Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/1-HlQJAyK9JVL4YkRgK_gjroGMaM.roa
File: 1-HlQJAyK9JVL4YkRgK_gjroGMaM.roa (raw, json)
Hash identifier: n2C+2xJuRbozjJ1CyQgAXWpvPiH18onxESpeYSpCplk=
Subject key identifier: F8:79:50:24:0C:8A:F4:95:4B:E1:89:11:80:AF:E0:8E:BA:06:31:A3
Certificate issuer: /CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Certificate serial: 0185CA0ECEA967961AE3704E35D21ABFF249
Authority key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/1-HlQJAyK9JVL4YkRgK_gjroGMaM.roa
Signing time: Thu 19 Jan 2023 12:44:06 +0000
ROA not before: Thu 19 Jan 2023 12:44:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57829
IP address blocks: 45.93.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ca:0e:ce:a9:67:96:1a:e3:70:4e:35:d2:1a:bf:f2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Validity
Not Before: Jan 19 12:44:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f87950240c8af4954be1891180afe08eba0631a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ef:5c:ef:bc:87:0c:01:43:2f:6b:c1:8c:28:
a4:35:de:28:d4:d5:c5:62:1f:54:8a:09:7b:9e:54:
2c:ff:d0:30:d6:c9:95:27:41:68:48:08:63:86:42:
6b:e4:d3:41:07:ce:0f:0e:75:17:c2:30:e0:21:77:
1e:56:5b:80:74:fd:1b:da:a5:82:e1:d2:9b:d0:84:
60:50:a6:a4:a2:5d:cb:c2:b2:06:13:3c:10:d9:b9:
04:65:ea:93:dd:03:df:b7:d0:d4:88:a2:9a:5e:54:
2c:fd:cb:7e:38:3e:cf:0a:77:23:e4:66:23:96:06:
b9:37:06:7b:2b:fb:f5:ca:a1:ce:56:fe:6a:1b:7f:
52:f6:b4:fd:16:2c:61:d0:3d:a4:9a:fb:8c:55:76:
47:e8:ef:d9:30:c1:bf:00:17:e2:6e:9b:58:73:6a:
84:c3:25:33:2d:d3:56:7d:01:19:e7:25:70:ef:e8:
86:e9:7c:ff:9e:21:e6:e0:04:d4:8d:c2:ea:dc:92:
f4:43:15:e6:61:d7:7f:52:e0:36:7a:1b:ce:a7:a7:
40:fc:fc:37:da:23:30:b1:88:25:59:e2:68:32:0c:
27:08:4a:e0:b6:74:31:17:95:4e:b1:38:63:42:fb:
60:8c:aa:97:d8:7d:44:24:c7:9d:8f:d0:b2:61:2c:
a8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:79:50:24:0C:8A:F4:95:4B:E1:89:11:80:AF:E0:8E:BA:06:31:A3
X509v3 Authority Key Identifier:
keyid:4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/1-HlQJAyK9JVL4YkRgK_gjroGMaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.140.0/22
Signature Algorithm: sha256WithRSAEncryption
84:37:fe:61:01:67:55:b1:d4:1e:ed:6c:eb:ec:87:69:d8:4b:
3e:fe:c1:25:31:9d:39:e4:de:09:30:51:5d:67:74:73:e2:af:
11:bb:c9:25:07:17:5a:1e:5d:b8:e2:c1:bb:5d:cf:6a:0c:9a:
e1:ef:66:63:e2:0a:7b:fe:42:c4:8a:cb:b0:0f:03:ca:2a:06:
4c:ff:63:e5:82:a0:2a:23:c7:77:d6:d4:4f:97:19:1e:71:2d:
1b:b2:1b:80:56:ed:97:fb:0b:e8:05:09:fe:15:ab:06:91:5b:
3b:cf:cc:da:db:11:84:ef:5e:06:29:0d:c8:ba:e5:45:7c:ca:
b4:45:35:d7:49:2b:a1:1f:d7:df:65:18:23:63:94:e3:a2:60:
b9:09:0e:ba:8f:9a:82:9d:b5:50:23:58:28:62:46:8c:f3:d1:
79:da:c6:93:3c:9b:b6:af:7c:74:b2:36:29:49:b8:ee:a9:f9:
7e:cc:ca:a1:a6:4f:d8:9f:55:a9:2e:63:b3:06:3a:8d:3d:87:
64:70:5d:bd:ec:2c:fd:7a:5a:cd:e6:2c:ff:48:9f:e7:b2:bc:
7d:39:15:48:44:20:83:54:a0:9d:72:d1:72:42:1d:6d:51:8f:
19:45:8a:4a:f2:5d:47:1c:85:8f:91:85:4c:cf:2b:0c:5c:78:
29:9b:3c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:20 2024 by rpki-client on console-fra.rpki-client.org