Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/eOW7gyd6hPwJelwl3uojidPWvrg.roa
File: eOW7gyd6hPwJelwl3uojidPWvrg.roa (raw, json)
Hash identifier: GqMF6FUIPvI0RLEPw4qr5XkfGVxtWOvYeQsxQkwoyWo=
Subject key identifier: 78:E5:BB:83:27:7A:84:FC:09:7A:5C:25:DE:EA:23:89:D3:D6:BE:B8
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 018CC8DD95583DDFDFE28D720AA6A15BB154
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/eOW7gyd6hPwJelwl3uojidPWvrg.roa
Signing time: Tue 02 Jan 2024 06:30:14 +0000
ROA not before: Tue 02 Jan 2024 06:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204203
IP address blocks: 45.93.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jan 2024 08:50:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:95:58:3d:df:df:e2:8d:72:0a:a6:a1:5b:b1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Jan 2 06:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78e5bb83277a84fc097a5c25deea2389d3d6beb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:de:e5:0d:72:5c:88:b2:1f:75:b0:cb:b8:
f0:25:f0:5f:7f:e3:a1:e7:9f:5d:72:3c:17:64:df:
46:7e:b4:6f:5f:76:a1:8c:74:df:c2:9c:03:c7:a4:
40:e1:79:38:ff:db:8f:55:eb:63:a3:56:1b:55:27:
b8:10:4b:b7:40:e5:de:6b:b3:95:76:00:ed:d4:3f:
99:de:1b:7b:7f:b1:69:28:b2:df:9e:b0:0c:c3:9e:
ab:18:3e:da:cf:37:f2:64:4b:df:71:ec:5c:e8:39:
81:ce:5b:57:88:74:b6:fd:a9:e8:99:42:e6:37:3b:
ff:cd:5f:03:a8:b5:a0:47:0d:60:7b:2f:b5:88:23:
65:d0:db:3e:67:cc:48:3c:3a:f0:fe:d4:fb:b3:80:
25:d1:af:2e:43:dc:b3:35:e4:f8:d8:8d:f8:fc:30:
b2:52:29:83:2b:53:38:b1:d6:ff:4e:4f:86:d8:85:
db:af:a4:a6:00:c6:7c:29:ce:28:2b:a6:e0:d9:2e:
b9:9b:d6:14:44:37:c9:5c:2a:f8:ca:ab:10:83:05:
8d:a5:a4:26:7b:55:da:2f:05:1e:21:15:40:ac:b2:
7c:9f:4f:5c:fb:38:39:73:05:5f:12:5a:43:ff:2d:
59:c6:e2:5a:b4:7a:25:70:e3:2d:58:1d:1f:6c:18:
8b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E5:BB:83:27:7A:84:FC:09:7A:5C:25:DE:EA:23:89:D3:D6:BE:B8
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/eOW7gyd6hPwJelwl3uojidPWvrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.168.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ef:66:f4:c0:43:70:14:4d:8c:0e:dc:39:d7:c6:d4:c6:eb:
c8:05:a4:4d:d0:8f:13:b3:04:4f:43:2c:6e:1e:9e:9f:51:0e:
0a:54:4d:a3:8e:88:70:eb:98:24:c5:a2:09:bd:75:9c:48:bf:
73:03:e5:60:e5:08:8c:26:45:3f:19:7d:08:e8:d6:d4:27:10:
62:6a:49:92:da:7f:9c:d4:05:7a:84:2b:92:c9:e6:58:ab:6b:
fa:ae:aa:44:5c:81:7a:09:2f:be:03:78:88:20:80:b0:f6:ec:
57:dd:31:2f:f6:43:06:3a:ef:fb:f3:3e:fc:cd:d0:88:6b:78:
1b:0f:6f:59:12:b0:46:26:f6:23:1c:71:6c:bf:c7:93:b3:18:
1d:a1:04:5f:13:ab:ff:29:be:f0:05:c6:59:9c:78:80:71:97:
16:9c:03:ee:24:c0:8d:cf:6d:a5:fb:3b:b8:45:22:c1:ad:72:
a9:80:ce:cf:a3:6e:22:53:b1:59:f5:2c:89:e4:08:3a:e7:47:
07:51:29:1b:8d:68:3b:b6:9b:3a:83:52:2f:76:44:77:7c:02:
ca:fe:4b:e0:a3:e7:03:15:f1:93:35:b6:67:bb:7d:93:11:02:
ff:f2:b4:51:f2:79:d6:d7:83:6f:cf:6d:00:68:c9:89:ce:83:
55:ed:3a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:16 2024 by rpki-client on console-fra.rpki-client.org