Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/eY5P5Lo8U0Bi0DPgxppsxviNng8.roa
File: eY5P5Lo8U0Bi0DPgxppsxviNng8.roa (raw, json)
Hash identifier: 1i/Ppb3UjzpScTCi+C3Sz4tkT3G6JbGNusc/UiV19Fc=
Subject key identifier: 79:8E:4F:E4:BA:3C:53:40:62:D0:33:E0:C6:9A:6C:C6:F8:8D:9E:0F
Certificate issuer: /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial: 01856C01509090928740C2FFC893FF4B693F
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/eY5P5Lo8U0Bi0DPgxppsxviNng8.roa
Signing time: Sun 01 Jan 2023 06:25:03 +0000
ROA not before: Sun 01 Jan 2023 06:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202837
IP address blocks: 45.92.15.0/24 maxlen: 24
45.92.14.0/24 maxlen: 24
45.92.13.0/24 maxlen: 24
45.92.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:50:90:90:92:87:40:c2:ff:c8:93:ff:4b:69:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Validity
Not Before: Jan 1 06:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=798e4fe4ba3c534062d033e0c69a6cc6f88d9e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c5:66:fd:fb:72:6f:c5:cd:76:d7:e3:ff:11:
66:00:a4:76:4b:ae:25:cb:e1:56:50:33:bd:43:eb:
c9:84:17:f8:c5:e0:a9:9b:f6:a2:2a:c9:d9:f2:eb:
11:6a:79:6d:03:ea:eb:f1:d2:7c:e6:41:9e:49:1e:
68:86:e4:d1:23:08:fe:34:42:4f:69:8c:cb:fa:68:
30:8e:d8:67:ac:7c:57:f2:ca:3d:8d:6a:1b:ce:57:
9e:ed:1b:0e:b3:47:a1:2a:f3:7f:37:40:bd:e6:e0:
87:3d:94:73:75:8e:18:fd:6a:02:40:8c:ad:6a:43:
c1:74:13:ee:9a:d5:46:b0:82:9a:c9:b1:89:a1:d0:
04:93:fd:2b:ae:06:83:36:8c:94:81:51:35:f5:48:
a7:dd:1c:13:78:2c:b9:2d:a6:2a:bd:41:8a:3e:89:
b5:29:fa:13:a7:96:80:d3:4a:c1:17:79:8b:0a:bf:
42:37:ef:5a:5d:bd:43:45:19:32:67:0a:15:2a:a0:
89:57:10:cf:32:98:7f:7a:0e:0a:34:44:6f:fe:1f:
de:30:e9:bf:8f:cb:a0:bf:75:5f:ee:eb:7b:2d:21:
22:eb:f4:43:1c:72:c4:eb:79:55:d6:aa:be:02:0b:
3c:a5:da:9a:38:19:3f:f2:ea:f7:cf:89:33:25:a2:
36:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8E:4F:E4:BA:3C:53:40:62:D0:33:E0:C6:9A:6C:C6:F8:8D:9E:0F
X509v3 Authority Key Identifier:
keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/eY5P5Lo8U0Bi0DPgxppsxviNng8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.12.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:76:6d:93:5c:97:f8:c7:e8:6f:f6:45:5f:08:17:44:24:a9:
f4:77:2f:25:7d:a4:d6:9f:4b:78:95:c8:78:74:dc:da:12:57:
2b:3d:da:ad:f1:a9:3d:16:ad:6d:e8:e5:f7:8b:b0:98:54:e9:
47:a9:48:d4:cc:b2:b9:1c:84:b7:a3:ea:1b:a9:40:4a:9c:2f:
2b:eb:68:bf:ef:aa:73:5a:64:f7:17:5b:d3:10:b9:84:53:f7:
38:bf:4c:ac:59:12:fa:74:08:96:c5:c7:92:9f:79:74:9f:6d:
bd:bb:a6:64:b3:e1:f4:91:32:0c:46:4a:71:16:82:b2:e6:0c:
cc:f0:5e:24:02:d3:77:2f:38:26:1a:7b:3f:4e:57:37:a3:a4:
52:e9:a8:ab:d7:db:45:5b:41:ff:c3:82:32:87:4b:f7:7f:e2:
52:60:b0:4f:01:24:c0:39:8c:1e:e6:79:de:3a:05:e8:5c:21:
49:1d:b8:67:08:82:da:12:5a:d5:5f:28:a7:55:71:89:b8:c9:
01:3f:38:df:00:2b:07:70:1d:a6:56:bb:a3:e3:ed:63:ae:9d:
e2:1c:13:38:e2:82:95:ab:2a:53:ef:46:5d:b8:75:55:96:86:
8e:56:78:64:18:01:02:3a:54:a6:87:66:ab:97:b8:a9:b8:2a:
49:7a:87:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:04 2024 by rpki-client on console-ams.rpki-client.org