Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/Blm91Fr0zmp225rARBqExzhCWfk.roa
File: Blm91Fr0zmp225rARBqExzhCWfk.roa (raw, json)
Hash identifier: WPDGOaaiQSeXh5LAH1PuQyhx7Ee9P2bBer2TifM+zJU=
Subject key identifier: 06:59:BD:D4:5A:F4:CE:6A:76:DB:9A:C0:44:1A:84:C7:38:42:59:F9
Certificate issuer: /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial: 01856FF95A5A44B22485BFD92501BAD942FC
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/Blm91Fr0zmp225rARBqExzhCWfk.roa
Signing time: Mon 02 Jan 2023 00:54:50 +0000
ROA not before: Mon 02 Jan 2023 00:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45996
IP address blocks: 45.11.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:5a:5a:44:b2:24:85:bf:d9:25:01:ba:d9:42:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
Validity
Not Before: Jan 2 00:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0659bdd45af4ce6a76db9ac0441a84c7384259f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:59:77:cb:62:96:83:17:df:a0:ef:01:10:98:
09:c9:55:7d:c3:6a:3f:dc:e8:e4:83:28:20:e9:c8:
3e:06:6e:64:d0:ec:a3:fa:69:d8:24:34:e3:dd:44:
fa:bc:8f:84:5a:1f:3a:9e:63:73:45:78:85:ba:1a:
97:aa:29:56:ae:6f:e6:6c:86:9a:41:6f:61:e9:5d:
40:54:8c:df:64:75:50:7d:e9:bc:cb:6e:4b:37:c3:
b4:de:0b:f8:08:14:88:fa:09:c1:67:d1:c8:16:ed:
bd:19:ef:d5:21:6e:f3:ed:56:23:10:a5:02:92:95:
a3:46:05:f1:f7:aa:8f:30:a8:0c:ff:e1:d8:31:55:
12:d8:3d:13:28:a6:27:25:03:b7:97:67:5c:48:77:
c9:f1:a6:7f:18:b7:d5:fd:40:0a:23:4b:4e:e0:e7:
eb:e6:b6:bd:ef:73:1f:ad:7c:1a:8a:58:e8:9a:58:
20:c3:1b:9d:20:7f:87:8d:6f:ff:20:7f:ed:61:bd:
cc:34:e6:ee:4d:9e:43:16:65:a8:50:5e:ef:4a:a2:
0e:1e:f2:aa:8e:af:74:60:d6:08:d0:67:c0:2e:40:
24:10:01:17:79:9d:d1:dc:c6:04:7d:f1:a2:c8:94:
ab:d8:80:ee:45:67:0a:7a:8f:c4:50:e5:cb:92:8f:
3f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:59:BD:D4:5A:F4:CE:6A:76:DB:9A:C0:44:1A:84:C7:38:42:59:F9
X509v3 Authority Key Identifier:
keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/Blm91Fr0zmp225rARBqExzhCWfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.184.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:47:59:dd:59:4c:93:30:29:ac:12:bf:0d:58:3a:59:08:8c:
ae:a8:ee:68:42:94:9c:ae:be:63:5a:44:5e:b6:ae:8c:f9:2f:
92:c3:94:50:02:77:10:35:af:15:a3:f8:24:63:90:c1:50:bf:
19:a4:94:c6:c9:6f:58:74:af:30:52:56:88:bb:e9:d9:a1:66:
e0:29:a3:22:c4:26:66:24:c5:f2:76:31:69:a0:47:3b:da:32:
10:6f:13:75:e9:01:48:a2:7e:5d:39:7d:79:fa:0c:3d:78:4f:
23:79:85:a9:19:5b:20:c1:19:a3:df:ff:8b:2c:84:a9:23:f6:
54:9a:97:ff:da:6a:27:01:b5:9a:8d:53:da:cc:fb:d1:a8:0c:
c8:81:f2:7e:43:4e:8a:51:0c:a3:d6:3d:b6:94:c1:cc:d1:67:
7b:25:b6:85:13:7d:c6:cf:77:4b:7a:4b:d7:ac:1b:7c:11:cc:
4f:7f:c2:3f:f4:fe:85:c2:a7:21:4b:4b:b9:76:ce:92:58:e3:
8a:10:3c:75:da:97:04:9c:36:30:3c:fb:e1:62:f6:b8:c5:9e:
1f:98:0b:c9:a3:d7:81:20:07:cd:6d:b5:b0:ea:b2:5a:6e:e3:
21:3a:ea:0a:be:27:48:a3:4e:e2:dc:ee:56:05:76:9e:cc:7c:
91:59:ed:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:15 2024 by rpki-client on console-fra.rpki-client.org