Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/eaOHYmY0XHFT5xmh545BM_6FfMI.roa
File: eaOHYmY0XHFT5xmh545BM_6FfMI.roa (raw, json)
Hash identifier: HmPjWaQ2mgW8WlDzuoOkDarn67Ga5KHlDgZp+/cpvVc=
Subject key identifier: 79:A3:87:62:66:34:5C:71:53:E7:19:A1:E7:8E:41:33:FE:85:7C:C2
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 018D78FBAAFE43C8DD0BAB0765BAC31FBDA3
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/eaOHYmY0XHFT5xmh545BM_6FfMI.roa
Signing time: Mon 05 Feb 2024 11:16:15 +0000
ROA not before: Mon 05 Feb 2024 11:16:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47825
IP address blocks: 45.139.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 12:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:fb:aa:fe:43:c8:dd:0b:ab:07:65:ba:c3:1f:bd:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Feb 5 11:16:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79a3876266345c7153e719a1e78e4133fe857cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4b:df:d7:09:c0:67:8e:8d:30:7d:dc:33:7f:
71:13:e3:d7:7c:05:63:2e:2a:b3:53:33:cb:24:be:
27:32:fa:c1:05:7e:11:3f:70:ae:51:90:2a:18:b3:
6a:d0:7a:19:eb:fb:a1:89:44:2b:78:4d:2e:cc:44:
1c:72:67:1b:24:f9:23:e6:43:c1:f1:c8:ef:6f:36:
fa:ee:f3:7f:e5:86:23:28:31:e1:20:b2:a9:b0:0c:
6f:4b:a6:ef:4d:30:9c:45:3e:65:f2:ce:a7:91:eb:
ab:4a:41:0b:e2:a7:c2:6c:90:75:00:bd:3c:0c:e1:
3e:5f:ca:72:71:0a:8e:93:cb:3e:16:13:63:ae:79:
a3:50:e0:07:87:f6:d4:8a:00:60:3d:c4:c3:8c:cc:
13:dd:00:7e:9f:f6:c6:c5:1c:d5:df:49:bb:0d:64:
5b:d0:e7:ee:61:d1:f3:aa:64:b3:7c:ba:1e:ca:db:
f1:39:43:6c:9d:d6:eb:1a:ef:81:44:53:4f:78:27:
fb:d9:27:d5:d5:9d:f8:4f:7b:ba:16:14:f5:44:82:
68:f2:19:9a:69:f2:24:a4:e1:00:af:c8:47:a4:cc:
97:b0:83:36:c8:37:87:84:6e:40:7a:fb:52:3e:e1:
ef:91:2e:28:5c:bf:84:68:b4:4d:53:13:b9:fa:85:
35:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A3:87:62:66:34:5C:71:53:E7:19:A1:E7:8E:41:33:FE:85:7C:C2
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/eaOHYmY0XHFT5xmh545BM_6FfMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.8.0/24
Signature Algorithm: sha256WithRSAEncryption
94:50:9e:c1:9d:03:80:f0:de:30:0c:00:e4:c8:dd:f0:a4:e4:
7b:03:f5:4c:85:89:cd:b1:0f:46:6f:7f:15:0e:60:f3:f7:1b:
d7:5a:88:cb:8d:e9:9f:35:4c:6f:1a:32:7a:a7:9c:05:4f:d6:
0a:4d:f1:c0:3c:b2:89:07:a9:f2:6b:7b:ba:8b:5a:3d:8c:a5:
39:3f:6d:f6:97:5a:d5:d6:0a:d6:a0:9b:55:b1:26:93:17:f5:
ff:4c:2c:3b:16:ea:ae:98:94:b6:be:fe:ad:13:fa:5b:ce:e2:
04:85:82:5d:55:b6:21:5b:ab:ae:72:c1:04:3c:d8:1c:01:c0:
d7:d9:6a:c1:3d:ed:e1:99:70:93:12:6d:8d:1c:ed:21:ae:3f:
50:82:c0:a5:30:d2:4e:37:6b:0f:94:c5:6f:92:bd:d8:d4:ff:
e8:3f:1c:51:02:e4:8d:92:7f:82:4c:b8:fb:f3:e0:fa:9d:6b:
92:0b:7d:be:93:f5:90:20:a5:74:32:61:7f:cd:87:e1:12:ed:
64:f9:13:62:16:91:00:a8:29:c7:d6:ad:e9:de:7b:f9:a6:82:
55:45:d8:f9:68:ce:c3:d0:66:8c:78:3d:a7:77:e5:a0:79:6f:
bb:c3:5c:c6:dc:e2:9b:bd:ec:0b:2b:a8:7c:7e:6a:c9:a1:1f:
8c:7b:6b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 18:24:45 2024 by rpki-client on console-ams.rpki-client.org