fc:d3:6b:45:9f:48:
28:4c:40:ce:79:85:df:9c:5a:86:94:25:7f:7e:12:
b1:7a:a7:c6:8d:42:4b:46:b6:10:bf:e6:9d:85:a2:
94:a3:78:f9:f1:a7:f8:eb:df:19:c0:43:56:53:5b:
13:35:1f:b8:2e:f8:51:a4:8e:4d:b9:93:3a:96:2e:
24:67:72:21:80:77:36:40:0a:d1:90:73:01:83:15:
5a:61:f3:34:02:cc:c3:95:f9:7c:c7:d4:be:9b:07:
45:76:c8:89:68:bf:98:3f:db:35:74:28:76:96:fd:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:18:7D:11:E9:52:01:24:F8:6B:6E:94:18:34:34:AC:9C:33:19:AF
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/9hh9EelSAST4a26UGDQ0rJwzGa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.138.0/24
Signature Algorithm: sha256WithRSAEncryption
28:bd:f3:78:8a:db:95:6a:2a:9d:34:4a:a2:e2:fa:c5:cb:a6:
00:b8:d3:91:56:8b:67:d7:0b:10:ad:0f:52:92:e4:2c:cb:7a:
c2:b8:61:9f:51:04:bd:b2:d9:18:5e:cb:0b:0d:d4:f1:b4:51:
d0:5f:be:f2:8c:56:d5:71:ed:4d:55:f3:a6:4a:f9:c9:97:f1:
a1:ea:c8:81:ba:13:3d:ac:d9:dd:d2:3a:a9:d6:62:dd:13:5a:
62:74:ea:78:2c:b5:f4:1a:80:05:cf:64:5f:d2:4e:88:da:28:
0d:8b:6b:42:a4:d3:1f:ab:f0:26:ee:ac:26:ba:48:47:3d:fc:
f9:b0:f0:6f:c4:9c:f1:78:2b:2d:7c:6f:66:17:0d:ff:94:43:
4c:b1:3e:9e:04:37:33:49:82:c5:3e:ec:49:6e:39:0e:27:9a:
e5:fb:90:80:ea:3f:ef:15:fa:38:aa:6f:b6:2c:fc:50:a8:46:
ff:38:fc:1b:28:b1:f3:23:8d:89:a4:74:0b:7f:6f:5e:85:d6:
b8:7e:44:e8:d8:af:99:41:16:a4:b1:1e:a7:26:87:86:e6:0a:
97:26:c0:07:35:35:fc:6d:d7:bd:4a:57:ef:1a:ea:05:83:b1:
28:53:9e:b1:e6:96:15:9f:7e:59:6f:e9:4d:65:16:fe:6a:66:
01:a2:df:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:43 2024 by rpki-client on console-ams.rpki-client.org