Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/kzOB0hFhjt5QQP0cxgRO5_WDiwY.roa
File: kzOB0hFhjt5QQP0cxgRO5_WDiwY.roa (raw, json)
Hash identifier: Lp+hkp4l7A9F4J51tZDvt4Yg/ibaSP5OnTK602sbxho=
Subject key identifier: 93:33:81:D2:11:61:8E:DE:50:40:FD:1C:C6:04:4E:E7:F5:83:8B:06
Certificate issuer: /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Certificate serial: 01856FC27EB042FF474AB77C42400D7F7A05
Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/kzOB0hFhjt5QQP0cxgRO5_WDiwY.roa
Signing time: Sun 01 Jan 2023 23:54:55 +0000
ROA not before: Sun 01 Jan 2023 23:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208395
IP address blocks: 45.139.136.0/22 maxlen: 22
2a0e:b940::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:7e:b0:42:ff:47:4a:b7:7c:42:40:0d:7f:7a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Validity
Not Before: Jan 1 23:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=933381d211618ede5040fd1cc6044ee7f5838b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7f:a7:44:73:d9:ac:47:f8:6a:a9:eb:d7:51:
50:32:40:62:33:ae:69:ad:cb:28:a0:08:94:02:3d:
a0:15:bf:d6:41:dd:35:0f:12:c3:a8:9a:f2:fc:0a:
32:66:44:e7:3f:a7:f4:25:6a:e3:cd:8c:54:4f:a9:
2a:a6:21:b4:59:24:ef:69:77:07:e7:d7:50:0e:fe:
d5:cb:b0:84:3f:e4:a6:cf:72:83:de:df:88:9f:d9:
67:74:83:69:d1:62:34:0e:35:1f:77:39:59:01:17:
b0:14:00:e3:81:fd:90:71:ec:85:81:5f:b8:ff:bd:
d0:66:33:30:cb:19:69:a9:0e:de:8a:91:0c:66:ec:
ee:09:e2:fc:ca:c1:03:0f:6e:6e:4d:f8:1a:f4:35:
c0:6f:f8:80:e7:ca:88:4e:27:40:c2:74:cb:ff:d0:
f8:64:cb:54:77:76:d4:66:bc:93:14:d7:af:c6:1e:
3a:eb:21:18:a1:9d:55:0b:83:71:47:25:58:ec:96:
3f:1b:64:91:87:01:fb:39:41:04:be:56:2d:2c:ad:
95:a9:05:f4:1f:f2:55:8f:42:51:7c:f3:a0:31:90:
a7:89:aa:9d:7e:0b:7c:2d:09:52:2e:6b:c5:3d:ba:
fd:15:66:05:06:df:fe:c3:0c:00:94:3a:9d:2e:2c:
b6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:33:81:D2:11:61:8E:DE:50:40:FD:1C:C6:04:4E:E7:F5:83:8B:06
X509v3 Authority Key Identifier:
keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/kzOB0hFhjt5QQP0cxgRO5_WDiwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.136.0/22
IPv6:
2a0e:b940::/29
Signature Algorithm: sha256WithRSAEncryption
09:8e:08:36:4c:2b:7d:be:11:bf:bd:02:96:5b:ff:72:c1:6c:
98:ca:9c:1b:c9:05:a5:b9:8b:86:c0:c4:d3:2a:1c:44:ae:94:
12:96:ef:29:1b:79:87:6d:0e:22:f5:de:7c:15:0c:25:ab:36:
a6:a3:8f:bb:ac:cc:4c:b2:94:73:d1:7d:b5:da:8a:61:bc:10:
d2:24:90:41:d9:2d:e8:7d:16:5d:1d:5e:7d:75:e4:74:9a:e4:
5e:75:3d:3e:de:81:5d:c2:b0:6d:ac:d2:67:0f:70:31:e1:d4:
be:53:b4:ac:50:a6:e5:23:4c:d5:7c:c2:26:73:2a:99:8a:b5:
99:61:5c:09:81:6c:4b:97:aa:4d:ad:9d:20:63:1c:1b:1a:96:
f6:63:97:b0:57:99:87:81:20:58:89:64:fa:d7:d5:13:b2:e1:
bf:97:da:9f:4c:f4:c8:ad:1b:2b:9c:fa:7c:d1:da:2b:16:8c:
48:31:86:de:22:ae:b2:3e:b8:44:2c:fd:f6:8b:ec:9c:0e:28:
d5:53:80:0b:77:1b:5b:1f:14:97:4a:04:06:28:d2:09:b8:f6:
2c:0f:14:d7:e6:1c:07:eb:a1:8e:7d:27:ab:ea:69:13:38:1f:
48:3f:45:6e:f6:0e:46:61:d7:41:68:a7:7a:66:b6:44:1c:5f:
ec:18:7f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:09 2024 by rpki-client on console-fra.rpki-client.org