Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/26yuPc7RsorHEydMsa9FlSfSZ_w.roa
File: 26yuPc7RsorHEydMsa9FlSfSZ_w.roa (raw, json)
Hash identifier: 2a/oGSU6dSh5kgp+FuZ6Hl4e0+qyVSRs5E+Luaj/YX0=
Subject key identifier: DB:AC:AE:3D:CE:D1:B2:8A:C7:13:27:4C:B1:AF:45:95:27:D2:67:FC
Certificate issuer: /CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Certificate serial: 01856F0B40B81774309BFA16FFBCAA945840
Authority key identifier: 8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/26yuPc7RsorHEydMsa9FlSfSZ_w.roa
Signing time: Sun 01 Jan 2023 20:34:46 +0000
ROA not before: Sun 01 Jan 2023 20:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39522
IP address blocks: 45.138.222.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:40:b8:17:74:30:9b:fa:16:ff:bc:aa:94:58:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Validity
Not Before: Jan 1 20:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbacae3dced1b28ac713274cb1af459527d267fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:89:a6:2b:e1:0b:a0:72:8f:36:78:55:45:ac:
9a:0a:1f:5e:80:ac:10:2e:39:0a:52:33:ce:04:ff:
a2:4e:76:bf:16:40:c2:9a:71:75:42:3e:f1:1e:ac:
ca:17:0d:2e:c9:8c:4e:fd:34:60:c5:0f:97:b2:f7:
2f:e2:87:52:b4:b1:f6:8f:7f:fa:a1:48:05:b3:ff:
52:ff:5a:d2:25:ba:72:77:a3:1b:6f:ae:77:f5:79:
3b:5d:97:4f:b1:1f:5c:47:e0:78:fc:42:4a:fb:35:
1a:6c:6a:b4:95:3c:52:38:33:7a:8a:0d:cd:35:d7:
07:bf:a5:00:da:52:05:af:a8:f0:06:be:51:5d:e5:
19:90:a8:1c:68:cc:75:d1:14:b8:45:2a:54:5e:26:
88:a2:69:b1:3d:16:0c:40:57:76:b2:94:f0:28:41:
2a:2d:80:c9:ef:54:2d:61:1a:ca:ec:ed:db:13:71:
4f:86:0e:c9:96:83:49:d4:74:bd:91:c3:9d:ca:e5:
c5:8f:63:5c:00:30:69:b7:92:cb:5f:60:71:db:8b:
5e:48:fc:3c:b2:79:e1:d1:38:10:57:3d:66:71:42:
83:2a:7a:dd:a1:3d:0b:f4:9f:4c:cc:f0:51:c3:b9:
62:f3:fa:c6:8f:e5:21:24:27:18:b3:c2:fc:b7:d0:
33:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AC:AE:3D:CE:D1:B2:8A:C7:13:27:4C:B1:AF:45:95:27:D2:67:FC
X509v3 Authority Key Identifier:
keyid:8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/26yuPc7RsorHEydMsa9FlSfSZ_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.222.0/23
Signature Algorithm: sha256WithRSAEncryption
86:7f:f4:76:f7:c8:69:8c:c0:b8:b7:3a:d8:7b:6e:e5:b2:cb:
b9:06:ac:c0:79:c3:b6:65:4f:ad:cb:b3:5e:26:8e:25:6d:e7:
84:a1:db:80:55:f2:05:fc:90:65:aa:ec:ab:f7:ca:85:90:a7:
f3:f3:c9:5d:90:3f:a2:f5:35:25:28:b1:05:23:b9:1f:e7:6c:
85:7e:6c:8d:19:74:9d:9c:7a:4b:35:47:70:55:0d:50:6b:81:
d8:a8:11:6f:a1:f3:10:36:30:ee:99:fd:5b:50:67:3b:d6:9b:
3e:33:71:e8:7d:ef:cf:d6:d2:91:95:9e:c7:6b:86:f2:3b:ad:
ca:5e:4f:5b:1b:c1:81:66:52:af:6e:43:41:67:87:5d:dd:57:
72:01:7f:7d:dc:fe:5d:05:07:de:90:16:81:71:4d:38:2b:22:
86:3d:78:af:01:ed:5b:73:c5:fd:37:6f:33:1c:f8:21:f0:43:
bd:94:ae:02:7b:8b:85:a3:ff:bb:fe:72:41:80:99:e8:29:c8:
f2:b9:2b:00:ce:07:fc:d1:34:36:ad:84:49:11:42:da:1f:d8:
09:cc:b5:f6:8f:6a:b2:89:4c:0f:d0:81:51:aa:4b:fa:04:fe:
6a:0d:3d:e9:89:55:68:20:10:51:22:12:c5:4a:43:c7:67:25:
15:cc:e2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:11 2024 by rpki-client on console-fra.rpki-client.org