Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eBYIxZgmpaEPWF8taonApuUxY8U.roa
File: eBYIxZgmpaEPWF8taonApuUxY8U.roa (raw, json)
Hash identifier: A/d7ucRG6bnmQIOwqKg831E2SDQGEdc61zh+qgVpT1E=
Subject key identifier: 78:16:08:C5:98:26:A5:A1:0F:58:5F:2D:6A:89:C0:A6:E5:31:63:C5
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018AF6AB6ADE4B3A369209BF7B98AF84E652
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eBYIxZgmpaEPWF8taonApuUxY8U.roa
Signing time: Tue 03 Oct 2023 17:52:23 +0000
ROA not before: Tue 03 Oct 2023 17:52:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42055
IP address blocks: 45.144.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Oct 2023 08:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:ab:6a:de:4b:3a:36:92:09:bf:7b:98:af:84:e6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 3 17:52:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=781608c59826a5a10f585f2d6a89c0a6e53163c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:56:c1:0a:a7:a5:c8:55:52:67:dd:7b:fe:c9:
26:69:e5:ba:08:02:e9:87:89:be:6a:a5:4a:71:42:
0c:51:f7:18:40:28:2f:0e:b7:e0:6f:b0:f5:5d:0b:
b1:d9:41:2e:01:bb:13:f1:ac:b7:b0:bf:5f:f5:05:
91:76:05:66:7a:a0:57:4d:98:f3:b2:74:c5:fc:4c:
c3:cd:84:9c:6a:32:84:d6:7f:95:dc:cf:f5:4c:47:
f6:d6:50:3d:32:76:ab:f5:24:58:09:8b:72:e4:6b:
c0:27:72:a1:6c:f5:fb:d9:da:76:2b:b5:d5:59:f2:
05:96:89:f3:26:fd:0f:73:4b:9e:7f:01:d8:07:df:
72:d7:c3:50:14:44:06:76:54:12:c7:1c:64:70:f4:
9d:4e:6c:c9:2e:dc:2a:3d:ca:61:8d:75:b6:69:24:
8f:47:7f:05:d4:57:2e:d6:e1:fc:45:83:a8:60:81:
44:48:73:ee:26:86:65:88:27:22:ca:0a:a7:18:fa:
eb:9e:1d:01:81:80:fa:94:7b:b9:5b:22:71:6d:53:
52:4d:4c:82:e8:a1:d4:57:a5:83:30:f2:40:d7:47:
94:42:96:b2:47:e1:47:1d:84:ac:76:54:4c:a1:59:
3f:dd:27:4f:a1:51:2f:ef:7f:19:70:b2:14:54:d9:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:16:08:C5:98:26:A5:A1:0F:58:5F:2D:6A:89:C0:A6:E5:31:63:C5
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eBYIxZgmpaEPWF8taonApuUxY8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.215.0/24
Signature Algorithm: sha256WithRSAEncryption
76:0f:9c:16:47:2e:fb:76:c2:e9:79:a8:fc:fb:21:34:5e:d2:
98:72:2d:89:53:65:0d:c2:12:12:f1:20:12:2f:81:49:fa:37:
a2:e7:8d:a2:77:16:ea:46:8e:24:a3:65:d6:f8:99:dd:e4:64:
19:55:37:8a:7f:a9:b5:60:68:50:a1:33:65:05:7e:58:59:72:
3e:be:6b:86:ee:5c:c0:30:c2:11:02:48:39:b2:ca:16:41:08:
0c:b8:f9:ac:03:b5:6e:51:cf:6f:58:a4:b5:5e:46:9c:b0:ce:
3e:10:fb:98:8a:5b:9c:9b:e6:92:db:3b:e0:13:7c:42:c8:ca:
2b:46:a1:fe:0c:f1:9a:9d:f4:aa:13:5c:b5:fb:fc:0a:f9:95:
b1:8a:02:a2:3b:b9:30:67:c7:6f:2c:12:c4:7a:b3:dd:fd:ae:
b9:44:4c:65:35:1e:09:f0:c0:0b:56:c6:da:eb:ed:01:13:d1:
a7:6a:5d:94:43:de:17:a0:37:a7:fb:8b:d7:a2:69:4f:b2:94:
e9:ae:12:17:80:8c:8f:fd:65:0d:82:11:6e:53:59:39:8e:4e:
62:7e:f7:d6:4c:25:0b:e5:29:35:2a:18:48:87:33:92:ea:3f:
4d:0a:10:ed:60:06:3e:1e:e3:33:7f:19:cb:9b:d4:76:3c:00:
bb:df:4a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org