Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/9D5drA01tYBI2sdJNqVEraxrdu0.roa
File: 9D5drA01tYBI2sdJNqVEraxrdu0.roa (raw, json)
Hash identifier: Zwa50zAtP0QjDtHGRtDPe9qBK+tGS/eg0tDNg5gijV8=
Subject key identifier: F4:3E:5D:AC:0D:35:B5:80:48:DA:C7:49:36:A5:44:AD:AC:6B:76:ED
Certificate issuer: /CN=c7671270b69cec504606b126c4ca833816af7da4
Certificate serial: 018CC64B09DAEF500018BF465BC04211C45C
Authority key identifier: C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/9D5drA01tYBI2sdJNqVEraxrdu0.roa
Signing time: Mon 01 Jan 2024 18:30:55 +0000
ROA not before: Mon 01 Jan 2024 18:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216323
IP address blocks: 45.131.35.0/24 maxlen: 24
2a12:9e80::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 15 Jan 2024 14:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:09:da:ef:50:00:18:bf:46:5b:c0:42:11:c4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7671270b69cec504606b126c4ca833816af7da4
Validity
Not Before: Jan 1 18:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f43e5dac0d35b58048dac74936a544adac6b76ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ec:cb:39:4a:8b:72:a0:bc:ef:54:b7:e3:3b:
c3:07:d6:71:1c:5f:56:e4:25:39:8b:83:a6:27:48:
e3:a1:45:e5:80:24:b9:d1:3d:4c:7d:52:35:f2:86:
23:46:f1:b7:df:81:b5:9d:a9:38:65:56:47:68:bf:
14:c7:56:14:d6:36:eb:ec:cd:d5:41:44:33:68:9c:
c8:94:e9:83:56:20:af:99:30:01:a0:00:ff:84:a5:
69:03:fb:d4:23:55:3c:e4:30:ca:ed:c5:87:be:06:
06:43:75:97:bb:28:40:a0:ef:45:6b:75:57:3a:7d:
b8:13:7e:88:e7:1b:e0:52:05:e0:dc:7b:4f:92:b7:
1a:53:bb:78:89:55:b0:6c:54:ba:ab:ce:00:38:03:
31:f0:20:0d:b2:5d:15:60:d1:0c:dc:ce:f7:eb:81:
e3:33:da:88:65:2a:3a:ac:e3:c9:3f:c6:26:62:89:
98:50:56:d1:81:d0:54:68:e5:86:25:6e:c3:c0:eb:
2e:22:42:f8:23:38:83:7d:5f:05:d4:d1:4e:25:c1:
b3:77:d5:12:0b:b8:67:36:97:25:07:6e:fa:2c:b8:
36:6c:54:41:d9:19:54:ff:6b:11:73:c8:8c:d0:df:
44:d2:36:98:58:0b:c0:38:97:a5:aa:72:27:9e:d7:
cf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3E:5D:AC:0D:35:B5:80:48:DA:C7:49:36:A5:44:AD:AC:6B:76:ED
X509v3 Authority Key Identifier:
keyid:C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/9D5drA01tYBI2sdJNqVEraxrdu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.35.0/24
IPv6:
2a12:9e80::/29
Signature Algorithm: sha256WithRSAEncryption
5a:59:63:82:fc:2f:9d:8c:a3:ae:b1:e7:82:19:ba:58:e3:95:
75:ca:5f:ad:3b:61:cf:f8:34:78:83:97:8e:a8:dd:03:48:24:
db:e6:f6:25:09:1a:e2:23:84:32:8a:97:60:ec:5f:17:4e:e7:
85:00:8d:41:7a:3b:80:b0:14:df:8f:60:ef:e9:9f:a4:3e:12:
5f:ce:5a:15:81:1a:05:95:33:e6:05:21:7c:98:c7:bc:a8:42:
7a:25:b4:48:39:25:84:ed:b9:b3:f2:1a:b5:64:64:01:2e:a9:
06:87:b1:45:51:f3:e4:5b:45:10:17:01:1e:d9:aa:7c:3b:af:
43:fd:a7:68:10:c5:1c:95:bb:27:96:a8:52:42:6b:46:08:a3:
26:b7:cd:dc:ad:af:08:e1:de:fb:c7:24:4f:40:fe:16:94:fb:
b9:3f:bc:dc:99:06:e4:fa:56:43:2a:a3:db:14:6d:2d:a3:c6:
1f:6f:77:01:48:39:40:bd:74:b5:55:3e:f9:57:23:c6:13:56:
37:5f:3c:70:27:d6:ec:a5:b9:12:ed:f0:e6:69:df:18:1d:ad:
c0:0f:bb:c5:ab:31:92:82:69:ec:cb:b1:c3:49:89:5a:f0:80:
42:6f:51:11:8b:d2:74:b3:83:65:c3:9e:15:9e:08:91:f9:04:
02:e9:cc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:12 2024 by rpki-client on console-fra.rpki-client.org