Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/r2h59jwU-SsC3MDqc4KewMFpVso.roa
File: r2h59jwU-SsC3MDqc4KewMFpVso.roa (raw, json)
Hash identifier: xT1q9ClqnomraJvvdF6PidM18DmiqmoBuATSPIDG/Po=
Subject key identifier: AF:68:79:F6:3C:14:F9:2B:02:DC:C0:EA:73:82:9E:C0:C1:69:56:CA
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01879E41BEF6F58C9BDBDC388FA1529E3854
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/r2h59jwU-SsC3MDqc4KewMFpVso.roa
Signing time: Thu 20 Apr 2023 10:42:01 +0000
ROA not before: Thu 20 Apr 2023 10:42:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213257
IP address blocks: 45.94.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:41:be:f6:f5:8c:9b:db:dc:38:8f:a1:52:9e:38:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 20 10:42:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af6879f63c14f92b02dcc0ea73829ec0c16956ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:03:8d:b7:c6:a5:78:07:a5:46:69:13:4b:bf:
64:89:c2:70:53:e5:20:d6:87:8f:45:bb:68:d2:d1:
9f:56:50:80:c0:aa:8a:e5:9f:84:bb:15:68:71:10:
f7:8d:48:bf:8d:2b:3a:ea:4a:0f:b8:58:a4:4d:57:
2e:ee:52:67:74:ba:86:86:26:a8:5f:fc:9b:17:43:
75:04:d2:42:bf:91:06:8a:04:c1:8d:12:c6:ca:de:
c1:3f:a0:14:2e:97:1e:a1:e3:1b:82:6c:83:6f:a9:
c2:45:ec:8a:2c:f5:b8:bc:b7:3f:12:db:7b:05:0b:
24:e2:b2:72:6d:88:18:bc:e2:50:04:10:2e:f0:0c:
16:3e:af:31:59:59:ce:10:4e:05:7c:52:6b:9d:55:
72:dc:48:5a:6b:93:2e:18:1a:43:21:93:13:2c:97:
49:4d:58:c4:72:d0:a8:4d:dd:ed:5a:44:c3:e6:bf:
a1:91:4c:9e:95:25:cb:6f:af:5a:38:28:c8:78:c4:
bd:17:f2:03:4d:07:fc:7c:a0:30:42:5b:0f:32:56:
a7:50:dd:56:ab:df:f9:cd:6c:f8:ea:ca:6a:90:f1:
0a:89:72:8f:9d:ec:d9:73:af:8d:7c:08:28:d0:08:
c4:f7:88:02:d6:57:60:9b:21:0c:6a:b2:c2:5c:37:
8d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:68:79:F6:3C:14:F9:2B:02:DC:C0:EA:73:82:9E:C0:C1:69:56:CA
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/r2h59jwU-SsC3MDqc4KewMFpVso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.170.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:a1:23:19:04:f8:48:fc:fb:bf:59:9d:d3:ae:6c:cc:5a:9e:
ac:f8:3a:79:1f:82:10:bf:80:23:c8:69:52:1e:65:2f:24:6e:
74:fb:bc:ba:40:e4:8d:8a:69:62:d2:15:ca:af:3f:fa:6a:d6:
e0:dc:35:86:4d:c0:47:f4:b8:3d:da:8b:92:02:fb:27:ab:10:
9f:4c:f8:43:ae:e2:f7:c0:eb:96:ea:ab:73:59:71:48:54:38:
a2:ba:3c:09:0a:28:c3:6f:7f:ce:60:a0:02:d9:44:74:58:65:
c4:df:e9:60:4f:8d:cf:36:eb:7b:67:b9:94:5f:f6:61:35:9f:
bf:25:27:07:c6:7e:c9:af:97:f7:fa:57:29:7b:ba:77:ad:5a:
21:72:de:fd:08:91:01:04:e4:1d:d2:34:ed:0c:83:a8:bc:a4:
f0:7b:96:ee:66:a8:75:5c:fd:b9:63:f9:05:90:8c:fe:6c:08:
4e:b8:a5:42:00:41:08:23:ff:de:47:ff:94:70:33:19:80:0b:
20:1f:b9:79:a6:37:b6:71:51:f0:f2:5c:5f:81:c3:b6:70:78:
0b:8f:ba:77:a1:64:e4:54:e3:31:37:d8:d3:60:f8:e5:1c:18:
b1:d0:d5:ff:41:99:54:7d:a2:95:1d:e3:b5:14:3a:37:22:2c:
46:5b:4e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org