Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/T0dOZJG2LT2YJwwv4-6CJ5P6bMU.roa
File: T0dOZJG2LT2YJwwv4-6CJ5P6bMU.roa (raw, json)
Hash identifier: yckKJqXTESd7/GhT3pYBU1/+YHT/fHcr7NatND6mx8g=
Subject key identifier: 4F:47:4E:64:91:B6:2D:3D:98:27:0C:2F:E3:EE:82:27:93:FA:6C:C5
Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Certificate serial: 01864F9466FEC5C7870CBE0B758C8A063F0A
Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/T0dOZJG2LT2YJwwv4-6CJ5P6bMU.roa
Signing time: Tue 14 Feb 2023 10:59:30 +0000
ROA not before: Tue 14 Feb 2023 10:59:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213030
IP address blocks: 45.135.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:94:66:fe:c5:c7:87:0c:be:0b:75:8c:8a:06:3f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Validity
Not Before: Feb 14 10:59:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f474e6491b62d3d98270c2fe3ee822793fa6cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:65:83:ef:3b:94:ff:9c:cc:9a:d4:93:4a:ab:
4e:f2:3f:cb:b5:63:4e:ea:e8:65:9e:6b:ee:eb:e2:
f2:68:f1:05:11:11:a6:0b:d5:3a:0f:6a:cb:a7:ad:
41:41:bb:50:30:f5:1f:68:4b:e6:0f:22:5d:1b:af:
01:22:90:18:2a:5c:9b:fc:53:de:bc:73:85:4b:9c:
2b:f7:4b:8b:9b:71:29:41:2a:f2:f0:45:ed:dc:bc:
a9:34:27:f2:97:69:4a:04:56:60:79:08:60:11:b8:
19:61:e9:8b:1f:b2:a4:0e:37:39:40:3a:bc:09:46:
36:2c:75:e4:c1:a4:7f:4a:8f:c5:31:9e:cd:63:38:
a3:25:17:d7:eb:4b:d4:27:ce:7c:83:22:8e:d8:db:
02:f7:06:9a:39:45:ee:db:49:1c:eb:27:9e:97:65:
d5:97:b8:8f:17:34:65:38:9f:e9:dd:61:51:86:ae:
1e:81:1e:95:26:5c:9b:da:17:42:b4:ce:62:0a:ff:
24:91:d2:f0:2c:08:4b:47:7d:b2:b4:a6:58:0d:f2:
27:d7:9e:68:61:92:32:41:19:d9:36:6a:1b:de:7f:
ed:4d:e3:3f:e5:13:12:2f:57:fe:5b:20:e8:8a:1f:
7f:c2:f7:d2:15:d0:fa:03:64:c4:66:b2:f1:ff:fe:
6c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:47:4E:64:91:B6:2D:3D:98:27:0C:2F:E3:EE:82:27:93:FA:6C:C5
X509v3 Authority Key Identifier:
keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/T0dOZJG2LT2YJwwv4-6CJ5P6bMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.193.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f2:bc:3b:08:c3:90:c6:0c:cc:08:23:fb:c9:cd:2c:25:a0:
de:57:6d:3c:b6:d5:aa:3a:6b:6b:85:51:f2:16:bf:7d:97:f6:
be:73:6e:2c:f5:6c:2d:23:92:02:e7:50:e0:ef:e8:c5:06:a4:
af:a0:d9:26:da:fe:77:b2:6c:e6:8d:f6:9f:d8:ec:22:6d:57:
21:79:d2:b8:93:7a:f2:d7:57:2b:dd:19:30:28:2b:d6:9d:36:
a3:50:cb:15:55:95:36:2a:fb:4f:cd:fe:89:d1:3d:d5:67:a7:
4f:13:19:13:fe:27:7b:01:c5:50:5d:b8:f1:15:33:ea:91:29:
40:ae:0f:cb:dc:ee:28:8a:a6:e2:27:45:15:82:b2:32:fd:e3:
d1:52:f7:39:7c:a9:d0:5c:9f:75:07:7d:27:a9:b6:f6:3d:ae:
13:b7:ef:e5:97:90:65:8b:1a:1d:15:7b:f4:9a:f2:6a:0d:ca:
86:0e:ad:6e:76:84:7f:f3:3e:7e:30:5c:2c:7b:73:f6:33:ec:
ce:09:74:52:02:81:52:b3:f6:79:30:87:07:1c:7d:8d:bf:f1:
8d:41:e3:3b:e4:32:08:31:05:62:ce:f9:42:17:09:4a:95:0d:
99:41:c5:10:3e:71:57:f3:c1:0a:cd:e3:69:e6:bf:9b:0d:e7:
95:3c:26:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:41 2024 by rpki-client on console-ams.rpki-client.org