Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/fRuTrE_omLCHnHOEjBMOP1kF72M.roa
File: fRuTrE_omLCHnHOEjBMOP1kF72M.roa (raw, json)
Hash identifier: RL9KYEovHA+HILeGnUvXP4TmtEGLUn0y57sJTDqkY2E=
Subject key identifier: 7D:1B:93:AC:4F:E8:98:B0:87:9C:73:84:8C:13:0E:3F:59:05:EF:63
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 0191041BECBD9B87E985A71668A5BDEE0F27
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/fRuTrE_omLCHnHOEjBMOP1kF72M.roa
Signing time: Tue 30 Jul 2024 14:47:04 +0000
ROA not before: Tue 30 Jul 2024 14:47:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206596
IP address blocks: 45.93.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 12:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:04:1b:ec:bd:9b:87:e9:85:a7:16:68:a5:bd:ee:0f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Jul 30 14:47:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d1b93ac4fe898b0879c73848c130e3f5905ef63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:cb:f3:c0:21:98:0e:3b:74:ce:c4:3e:d2:
93:07:86:20:b1:0c:93:3b:c3:82:0f:02:89:08:35:
ed:be:c1:aa:05:e1:af:c3:79:36:4e:ac:b1:0d:09:
b1:18:4f:8a:b3:2d:67:69:ff:ff:09:44:3a:d2:62:
2e:6f:75:14:ad:fa:0b:7d:5c:5b:33:46:5f:fb:a9:
cc:e5:6a:c6:09:1f:08:12:af:c8:dc:c4:e3:0c:06:
6c:7e:44:f8:21:af:1a:93:cd:d5:df:6c:13:51:53:
a6:9a:49:ab:32:3b:2e:8f:1d:75:65:f4:d7:dc:b5:
8c:7f:e3:c1:5d:f7:e5:71:9c:bd:78:3c:33:05:84:
2a:e8:db:8a:f8:6f:be:54:ac:c7:21:8c:5d:18:3f:
41:e1:a5:a7:d5:c6:16:6c:46:e1:a3:5a:fc:f0:60:
dd:af:a1:9a:1a:31:a5:27:4d:83:c9:1e:20:d7:b0:
3b:ff:9f:3c:fc:5d:94:9c:82:fb:d3:27:bf:b7:31:
61:f2:be:8d:fd:61:95:75:c6:21:2d:da:0f:ea:0a:
5e:d2:96:cf:d5:70:3d:18:b5:89:d2:21:06:d0:87:
45:36:85:7e:4f:bb:35:f7:e2:3c:77:36:e3:0c:c0:
4c:1a:29:c5:bd:ed:4d:ee:4a:2b:26:21:cb:01:20:
6e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1B:93:AC:4F:E8:98:B0:87:9C:73:84:8C:13:0E:3F:59:05:EF:63
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/fRuTrE_omLCHnHOEjBMOP1kF72M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.168.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:d6:ca:f1:d2:e1:bd:1c:85:25:1e:73:9f:b3:65:68:b4:fb:
a8:05:1f:39:84:30:89:92:2e:1e:c7:c4:ae:23:69:0e:47:64:
ac:e6:33:f2:a4:53:2b:18:1f:d8:f8:0a:3c:41:1e:62:9c:89:
a6:60:9d:66:c3:10:ac:01:2f:1f:ed:8d:cd:53:82:48:4b:eb:
fb:dd:57:cc:c4:b8:54:e1:f5:d5:99:e1:74:ff:e6:f9:54:d2:
af:b3:81:d9:63:21:e8:ad:4c:1c:4a:fd:9a:7b:9e:20:11:a9:
b3:ea:56:79:7d:6a:2d:f1:53:f6:07:88:57:bb:fa:b5:d0:77:
ab:f3:11:c7:5f:4f:63:8d:b1:56:96:c1:76:b7:63:3c:3c:99:
99:dd:85:ec:0f:c2:4d:d7:5b:1d:5a:b0:fb:21:ea:6b:db:2f:
9f:a8:fc:17:5b:4c:31:7f:56:cd:8f:53:b0:93:f1:40:25:89:
61:5c:c3:62:b3:90:0d:11:86:57:dc:0c:84:f3:18:cf:1f:f5:
a1:2a:9e:78:2e:3b:a8:7f:54:76:4a:29:6b:6d:f8:c8:ec:cb:
88:fa:1e:41:f2:6c:4b:22:dd:ad:d0:07:22:6f:3b:69:01:d5:
5f:7e:0d:10:cf:8b:81:89:af:71:f3:f5:93:35:37:b7:f0:15:
74:72:75:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:07 2024 by rpki-client on console-fra.rpki-client.org