Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/K6p1BIRHcXWOMQ0EDDhhwCJZtaA.roa
File: K6p1BIRHcXWOMQ0EDDhhwCJZtaA.roa (raw, json)
Hash identifier: 6Mqs6nGAgGZJyNcDsPjiBkhhi4Svj3zCuC08u166KqY=
Subject key identifier: 2B:AA:75:04:84:47:71:75:8E:31:0D:04:0C:38:61:C0:22:59:B5:A0
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01856BC0ED799404746516117ADC3735D0CF
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/K6p1BIRHcXWOMQ0EDDhhwCJZtaA.roa
Signing time: Sun 01 Jan 2023 05:14:43 +0000
ROA not before: Sun 01 Jan 2023 05:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44094
IP address blocks: 45.150.64.0/24 maxlen: 32
45.144.31.0/24 maxlen: 32
45.144.30.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c0:ed:79:94:04:74:65:16:11:7a:dc:37:35:d0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 05:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2baa7504844771758e310d040c3861c02259b5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ca:77:41:ce:a2:90:3a:4c:a0:df:d1:0d:ac:
85:4f:fb:e3:c1:ac:51:df:2f:49:fd:8c:c4:50:db:
be:d7:13:91:2f:38:9a:b8:57:8e:d1:ce:87:56:8e:
a4:76:1b:6e:20:d1:e6:e0:22:24:34:1f:06:e4:4f:
cd:d3:21:40:c9:b5:65:12:ac:30:a0:60:86:62:9b:
45:b1:e8:a4:09:98:87:c9:bd:3d:23:52:c7:56:ef:
bf:e3:c9:c6:06:55:d5:43:5d:9e:38:bb:dd:b9:df:
af:30:23:e1:59:d5:74:aa:d7:f5:4b:f6:62:75:d8:
77:5c:c6:30:de:f9:b8:42:22:7f:95:85:27:de:1a:
3f:f0:c8:b0:2e:0e:61:d4:64:ee:59:82:e8:9d:5a:
d1:3d:f2:a6:20:af:df:3d:4c:10:b3:d2:10:d7:f5:
65:c3:64:91:fc:bd:5d:97:d9:cc:7f:db:64:28:55:
10:50:a0:20:1b:29:dd:93:98:95:d0:d9:b0:10:6b:
bf:69:0a:a2:1d:b5:e0:1c:19:e1:e4:0b:f8:86:59:
56:27:8d:20:e9:84:cc:e8:2f:23:37:69:a9:3b:5b:
de:cf:a3:fd:3b:6f:4b:d4:53:a9:4a:9c:4f:21:a2:
fd:33:49:96:86:51:2f:5d:7d:62:43:9c:f2:a9:9a:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AA:75:04:84:47:71:75:8E:31:0D:04:0C:38:61:C0:22:59:B5:A0
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/K6p1BIRHcXWOMQ0EDDhhwCJZtaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.30.0/23
45.150.64.0/24
Signature Algorithm: sha256WithRSAEncryption
15:de:5e:d4:1d:8d:26:43:f6:6b:0c:62:8b:a5:e8:bd:ef:c5:
8c:1d:84:5d:c5:f7:c2:8c:7f:c0:39:e2:ca:3a:cd:9c:37:f1:
08:a8:e9:8f:90:f3:7b:08:ec:99:eb:5e:db:ed:32:c3:7c:8f:
4e:e3:4e:b9:3a:a3:95:72:9c:7e:f7:e2:2f:61:3d:d2:0e:a9:
63:09:be:e6:92:c6:ea:a3:fc:fe:7a:ad:c5:f7:54:c8:87:61:
7e:5b:d9:f5:c0:67:54:c5:1c:9f:19:11:7d:13:04:bf:ad:8b:
73:5f:4b:c5:08:56:65:76:7c:4c:2b:cd:b2:87:86:9d:a7:a6:
00:d6:cb:b1:41:5e:5d:75:18:21:98:79:10:92:47:b3:60:8c:
b6:98:07:bd:89:38:16:b0:b7:53:b5:66:a5:6c:cc:7d:16:04:
49:81:66:29:89:c5:39:d0:f5:6e:83:1a:ea:fe:8c:dd:ed:fe:
c3:e2:b6:0a:13:b5:0e:47:1c:0b:a2:15:1c:25:a7:94:59:0f:
7a:7a:77:27:b3:a4:49:83:9d:ac:65:b7:15:cd:b9:02:04:65:
6e:20:a9:18:66:71:a9:35:60:01:ba:b6:88:20:68:71:1f:6c:
4b:41:0e:7f:30:cc:26:cd:ce:a3:8f:a2:da:b8:4f:76:f6:25:
04:4a:6c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:29 2024 by rpki-client on console-ams.rpki-client.org