Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/qwVjf0oX43D2zcwrmefJdfwqKac.roa
File: qwVjf0oX43D2zcwrmefJdfwqKac.roa (raw, json)
Hash identifier: IawGFSPpRXgxiSExZ0Fjug8SYZjjueqvnllJsXmzEUs=
Subject key identifier: AB:05:63:7F:4A:17:E3:70:F6:CD:CC:2B:99:E7:C9:75:FC:2A:29:A7
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 018CC86F50EEEAF1FAB06C2A7C5E83AC772F
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/qwVjf0oX43D2zcwrmefJdfwqKac.roa
Signing time: Tue 02 Jan 2024 04:29:47 +0000
ROA not before: Tue 02 Jan 2024 04:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207992
IP address blocks: 45.158.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 14:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:50:ee:ea:f1:fa:b0:6c:2a:7c:5e:83:ac:77:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Jan 2 04:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab05637f4a17e370f6cdcc2b99e7c975fc2a29a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:ca:cc:cc:c3:27:05:ec:40:88:93:e3:53:
ad:b4:06:ff:61:fc:d7:40:e7:e3:40:c7:b8:1e:53:
c8:af:9d:b6:55:6c:43:00:01:6d:f4:a2:2c:8c:3f:
6e:73:50:f5:51:da:b3:09:a3:a5:8d:4b:2b:d5:a1:
f0:57:79:45:35:26:b0:d1:13:cb:1e:3d:55:03:26:
f8:13:d0:18:52:7c:df:8f:fd:c7:37:52:8f:7f:c8:
15:49:fc:53:62:95:72:6a:4f:56:8e:29:cc:bc:f2:
38:0f:d8:3b:0a:c0:0f:cc:3e:e2:5f:f7:47:e6:77:
f5:40:87:cb:0f:ce:2b:ce:fa:70:09:7c:27:2b:7b:
98:1c:bd:44:05:db:df:8b:f5:a0:3d:be:54:9d:e2:
d2:a5:5f:a9:cf:5e:02:f7:88:6d:3c:15:f1:a6:17:
7a:cb:c2:93:d3:78:0f:44:ad:47:08:30:3f:50:30:
26:9e:23:2f:cc:6c:49:2e:c3:e8:dc:87:1f:2b:e6:
f2:02:33:94:ec:6b:dd:67:4e:64:04:64:6b:42:35:
7e:68:9a:c3:b6:13:d5:14:be:09:8e:8e:2a:19:0a:
fc:d7:9f:c4:ac:d8:72:50:eb:cd:38:e6:1b:1c:68:
e5:be:8a:93:00:72:dd:97:d9:d7:f6:39:a2:33:21:
63:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:05:63:7F:4A:17:E3:70:F6:CD:CC:2B:99:E7:C9:75:FC:2A:29:A7
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/qwVjf0oX43D2zcwrmefJdfwqKac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.77.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e6:49:ac:c1:f7:d0:61:4b:10:9f:79:af:c8:b7:2c:b7:3e:
08:b4:87:0d:8f:f0:a8:f4:2f:86:8e:06:70:7e:a7:dd:3b:be:
b7:e0:fe:4d:aa:26:f8:d6:b7:91:3c:ad:c6:eb:f7:59:2c:21:
93:5f:e7:ad:e7:7f:cb:45:4b:bb:48:88:14:8f:76:52:5b:c6:
31:95:cc:57:75:ab:b9:ce:c5:ad:dd:e0:f1:ef:05:66:ea:bd:
6c:b6:21:61:94:79:c9:cf:0c:5c:27:fe:77:79:9a:be:22:94:
f9:29:d9:af:76:f2:84:16:09:05:05:87:3a:b7:0f:b2:6c:18:
07:9b:34:3b:81:4d:e9:08:e5:e3:4b:29:7c:96:da:fb:8c:08:
6c:c2:28:12:88:17:74:5a:fb:6d:34:67:22:fb:92:95:47:31:
55:a5:e2:8b:6f:87:29:4f:94:6b:15:03:5a:10:82:c4:87:8b:
ea:6b:a4:9a:cc:f1:c8:bb:40:50:db:69:ac:34:20:7e:73:be:
52:4e:13:23:56:40:8d:0e:5a:1f:d4:b1:24:9f:7f:93:16:8e:
42:ad:03:32:07:93:66:08:17:3b:78:4f:a0:4a:95:7d:59:4b:
d5:a3:44:ea:5b:4b:7e:48:07:35:3c:4d:12:d7:5b:bc:3b:3d:
c3:a3:4f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 26 18:48:38 2024 by rpki-client on console-ams.rpki-client.org