Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/TfnPXebdD8n9A0tTynoFbdBlf6M.roa
File: TfnPXebdD8n9A0tTynoFbdBlf6M.roa (raw, json)
Hash identifier: K2lpGYnT0UDFxQu3HQ4eFTjqYWe0ffQpva/Hji0rq8U=
Subject key identifier: 4D:F9:CF:5D:E6:DD:0F:C9:FD:03:4B:53:CA:7A:05:6D:D0:65:7F:A3
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 018BA2BB263B34532E62721625CD7DE7183B
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/TfnPXebdD8n9A0tTynoFbdBlf6M.roa
Signing time: Mon 06 Nov 2023 03:44:15 +0000
ROA not before: Mon 06 Nov 2023 03:44:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204203
IP address blocks: 45.93.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a2:bb:26:3b:34:53:2e:62:72:16:25:cd:7d:e7:18:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Nov 6 03:44:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4df9cf5de6dd0fc9fd034b53ca7a056dd0657fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:e9:ad:5d:6c:8b:78:0a:95:31:e3:57:c8:
b0:d4:30:96:a7:96:37:dc:59:3b:28:3e:c1:d4:bd:
cd:77:8d:54:da:f6:8c:cf:b1:48:98:34:6f:f3:45:
cf:ec:86:87:06:75:26:5a:34:1c:59:f6:40:1f:85:
7c:88:2a:aa:b5:97:21:04:0c:36:51:c8:68:01:79:
e9:6c:7a:64:ed:24:39:34:83:b9:54:63:4e:f2:13:
f0:77:90:60:f7:fc:c9:8b:4a:ff:38:23:6e:9d:3c:
87:3e:f4:45:fd:46:f3:b7:05:ca:74:c5:fb:53:0c:
bb:cb:7f:fc:3e:97:74:09:f7:22:e7:0c:33:17:74:
a2:8c:85:3b:f3:f6:75:d3:e8:91:0e:18:7e:a1:d2:
91:31:81:63:5d:8a:fd:98:61:9e:b3:af:30:d3:59:
46:59:1e:9c:b9:b5:44:b3:7f:a8:74:90:88:7f:d8:
c2:c6:0d:22:6c:54:06:7b:ce:ab:09:76:99:65:ce:
65:2a:ab:42:4e:0c:95:63:74:54:cc:c2:dd:23:d1:
b6:cc:13:41:e5:9a:59:be:40:98:7c:7f:3e:84:3f:
f8:e2:1d:99:10:e8:2c:e0:12:f5:4e:42:7d:f9:a7:
27:b1:99:75:58:92:d0:e7:0b:ad:00:76:2b:36:2f:
16:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F9:CF:5D:E6:DD:0F:C9:FD:03:4B:53:CA:7A:05:6D:D0:65:7F:A3
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/TfnPXebdD8n9A0tTynoFbdBlf6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.168.0/24
Signature Algorithm: sha256WithRSAEncryption
94:cf:c3:43:1b:6a:b1:d6:d7:f7:41:9b:7d:16:98:37:43:b2:
f2:53:da:7e:b4:9b:2f:a1:15:eb:2c:fc:0e:75:66:be:3f:52:
fc:8f:d7:c7:48:f7:86:f4:d6:99:1f:2d:aa:5f:dd:b5:f6:f0:
a4:4c:1e:e7:1b:4d:4a:2f:14:f5:95:27:33:1d:57:33:69:fb:
da:12:ac:fc:7f:51:be:b2:24:0c:cc:00:6a:4b:90:2b:ca:e3:
11:16:3a:23:30:c0:1e:74:13:1f:39:7f:a7:6c:75:0e:d1:20:
7c:6a:f9:7e:13:0e:bf:ca:cd:96:ec:76:2f:9c:63:b8:05:0d:
06:72:43:c6:9a:21:af:ec:44:ba:4a:17:ad:55:2a:d0:dc:1e:
b8:89:b8:85:9e:9c:55:b5:3b:3d:32:c5:5b:68:85:3e:30:e3:
0b:51:5f:86:76:56:b3:15:01:6c:c6:1e:f7:ae:eb:96:af:9b:
f5:06:4a:60:85:74:fb:a8:a3:f3:42:a7:47:29:83:dc:00:69:
20:9b:98:bb:bb:6d:9a:ca:67:70:08:73:4e:d3:ee:9d:d5:6b:
53:41:f4:87:85:d7:ab:07:2e:f6:32:4c:59:48:fb:1d:e0:89:
af:a4:c3:e6:63:54:ba:01:5d:a6:97:58:cd:d3:9e:12:e2:59:
bd:18:4e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:13 2024 by rpki-client on console-ams.rpki-client.org