Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/a303bZYYRt6T3DULDXsPUdvAoOg.roa
File: a303bZYYRt6T3DULDXsPUdvAoOg.roa (raw, json)
Hash identifier: 8xSdXjk2/QAmG2ISDua0gHCdJBNbPg6H4T+6sOf9bhc=
Subject key identifier: 6B:7D:37:6D:96:18:46:DE:93:DC:35:0B:0D:7B:0F:51:DB:C0:A0:E8
Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial: 018BF1367BA2153E3211D93D93998F5B4A59
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/a303bZYYRt6T3DULDXsPUdvAoOg.roa
Signing time: Tue 21 Nov 2023 09:29:21 +0000
ROA not before: Tue 21 Nov 2023 09:29:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.129.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f1:36:7b:a2:15:3e:32:11:d9:3d:93:99:8f:5b:4a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Validity
Not Before: Nov 21 09:29:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b7d376d961846de93dc350b0d7b0f51dbc0a0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2a:aa:8f:eb:34:43:b1:92:89:96:a2:11:05:
67:c2:4b:36:9b:31:71:68:8e:59:4a:4a:ca:77:3a:
ae:33:6c:c8:80:c6:9d:45:b2:5e:7e:74:42:6a:4c:
f6:bc:ab:e8:18:44:e3:6a:9b:17:18:ab:5d:ee:7a:
aa:66:21:ae:9d:50:7c:ec:31:a7:75:f4:d5:dc:54:
db:70:13:a3:c8:8b:d8:aa:fb:14:08:5b:c7:95:a0:
ac:7a:6b:31:65:43:72:bf:fd:b1:59:ea:f3:32:83:
18:92:48:2b:94:77:0f:be:9a:d3:a0:d2:88:e1:8c:
41:76:19:6a:2e:f3:2a:cb:d1:a6:88:8a:03:5e:ec:
b2:88:34:4c:ed:6e:25:a2:84:9f:62:22:f5:eb:94:
cd:fc:76:ec:14:9a:c6:d3:de:1c:8a:00:e0:ef:17:
af:c8:68:1f:2b:4c:76:81:75:49:4f:65:92:64:0c:
74:ca:45:e3:8a:e1:25:4b:7a:48:d3:98:c5:67:b6:
66:c2:16:c6:06:89:2d:8c:56:4e:09:42:a7:14:cf:
f3:8c:dc:89:28:de:49:a5:d8:e9:c5:d2:f5:eb:7b:
c9:1a:59:6f:99:26:c1:62:e5:e4:40:41:45:6b:43:
0f:71:77:1c:12:93:2d:79:ba:3a:a9:df:17:00:28:
00:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7D:37:6D:96:18:46:DE:93:DC:35:0B:0D:7B:0F:51:DB:C0:A0:E8
X509v3 Authority Key Identifier:
keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/a303bZYYRt6T3DULDXsPUdvAoOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.193.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c5:99:70:4f:08:e6:c2:5d:da:eb:00:13:b2:8a:03:63:c9:
da:ae:ee:f3:f1:5a:39:76:e3:5a:65:8f:1e:74:46:55:8f:e6:
da:e1:eb:f0:52:8c:05:14:14:c4:74:5b:e8:f9:6c:98:bf:ff:
92:27:a2:8f:2b:7d:b8:da:d2:06:b2:08:20:6b:a9:49:2a:f3:
16:ae:d3:3e:ba:18:16:35:3d:8c:1a:8f:55:98:ba:be:5c:37:
8b:ea:8e:06:fb:c8:fc:f8:57:72:d2:7d:0d:59:05:34:cd:60:
a3:73:5d:44:c2:e9:47:92:05:c1:00:5c:f3:59:31:39:4c:3d:
8d:0d:ef:d4:a5:3b:7f:b2:e7:c8:76:02:73:6d:fe:8d:31:f2:
a5:45:eb:a0:6b:fb:8c:23:69:d6:21:72:ff:fd:5d:12:db:25:
70:61:e9:bf:55:37:ff:6e:37:b7:a3:3f:33:25:c5:ed:f7:1f:
b5:80:82:bc:b8:7e:63:b7:cc:ed:37:2c:93:97:db:41:54:3b:
7f:2f:5d:53:3b:1f:56:29:97:b2:94:e9:78:4f:cb:f0:be:70:
fb:97:a6:6d:4a:96:0d:07:83:48:2e:ae:a5:ac:c6:ae:ce:1f:
53:e1:45:94:cc:e5:e4:b7:5d:80:85:98:96:ad:48:24:55:91:
4f:61:db:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:57 2024 by rpki-client on console-fra.rpki-client.org