Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/ynJ5YgzqUo5KZDVX_8pQRB0eezc.roa
File: ynJ5YgzqUo5KZDVX_8pQRB0eezc.roa (raw, json)
Hash identifier: r6gMAHlg6DNI5vsJOjtW8eQERWoZUWLuhUFMFtmxzSA=
Subject key identifier: CA:72:79:62:0C:EA:52:8E:4A:64:35:57:FF:CA:50:44:1D:1E:7B:37
Certificate issuer: /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial: 01856FF95D307A40B5821BBF149390C006C0
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/ynJ5YgzqUo5KZDVX_8pQRB0eezc.roa
Signing time: Mon 02 Jan 2023 00:54:51 +0000
ROA not before: Mon 02 Jan 2023 00:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400039
IP address blocks: 45.11.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:5d:30:7a:40:b5:82:1b:bf:14:93:90:c0:06:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
Validity
Not Before: Jan 2 00:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca7279620cea528e4a643557ffca50441d1e7b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5f:21:86:22:02:97:48:ba:d7:ec:a6:08:8c:
24:28:23:fc:a3:9b:be:f0:21:4e:32:e1:ea:62:c0:
7c:6f:7c:ae:37:4c:25:11:5f:30:f8:c3:60:8f:ff:
0f:16:56:76:ce:61:17:87:27:a8:f9:42:62:2a:13:
cf:ad:08:c8:1f:8f:26:76:fd:f5:b1:a9:09:b2:bc:
95:13:07:03:2d:06:13:c3:f6:c2:f2:29:dd:e3:c5:
b2:57:16:91:45:8c:5a:fd:28:0e:33:ab:91:03:2b:
08:60:e7:76:df:7b:ed:bf:b9:76:88:32:1f:e5:72:
47:26:42:a3:71:4f:0b:af:48:41:9d:7d:c1:44:86:
f9:df:e7:4a:89:19:ed:ae:d7:d7:db:6f:93:d0:4f:
04:87:8a:2b:91:44:c2:14:b9:84:9c:30:06:ae:db:
22:a0:03:d4:f0:99:8f:2b:94:a0:dc:27:dc:a8:5f:
83:5b:e9:7e:a8:1a:84:94:a7:a5:bc:16:ef:52:2f:
d1:d8:6b:f4:0d:60:51:ac:3c:40:83:8b:c9:b1:21:
b9:0c:e4:65:22:dc:5a:d9:48:05:b6:84:b4:7e:5c:
39:b4:23:7f:47:fc:10:55:2e:e6:70:73:b3:ff:b0:
3c:84:27:27:b1:d3:bd:ab:c8:8f:5b:31:94:a3:d2:
df:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:72:79:62:0C:EA:52:8E:4A:64:35:57:FF:CA:50:44:1D:1E:7B:37
X509v3 Authority Key Identifier:
keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/ynJ5YgzqUo5KZDVX_8pQRB0eezc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.187.0/24
Signature Algorithm: sha256WithRSAEncryption
34:0d:9c:18:f4:c0:7e:59:7c:5f:cc:cb:74:47:4b:11:40:6a:
f5:7f:13:5a:e3:96:a9:8f:11:da:8b:af:f5:dd:f0:95:b1:ba:
dd:74:29:4a:b1:51:ed:24:9a:70:21:d8:85:7d:16:f7:4d:9d:
ea:a3:24:d5:45:c3:4b:7b:6f:1f:48:06:11:df:90:6c:06:01:
64:ba:68:39:4f:b9:7b:ca:03:09:93:e3:11:b9:5b:87:cf:44:
15:43:78:04:50:7a:b8:92:a4:5f:7d:2b:94:96:67:33:1f:02:
83:dd:8c:1f:e7:b1:99:bd:d4:16:9d:f1:5b:5d:1d:91:bf:3b:
89:82:d3:a6:2a:f3:7f:02:08:1a:96:db:fb:74:f3:c6:af:31:
19:e0:38:85:bc:e1:e0:fd:23:86:40:30:41:8c:28:ba:51:2d:
dd:48:77:8a:6d:bf:64:ba:ec:a1:9d:d4:f0:4b:03:fd:e6:04:
b7:1b:5c:c0:7d:b8:cb:da:d3:1a:e9:b3:74:0b:b8:fb:e1:e0:
93:5f:62:db:ad:a2:20:28:59:67:fe:48:19:c6:2a:87:e6:02:
eb:dc:13:42:fe:d4:a7:8f:d9:56:df:23:eb:30:f9:33:50:81:
39:3a:00:25:b3:b1:47:b2:af:b7:3f:14:9d:dd:8e:65:36:58:
35:fd:dc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:15 2024 by rpki-client on console-fra.rpki-client.org