Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/yPN9R8tPYr66hvTN0pXjuJn46vE.roa
File: yPN9R8tPYr66hvTN0pXjuJn46vE.roa (raw, json)
Hash identifier: NZaU2GdVX/1li8r0pAu57rCkm7hmoVjEhDQ75jjXakQ=
Subject key identifier: C8:F3:7D:47:CB:4F:62:BE:BA:86:F4:CD:D2:95:E3:B8:99:F8:EA:F1
Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial: 018C8B94DD63EE54B763615FFA6F97E79FF9
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/yPN9R8tPYr66hvTN0pXjuJn46vE.roa
Signing time: Thu 21 Dec 2023 08:53:58 +0000
ROA not before: Thu 21 Dec 2023 08:53:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 45.129.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:94:dd:63:ee:54:b7:63:61:5f:fa:6f:97:e7:9f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Validity
Not Before: Dec 21 08:53:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8f37d47cb4f62beba86f4cdd295e3b899f8eaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b3:08:49:0c:4c:16:bc:29:6f:de:93:c7:20:
f5:20:61:74:42:fb:78:79:cb:ba:38:71:a4:46:7b:
4d:26:62:63:b0:4e:b0:1e:c6:e8:03:dd:9e:91:df:
8e:89:3a:21:00:34:63:ba:bb:14:bb:72:22:fa:0d:
1a:e8:b9:b5:70:53:28:40:df:1a:c1:9e:67:95:a7:
bd:fe:ff:dc:31:ba:e6:2b:da:ba:09:c5:ba:1b:24:
e5:d0:4c:8c:1a:38:d4:61:ed:87:9a:39:b5:ac:f5:
5a:87:80:4a:c4:db:de:11:84:37:61:09:60:a5:17:
a5:9d:d7:65:cf:15:3a:9e:10:2f:65:6d:19:af:2e:
93:33:9c:63:82:4d:9f:5b:91:e7:dd:99:83:cf:57:
e4:76:f4:77:c6:75:df:ed:1f:eb:78:68:4d:e5:61:
92:17:14:4b:c8:d2:d7:b6:e5:05:b6:af:c6:bd:77:
98:59:aa:c2:9d:db:60:41:c1:fe:58:b2:9f:b8:9d:
f7:da:8c:9f:11:9a:19:81:8e:8a:c1:55:b5:ee:21:
b2:4c:d6:4c:53:02:79:c1:06:7a:6b:9e:03:5d:a1:
d2:66:06:3f:16:ce:2d:82:79:1f:1e:7f:f1:15:94:
c3:12:8c:57:f9:ca:59:b8:ad:96:9c:e1:51:65:f0:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F3:7D:47:CB:4F:62:BE:BA:86:F4:CD:D2:95:E3:B8:99:F8:EA:F1
X509v3 Authority Key Identifier:
keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/yPN9R8tPYr66hvTN0pXjuJn46vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.193.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:c7:c3:73:ad:cc:a0:11:75:f4:a2:e1:82:9f:a4:67:01:b5:
a2:15:ff:9c:6c:18:1d:a5:1d:15:28:5a:10:4b:5f:b6:1b:a6:
1a:14:ee:9b:b9:c6:d0:c4:95:66:f4:a9:66:18:f7:cd:95:44:
b1:6a:fa:69:89:06:5d:6a:8a:4a:b8:af:f8:2d:61:fe:f3:87:
60:f7:19:24:cc:60:1b:d4:99:28:cf:6f:e4:14:81:7b:84:59:
49:18:67:26:37:d0:a2:65:84:d1:78:4c:99:b8:74:77:cb:43:
43:37:85:4d:e1:a5:49:e4:2a:a1:a9:aa:93:8f:51:ec:b3:14:
0e:f9:c5:b5:69:f7:e6:80:37:cc:c0:3f:1f:7f:50:ba:7a:e2:
c9:9d:0b:4e:2d:dd:e9:eb:d1:a2:be:31:ab:c0:66:f4:69:16:
f7:e4:69:ef:88:18:34:6e:78:81:65:98:a2:01:eb:51:89:b2:
2a:42:c6:c4:75:32:42:0b:84:46:40:7a:cf:7f:46:ec:dc:40:
5f:9e:fc:1b:0f:da:73:14:ff:18:ae:da:5d:fc:72:9d:e9:b2:
ae:5e:2a:11:91:d9:fa:bb:23:64:4f:ba:0d:d1:af:81:7a:46:
51:a4:bb:fb:b5:c8:ba:d3:d9:03:32:e2:d7:95:05:c5:7e:8e:
a4:86:24:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:57 2024 by rpki-client on console-fra.rpki-client.org