Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/VV2wbUcKxJZCoDRjdqdnNEsHMbs.roa
File: VV2wbUcKxJZCoDRjdqdnNEsHMbs.roa (raw, json)
Hash identifier: YT7YfsE3Dnsu99Z72/f3m65j7aUEnvV6OYmzjs0VYvI=
Subject key identifier: 55:5D:B0:6D:47:0A:C4:96:42:A0:34:63:76:A7:67:34:4B:07:31:BB
Certificate issuer: /CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Certificate serial: 01857102E0F827E0F99D3C6E37F43AA2F622
Authority key identifier: 74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/VV2wbUcKxJZCoDRjdqdnNEsHMbs.roa
Signing time: Mon 02 Jan 2023 05:44:52 +0000
ROA not before: Mon 02 Jan 2023 05:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202548
IP address blocks: 45.130.45.0/24 maxlen: 24
2a0f:a040::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 03 Aug 2023 14:27:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:e0:f8:27:e0:f9:9d:3c:6e:37:f4:3a:a2:f6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Validity
Not Before: Jan 2 05:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=555db06d470ac49642a0346376a767344b0731bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ab:ff:24:58:64:89:99:f1:e4:a4:16:8c:7d:
18:ab:a0:45:74:3c:71:d5:df:7e:b4:d2:23:48:11:
43:9e:10:56:06:ff:9a:23:7f:76:1b:b9:60:b9:cf:
24:66:b1:87:26:51:b7:b2:59:84:f7:09:29:92:6b:
98:f3:3c:94:f1:c7:41:4d:ee:2a:f1:16:ae:86:b3:
fe:bf:4c:96:1d:c0:17:a8:02:1d:61:20:df:1b:46:
f7:0e:9a:7f:67:1b:3e:5c:85:2b:c1:c8:36:e3:d0:
93:d2:2c:fd:8a:09:ab:47:cb:10:41:eb:6b:bb:85:
07:a5:39:d7:0a:f6:cd:60:94:db:f6:35:21:c0:7b:
7d:35:d5:b1:82:0f:e9:ac:ef:06:5a:69:3b:aa:8d:
57:d5:26:de:f8:89:27:cf:a1:c9:1a:60:4a:c6:f2:
42:47:3a:b0:3b:4f:7b:21:f8:e7:fe:a5:a7:0c:46:
6e:26:7d:80:2f:f7:eb:3a:88:2e:34:87:8c:f0:81:
1c:77:5f:fb:93:a4:0d:94:42:8c:49:78:f7:86:7f:
e0:9c:51:72:6f:c8:a8:71:ad:01:0f:47:7e:b8:7a:
5c:5e:27:53:41:74:54:68:13:4d:a4:13:05:86:08:
e6:cd:8e:a5:6f:4d:95:1d:ea:dc:b1:74:50:d2:11:
64:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5D:B0:6D:47:0A:C4:96:42:A0:34:63:76:A7:67:34:4B:07:31:BB
X509v3 Authority Key Identifier:
keyid:74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/VV2wbUcKxJZCoDRjdqdnNEsHMbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.45.0/24
IPv6:
2a0f:a040::/29
Signature Algorithm: sha256WithRSAEncryption
85:f9:b3:fb:0c:c2:7e:0f:43:e3:15:5e:0d:82:31:fd:3e:80:
94:9e:65:57:b1:40:15:91:24:eb:cb:ad:91:e0:3c:8e:87:36:
ee:6a:26:c3:0b:52:3e:9a:dd:fa:8c:07:fa:9e:80:1b:9f:3f:
87:e5:18:62:4f:d4:97:0a:24:97:71:a5:ee:08:59:fb:53:4c:
f9:e1:f6:81:fc:51:b7:a4:74:fd:5a:69:1c:d5:85:3c:8a:95:
7d:67:79:ac:3b:6e:b8:b1:c7:51:38:19:4a:50:1c:9d:fc:dd:
04:14:03:75:2f:8b:1e:5a:83:b5:34:03:83:0a:4d:8d:83:34:
48:d5:28:cb:ea:df:5e:a8:0f:eb:21:68:9f:0a:80:28:64:4f:
d6:d6:33:f6:8f:e3:aa:c0:54:37:83:e9:9c:66:71:5e:b8:51:
51:c8:32:33:ae:6b:24:3d:ff:40:cc:5f:68:0d:75:12:ac:2c:
5e:67:dc:9e:7e:d6:7f:b6:c3:e0:6c:d3:ce:12:95:db:6d:b1:
45:cb:64:a8:41:0f:72:1b:aa:92:35:ff:ae:68:93:60:a9:ad:
54:f5:3d:ee:aa:ff:25:87:bf:a8:dc:b9:47:7f:94:91:36:27:
51:26:d7:27:e0:65:6e:61:42:10:1f:1e:d4:f3:c0:65:5f:a6:
b0:4a:89:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:45 2024 by rpki-client on console-fra.rpki-client.org