Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/1-f1YUsSbVgRAwnFkFbKfvvc17Xk.roa
File: 1-f1YUsSbVgRAwnFkFbKfvvc17Xk.roa (raw, json)
Hash identifier: TUVJaOYX+bz7Bz8FUkIhGVlVeXWhhyn278TSVGCU3eo=
Subject key identifier: F9:FD:58:52:C4:9B:56:04:40:C2:71:64:15:B2:9F:BE:F7:35:ED:79
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 01856EF8E852252C64C201B168AB7B045FCD
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/1-f1YUsSbVgRAwnFkFbKfvvc17Xk.roa
Signing time: Sun 01 Jan 2023 20:14:44 +0000
ROA not before: Sun 01 Jan 2023 20:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210972
IP address blocks: 45.95.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f8:e8:52:25:2c:64:c2:01:b1:68:ab:7b:04:5f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Jan 1 20:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9fd5852c49b560440c2716415b29fbef735ed79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:84:ba:87:08:7c:c4:2f:8f:33:02:00:8b:c1:
80:d1:25:2e:64:f2:f0:1b:a0:be:16:4f:f2:05:ac:
74:1b:a8:7a:81:8e:5a:ef:00:24:94:a1:9b:34:4c:
63:80:57:8a:e4:4d:10:bb:bd:72:38:69:7c:ec:0b:
a4:45:0f:77:2f:19:6e:00:14:7c:12:49:3b:76:e0:
54:b5:0c:e8:3e:51:a9:02:ce:13:ad:2c:2e:47:a3:
75:c7:f6:9f:0a:d8:7a:4c:51:61:da:9b:d1:4f:de:
77:a8:c6:2e:df:73:65:b0:5f:87:0d:1b:10:68:61:
da:d3:d5:08:c8:20:d1:e4:b7:ce:de:69:75:9f:4a:
68:d5:7b:f9:e5:c1:5b:38:d5:c1:91:21:4e:80:db:
43:e1:e8:ad:a5:c8:dd:ed:54:fc:bf:2f:c6:5a:82:
36:54:e0:11:ea:e2:f3:f7:f4:f5:10:75:ea:cb:6a:
3a:b9:35:c8:cb:53:59:17:ab:1c:a6:f0:7a:76:90:
5f:a4:55:94:3b:16:2b:ce:9d:3b:08:00:bd:a0:26:
fd:20:04:8b:d3:1e:8f:ed:b2:3c:d3:33:28:b1:ad:
ae:29:d5:08:98:9c:10:ad:c8:08:f8:21:91:5e:e2:
fa:be:6a:98:0e:27:d0:0b:34:53:be:88:b6:1a:4d:
20:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FD:58:52:C4:9B:56:04:40:C2:71:64:15:B2:9F:BE:F7:35:ED:79
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/1-f1YUsSbVgRAwnFkFbKfvvc17Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.115.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:8c:3a:ea:bb:64:0a:bb:ce:5a:62:a0:36:50:15:d7:a5:da:
e3:97:5d:d9:36:8a:26:c6:31:26:22:53:1a:b2:2e:d6:08:31:
f3:13:48:b7:3e:86:4e:e5:4b:77:7c:12:48:99:eb:9a:45:16:
fb:79:cf:06:4c:e4:b1:17:8d:3e:f5:b1:37:a7:b9:58:36:2d:
36:21:38:f1:5c:93:7a:1c:6a:12:da:c0:be:c6:d1:a5:b8:47:
82:43:0e:34:c8:7d:a8:ef:93:7e:f7:92:3b:15:f5:2b:33:d4:
f7:9c:6e:ab:6d:8e:ae:1e:20:8c:da:95:5f:0d:f8:93:44:00:
4e:1a:fb:e9:f6:80:9e:79:79:20:d0:a5:45:1c:76:d1:80:58:
8a:00:44:d1:6a:db:e4:28:0e:bd:2c:6f:a9:a9:60:02:90:53:
b0:97:25:a0:e3:30:f6:97:a5:79:61:b5:34:0c:c0:94:df:d2:
f7:b0:1d:32:23:f9:72:a8:5b:62:14:51:68:30:e9:c8:11:e6:
cb:23:34:46:4b:0c:fa:21:c2:05:75:e8:a9:c0:a9:ab:46:77:
25:7e:04:c0:56:80:43:3c:f3:af:61:67:11:76:65:7f:78:de:
30:83:a3:07:33:79:95:11:8c:73:50:91:28:e1:c5:07:5d:07:
5d:8d:7c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:37 2024 by rpki-client on console-ams.rpki-client.org