Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/4vkjLY98xa1DqLSLrhO8JI-vsKU.roa
File: 4vkjLY98xa1DqLSLrhO8JI-vsKU.roa (raw, json)
Hash identifier: a/HQv1Chh+NPCNhs547lmDRp+IK5vBcgUITGTWOeWZE=
Subject key identifier: E2:F9:23:2D:8F:7C:C5:AD:43:A8:B4:8B:AE:13:BC:24:8F:AF:B0:A5
Certificate issuer: /CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
Certificate serial: 01856C4146566366CA203F3675CE99925217
Authority key identifier: 50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/4vkjLY98xa1DqLSLrhO8JI-vsKU.roa
Signing time: Sun 01 Jan 2023 07:34:55 +0000
ROA not before: Sun 01 Jan 2023 07:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44270
IP address blocks: 45.158.232.0/22 maxlen: 22
2a0f:6c80::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:46:56:63:66:ca:20:3f:36:75:ce:99:92:52:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
Validity
Not Before: Jan 1 07:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2f9232d8f7cc5ad43a8b48bae13bc248fafb0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:11:cc:5f:bb:92:c8:64:87:0b:c5:35:b3:
ff:cc:85:0a:fa:99:77:0a:cb:c0:52:e6:b8:f4:0d:
bb:1d:b4:2f:ae:77:63:6e:04:6e:0c:de:82:2a:7c:
d8:29:e8:c8:9d:b3:54:72:da:90:e5:85:93:85:80:
e2:13:b2:00:60:c4:9e:98:6a:c2:18:9d:85:dc:6e:
89:8d:13:c1:7d:c0:79:cd:6b:1d:56:6c:7e:65:f1:
70:5a:0e:c2:e1:fb:cf:3d:09:fc:38:47:20:a3:56:
7e:68:d1:b0:5c:0e:59:8e:95:79:34:b9:86:00:da:
d2:5f:86:9e:dd:e4:9b:e2:65:81:f1:34:4f:31:d0:
c5:11:3f:5a:3d:dd:11:2a:84:63:e7:ca:4e:5c:ac:
c4:4b:52:1b:9d:8c:ed:44:02:cb:30:64:e4:32:cb:
e5:b4:6f:e9:83:f9:18:d0:b5:5f:90:94:1f:c9:86:
e3:e8:0d:57:b3:a1:df:28:f2:1f:0c:0f:85:55:3c:
5a:11:f4:f6:ac:d1:21:61:fe:e1:c5:9f:c9:c3:da:
24:7c:12:a5:88:10:8d:e3:18:3b:94:3f:83:c0:8f:
cd:30:27:54:da:40:e5:22:52:f8:f7:00:db:a5:f7:
7b:91:80:df:b5:52:f8:d2:cb:6b:99:28:66:b7:57:
c9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F9:23:2D:8F:7C:C5:AD:43:A8:B4:8B:AE:13:BC:24:8F:AF:B0:A5
X509v3 Authority Key Identifier:
keyid:50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/4vkjLY98xa1DqLSLrhO8JI-vsKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.232.0/22
IPv6:
2a0f:6c80::/29
Signature Algorithm: sha256WithRSAEncryption
23:ac:71:49:ed:f4:8d:ce:8e:d7:43:10:77:e4:05:eb:f7:62:
5c:0a:cf:c1:89:cc:1f:cb:d4:6f:41:04:41:26:ed:7d:c9:89:
98:76:38:f7:71:d4:60:a7:0b:9b:51:8e:03:8f:14:b4:83:f8:
29:2c:44:ca:70:ba:ce:ca:3d:b3:53:2f:c6:9f:ca:0b:e9:bc:
ea:be:fb:59:07:ae:ae:b7:36:bb:f6:be:ec:83:68:b0:df:48:
42:ef:ff:89:98:d0:73:8f:69:45:0b:0f:87:09:e6:13:87:5e:
ec:bc:4c:f9:de:01:46:6d:6f:75:bc:b6:1c:a2:15:1c:d1:83:
a4:d7:a4:ad:ac:d1:52:24:9a:e7:36:71:27:c6:ad:04:2e:96:
ca:22:5c:8a:df:e9:2b:ad:e5:e7:df:82:fc:04:f0:77:4d:07:
76:54:62:0c:3b:b9:ea:c2:d7:5d:e7:f1:fc:f1:7b:b3:4b:72:
05:89:ff:dd:48:44:b7:4e:39:6b:79:d6:36:8f:28:ab:ee:b3:
b3:05:6d:7d:51:ba:1b:5a:de:5f:78:b9:e1:f8:38:67:3f:d6:
62:ba:d1:c6:43:73:7c:f3:71:0e:61:25:db:2d:95:3f:a0:8f:
5f:d5:b5:c7:5c:08:19:9a:98:23:54:f5:31:dd:b0:ec:0b:c5:
3e:7f:a7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:40 2024 by rpki-client on console-fra.rpki-client.org