Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/RUsXCLXMJMU0Knp0T02XU5UGOHc.roa
File: RUsXCLXMJMU0Knp0T02XU5UGOHc.roa (raw, json)
Hash identifier: ky91G0fa8t0pBzBwzr9EbNdARgvjSoYSLR1oSBa142Y=
Subject key identifier: 45:4B:17:08:B5:CC:24:C5:34:2A:7A:74:4F:4D:97:53:95:06:38:77
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018BD8AB390067E53B47B0FB31DB62274A8C
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/RUsXCLXMJMU0Knp0T02XU5UGOHc.roa
Signing time: Thu 16 Nov 2023 15:06:21 +0000
ROA not before: Thu 16 Nov 2023 15:06:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60446
IP address blocks: 45.144.213.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:ab:39:00:67:e5:3b:47:b0:fb:31:db:62:27:4a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 16 15:06:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=454b1708b5cc24c5342a7a744f4d975395063877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d4:37:2c:39:1c:8f:28:0c:a7:81:1f:94:84:
cd:21:85:d8:56:87:c0:83:90:83:43:49:c0:a9:a0:
29:ea:48:be:33:f0:7d:2c:69:8f:e6:07:a0:06:33:
30:56:72:5f:0e:f6:69:d4:67:b2:cf:5b:b1:68:4a:
87:f0:b3:c8:99:30:31:b1:0d:ef:c8:4e:ae:8c:80:
15:7d:99:d0:9a:83:1b:84:4d:2f:df:1a:0d:e3:db:
82:ff:d2:47:a3:70:ef:83:a6:9a:99:14:ea:7a:a2:
23:1d:79:95:74:44:c8:e9:da:46:38:83:bb:9b:dd:
90:b8:ec:3b:8b:66:e4:51:e7:f7:59:8a:ea:f5:7d:
ec:e6:40:4d:53:12:26:5d:f3:44:ea:0a:88:1d:60:
9b:db:3a:0b:92:0c:ae:38:99:e2:45:88:25:91:34:
12:0a:6c:ae:7a:5d:f1:1d:d3:7d:90:0a:c3:d6:b4:
ec:d5:c8:49:37:a2:39:0c:c0:0f:c7:00:86:9f:fa:
a2:24:d1:8b:37:7d:bf:c3:a7:3b:50:20:9d:d5:66:
6a:ad:4a:f6:00:64:6d:09:91:38:c8:d2:8e:9b:c1:
1b:17:92:53:31:c1:44:8c:3a:a1:d9:97:77:8f:6f:
92:f0:44:32:21:7d:77:ed:e4:0f:71:a2:2f:b2:c7:
98:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4B:17:08:B5:CC:24:C5:34:2A:7A:74:4F:4D:97:53:95:06:38:77
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/RUsXCLXMJMU0Knp0T02XU5UGOHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.183.0/24
45.144.213.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ee:33:a0:a7:44:ff:8a:fa:01:c2:59:40:ae:37:bf:46:23:
6d:bd:47:c8:66:32:39:b2:b6:94:27:76:0d:51:a8:56:c2:cc:
8c:a8:fb:cc:e7:aa:c5:51:dc:74:10:3c:03:2f:2f:77:4d:04:
7f:00:7e:e0:90:65:92:0a:51:05:f0:03:20:70:ab:f1:78:e8:
74:b9:46:8c:0e:03:3a:39:f6:33:f7:53:35:1a:44:ac:56:9b:
f0:3f:34:3f:b4:9b:87:ee:a6:a1:b5:32:bd:a4:49:60:f2:00:
23:df:57:1e:5b:78:a3:32:73:64:12:55:4d:1a:6b:93:56:8e:
ac:8f:b2:65:6e:05:b6:45:23:a5:ac:ba:8d:70:f9:a7:71:21:
3b:b8:87:81:47:3d:ea:cb:88:b5:76:df:03:63:83:c2:db:32:
3f:d4:84:0e:c5:8d:fc:84:95:97:7c:cc:ba:ef:10:31:8c:f5:
cf:82:2b:18:e6:da:16:b9:f9:bc:b9:f4:59:44:4d:fb:1a:5b:
fb:a3:d8:39:40:2d:df:52:4f:4a:6c:fb:d6:06:41:d5:51:ba:
46:fe:fd:a0:dc:07:85:f1:83:13:c2:11:90:df:b9:f6:55:04:
c0:97:fe:84:6a:51:e3:14:b2:d6:10:76:ca:34:7b:1a:41:82:
83:9c:87:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 07:05:09 2023 by rpki-client on console-ams.rpki-client.org