Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/FXCjBtCUqmfp4pzAkayx747ZrIg.roa
File: FXCjBtCUqmfp4pzAkayx747ZrIg.roa (raw, json)
Hash identifier: wJhhFTbsrd4d8u3APYKC6HgtMM5mAd6wkcHdzcuzNcc=
Subject key identifier: 15:70:A3:06:D0:94:AA:67:E9:E2:9C:C0:91:AC:B1:EF:8E:D9:AC:88
Certificate issuer: /CN=121a37282dd992d88658160559e048392798c84b
Certificate serial: 018756A277A8723D30D1425C824593AC8492
Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/FXCjBtCUqmfp4pzAkayx747ZrIg.roa
Signing time: Thu 06 Apr 2023 12:55:00 +0000
ROA not before: Thu 06 Apr 2023 12:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44092
IP address blocks: 45.13.130.0/24 maxlen: 24
45.13.131.0/24 maxlen: 24
45.13.128.0/24 maxlen: 24
45.13.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:a2:77:a8:72:3d:30:d1:42:5c:82:45:93:ac:84:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121a37282dd992d88658160559e048392798c84b
Validity
Not Before: Apr 6 12:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1570a306d094aa67e9e29cc091acb1ef8ed9ac88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:85:73:a6:81:07:a6:99:a9:74:6d:ae:65:fd:
b7:0d:a6:7e:80:c2:ea:52:ba:64:b0:aa:28:e4:11:
3a:55:96:3c:e1:65:7d:33:8f:bb:20:0b:e0:8f:3a:
01:76:a3:ae:8c:99:30:80:02:0e:6d:a9:43:54:c8:
5e:58:64:52:0b:c7:03:83:9d:56:d9:05:89:08:42:
2b:6f:d7:8a:53:65:77:0c:d6:6b:0b:cc:55:11:c5:
ff:7e:31:95:8d:a3:79:d5:f8:72:9c:fb:a9:3e:93:
f5:aa:ac:01:97:f2:99:9e:94:d1:08:b8:2f:84:e5:
81:86:49:ea:e0:bc:bd:6e:8c:be:22:7f:39:a9:b1:
7d:63:c7:c2:50:e4:87:aa:a0:5c:09:ed:7e:20:fc:
d0:e6:c5:c3:a8:74:bb:ec:89:4f:54:b9:68:37:7d:
72:1e:88:c9:94:9f:2b:a2:d9:49:a0:84:ed:0f:12:
29:31:06:33:cc:18:e7:26:aa:c2:05:08:2d:77:1b:
f2:58:4c:e2:dd:22:4d:9f:0e:4c:b1:bf:29:fe:7f:
5c:eb:5d:0d:e1:61:35:5d:ed:82:8c:cb:be:e3:b7:
52:cb:a2:5d:74:53:24:f0:b6:42:4d:72:54:04:a0:
98:d5:e5:f8:96:8b:f4:c3:e5:08:3a:91:fc:43:27:
fa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:70:A3:06:D0:94:AA:67:E9:E2:9C:C0:91:AC:B1:EF:8E:D9:AC:88
X509v3 Authority Key Identifier:
keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/FXCjBtCUqmfp4pzAkayx747ZrIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.128.0/22
Signature Algorithm: sha256WithRSAEncryption
ea:57:df:18:7c:05:6c:09:0b:81:3e:8b:55:0f:bf:ca:f8:f2:
c2:0d:f0:55:2e:83:74:fa:6b:35:e8:31:52:41:0b:50:ba:90:
eb:d4:28:f0:9e:9b:bf:11:aa:4a:67:d8:be:c4:8d:88:eb:36:
99:04:2d:29:f2:d3:4f:8e:17:eb:14:28:ac:f9:bd:76:90:d4:
ba:43:cf:73:71:b7:a0:f6:04:6b:dd:41:d7:03:52:6b:4f:66:
61:d4:e9:50:02:d5:60:7f:cd:a5:89:5d:f8:c8:56:1c:17:77:
45:c1:3d:d4:aa:fa:bb:90:3a:08:3f:68:5f:df:01:73:84:39:
73:ac:a0:a7:33:3b:f0:34:b7:57:ed:cc:25:02:92:b3:8c:c5:
2b:9e:7b:35:c8:91:a5:24:c7:19:fc:cc:4a:89:f4:0f:80:73:
be:85:77:f2:e9:f9:8a:3e:db:d0:7c:c6:4c:73:4e:2c:47:62:
91:ac:e1:99:64:62:a6:0f:3f:48:63:eb:64:fd:2f:c0:74:bf:
da:5f:12:b0:1e:35:68:47:97:63:89:1c:19:8b:e5:39:c4:e4:
1b:14:60:81:2f:f3:e4:b9:c8:8e:91:9c:66:3d:5f:57:f2:0b:
6a:f8:ee:2f:ee:12:f9:36:2e:4e:67:46:63:cc:e2:2e:a9:67:
dd:c8:6b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:40 2024 by rpki-client on console-ams.rpki-client.org