Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/_OIiwyFugi8oMF4r8TdHUNZbaV0.roa
File: _OIiwyFugi8oMF4r8TdHUNZbaV0.roa (raw, json)
Hash identifier: F1cZUkGv5DL1SSLJYTUOAqGUyHfL/gsHbBurgSJrv5s=
Subject key identifier: FC:E2:22:C3:21:6E:82:2F:28:30:5E:2B:F1:37:47:50:D6:5B:69:5D
Certificate issuer: /CN=e9be181aabdb195513a26c67b621e2986818d03d
Certificate serial: 018D13D7ECBCFE222D3D1618DE0CED444580
Authority key identifier: E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/_OIiwyFugi8oMF4r8TdHUNZbaV0.roa
Signing time: Tue 16 Jan 2024 19:55:34 +0000
ROA not before: Tue 16 Jan 2024 19:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12722
IP address blocks: 45.15.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 08:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:ec:bc:fe:22:2d:3d:16:18:de:0c:ed:44:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9be181aabdb195513a26c67b621e2986818d03d
Validity
Not Before: Jan 16 19:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fce222c3216e822f28305e2bf1374750d65b695d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:31:62:48:2b:8e:4a:47:ca:41:c5:80:73:94:
cc:6f:4a:e6:62:14:e2:a1:7c:05:cc:c8:37:a0:11:
2d:d8:69:6d:1d:1f:41:53:63:68:5c:be:13:53:40:
11:75:f2:25:6e:90:50:e6:5d:f1:98:a5:9c:3e:68:
a0:98:45:6f:d7:30:58:fc:bb:28:0b:97:f6:e5:ff:
cb:12:ee:59:c1:86:31:d3:ca:b1:54:31:c3:b5:e7:
0d:35:b3:6b:d1:ab:60:5b:f1:42:a9:70:41:4f:ed:
86:2c:36:ef:1d:f0:e9:08:81:12:b8:2d:e5:66:2f:
c7:db:fe:10:30:7f:a1:72:fd:23:f8:fd:00:6d:ae:
0f:50:54:76:16:43:dd:ba:73:22:d4:3a:2b:62:4a:
8e:71:a4:1c:14:3b:53:ca:aa:fe:b1:68:7c:8a:34:
80:58:b4:15:58:ee:38:12:28:c6:d5:85:33:68:5a:
e9:f4:bb:e0:89:3f:2e:93:b2:8e:b2:35:b9:9a:b4:
ee:03:27:c3:e4:01:1d:72:d9:95:c9:6e:ce:9a:3a:
bd:cb:2d:16:e8:35:c6:ad:79:84:99:f1:b2:f6:f1:
19:01:11:1a:aa:89:70:1f:c9:45:0d:ca:cb:4c:fe:
94:35:aa:03:36:68:ae:4b:f2:20:ba:42:89:04:8d:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E2:22:C3:21:6E:82:2F:28:30:5E:2B:F1:37:47:50:D6:5B:69:5D
X509v3 Authority Key Identifier:
keyid:E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/_OIiwyFugi8oMF4r8TdHUNZbaV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.255.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:6c:78:32:67:5e:18:0c:81:17:b0:d3:7a:6d:0d:62:ab:a3:
61:98:8c:68:33:35:60:b4:1f:47:b0:85:3b:83:d7:78:90:35:
36:be:f2:03:3d:d2:b8:45:01:e5:17:18:98:d5:05:81:b2:8e:
a3:e2:ce:bf:ef:e7:9e:f8:9e:20:19:9d:54:eb:69:f5:7a:2d:
b3:4c:fe:4b:f6:e5:3c:6f:9f:bb:67:eb:3a:15:9f:1f:23:ac:
40:e5:9d:53:46:71:bd:8d:20:94:fa:f9:a2:93:3b:44:71:9d:
85:f9:25:12:14:59:97:71:0b:e3:0c:16:63:98:34:12:a7:b8:
75:fb:34:92:d5:14:f4:93:c0:38:53:dd:77:b7:51:c8:6f:ac:
a4:81:b9:91:6e:0d:26:41:51:58:68:5f:60:ec:c4:eb:9f:34:
8a:51:3d:0c:75:7e:cb:7c:7c:1a:85:c1:c4:55:47:b7:c5:3d:
6e:63:21:d5:c5:e8:0c:ac:7f:88:cb:af:b6:82:ab:3a:72:92:
26:46:07:d3:ec:cc:a7:53:bc:e5:2e:44:e8:69:ae:a1:a1:f3:
ce:5a:ba:9c:0a:26:dd:2c:26:4a:b0:fe:93:37:f0:79:12:50:
e2:3c:b0:fe:f2:12:13:f7:b8:c3:f9:2c:6e:f2:62:7b:2f:9d:
c5:79:56:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 12:18:55 2024 by rpki-client on console-fra.rpki-client.org