Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/R6Cuh__Efsx9t85-6AiPY75Fi3s.roa
File: R6Cuh__Efsx9t85-6AiPY75Fi3s.roa (raw, json)
Hash identifier: x7tZFV47NvnlYFDGD/CgsXFsodx3EAmK6rFLDnGHyss=
Subject key identifier: 47:A0:AE:87:FF:C4:7E:CC:7D:B7:CE:7E:E8:08:8F:63:BE:45:8B:7B
Certificate issuer: /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial: 0190D8CE54D35F1AEBD6A0F25D47EDD54F84
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/R6Cuh__Efsx9t85-6AiPY75Fi3s.roa
Signing time: Mon 22 Jul 2024 04:58:39 +0000
ROA not before: Mon 22 Jul 2024 04:58:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.87.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jul 2024 16:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d8:ce:54:d3:5f:1a:eb:d6:a0:f2:5d:47:ed:d5:4f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Validity
Not Before: Jul 22 04:58:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47a0ae87ffc47ecc7db7ce7ee8088f63be458b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:fd:c8:80:08:6d:9e:6f:22:7e:88:2a:b4:
d7:e3:9a:c0:ef:88:20:09:9a:fd:83:8c:40:46:43:
e3:55:df:d6:e3:88:7f:f7:f1:c7:f9:03:d8:d5:88:
98:f8:49:84:85:6e:5e:2e:a9:89:1f:e8:bc:4d:e8:
2a:6b:9e:84:2f:29:03:a6:e2:78:07:c5:31:c7:94:
40:ad:5b:7e:db:c4:e1:2b:36:61:d6:d6:2e:2d:45:
bf:74:83:e7:df:d1:1d:e5:27:40:36:43:a8:f3:38:
33:f2:3b:85:60:f8:71:bc:40:e0:40:ae:5d:a8:52:
26:64:93:fa:68:13:4d:1a:45:51:4f:c4:68:3c:ee:
68:b0:6f:cd:b4:32:59:8c:03:98:7b:d2:28:0a:79:
54:83:a3:7d:79:cc:43:6d:80:c4:20:36:a7:3c:7a:
d5:2f:87:bb:9a:eb:60:97:f2:72:d7:07:ab:bd:dc:
e7:f9:c2:cd:d2:10:97:77:13:9b:56:aa:91:cc:66:
7b:f8:81:3b:dd:7d:b3:24:52:2c:a7:fb:7e:46:5b:
dd:9a:8c:5d:e5:0a:37:3e:b4:37:2a:5d:66:38:a7:
13:a8:a0:a8:4b:88:fe:68:c3:6e:ab:76:6c:d7:44:
83:ee:5a:7d:99:fa:f9:c9:2f:b4:d0:fa:73:da:34:
dc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A0:AE:87:FF:C4:7E:CC:7D:B7:CE:7E:E8:08:8F:63:BE:45:8B:7B
X509v3 Authority Key Identifier:
keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/R6Cuh__Efsx9t85-6AiPY75Fi3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.101.0/24
Signature Algorithm: sha256WithRSAEncryption
70:fb:03:f9:d3:a7:93:c6:0b:f6:9a:38:d3:bc:54:8c:6a:57:
84:79:0f:6f:62:0c:9b:04:dd:97:ea:dd:92:0d:75:0b:f5:14:
70:79:72:1b:92:97:b9:65:5e:09:61:98:6a:5c:e0:5d:8d:ea:
e8:9d:2a:71:68:70:05:da:5b:56:6b:34:ff:e4:16:22:31:15:
ee:92:13:28:e6:22:37:d8:1b:51:f0:02:f4:37:c4:20:01:54:
de:89:58:7b:69:5b:c4:a9:3a:e8:99:aa:12:4f:e7:ed:80:c1:
a3:c7:b5:72:92:b1:c2:62:60:ed:b5:91:19:76:ea:9f:b2:eb:
a0:3f:56:e1:ca:ad:02:42:2d:af:03:a5:48:3c:00:77:08:45:
45:3e:59:d9:c2:39:49:1c:e1:d3:43:14:25:7f:39:88:74:64:
53:f3:b4:8d:21:ca:41:bb:a5:4e:f9:4b:ad:84:c8:eb:e6:fd:
e9:11:28:94:9e:ca:3a:44:1e:3e:0e:35:0b:ae:4d:e5:2a:6c:
81:3c:85:70:e7:05:ab:1e:79:d7:fb:e7:66:1e:73:50:d4:9f:
60:04:72:d1:9e:65:f7:71:33:bc:a7:5e:2d:78:1d:1a:43:62:
ad:f3:03:18:9f:88:0c:be:09:04:cc:37:5c:33:2c:53:66:c3:
b1:17:b0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 19:28:08 2024 by rpki-client on console-ams.rpki-client.org