Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/8McayFgLf4vJuuEEKkmpmjGG1zo.roa
File: 8McayFgLf4vJuuEEKkmpmjGG1zo.roa (raw, json)
Hash identifier: B5LrwNDa38JC7FLaHvp6DJhpVwn5env0NuDYfFVh3HA=
Subject key identifier: F0:C7:1A:C8:58:0B:7F:8B:C9:BA:E1:04:2A:49:A9:9A:31:86:D7:3A
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01857D3FA8593F36C7F4C29ABBBAD1E55756
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/8McayFgLf4vJuuEEKkmpmjGG1zo.roa
Signing time: Wed 04 Jan 2023 14:46:41 +0000
ROA not before: Wed 04 Jan 2023 14:46:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201364
IP address blocks: 45.80.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Jan 2023 12:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7d:3f:a8:59:3f:36:c7:f4:c2:9a:bb:ba:d1:e5:57:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jan 4 14:46:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0c71ac8580b7f8bc9bae1042a49a99a3186d73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9c:27:75:05:65:eb:9b:9a:0d:82:a2:09:8a:
b4:82:39:9f:c5:3e:c1:c2:6b:b6:34:ad:f4:ee:3b:
23:6d:3b:b3:b2:ea:00:d4:08:55:ad:20:23:43:a8:
af:12:ce:6a:ea:3c:eb:47:ef:ed:ad:59:12:d4:79:
72:75:38:e6:8d:b8:6e:54:bc:88:fe:12:5f:61:cc:
06:44:44:9c:93:62:64:a7:94:d1:bb:b5:77:9f:c1:
b3:ae:64:17:d0:1d:5d:43:83:13:ee:f6:33:48:29:
92:bc:ae:b0:8f:06:1f:df:c5:ef:78:c1:22:39:11:
22:c8:57:f9:d9:d1:c9:03:03:1b:3f:d0:a5:e3:b4:
37:c4:55:82:3f:bb:ed:f2:d4:6f:47:94:ed:c8:18:
58:03:b1:f8:25:1b:0f:cf:9d:47:f6:14:ad:77:fd:
a7:c5:80:82:4e:75:bf:90:0a:d0:20:a6:cd:a7:f2:
f3:41:52:13:a9:9a:fa:9d:29:1f:09:05:e5:7d:67:
76:6b:01:90:59:08:a1:69:a2:4f:30:b2:2a:a2:7f:
e0:c3:69:be:2b:57:59:24:b7:4a:20:c9:af:c6:01:
cd:87:fd:35:8f:69:bb:30:af:e3:0f:da:19:ff:ed:
70:af:fa:a2:6e:70:b1:da:ca:32:f6:9c:cd:26:e6:
71:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C7:1A:C8:58:0B:7F:8B:C9:BA:E1:04:2A:49:A9:9A:31:86:D7:3A
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/8McayFgLf4vJuuEEKkmpmjGG1zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.31.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:94:95:76:1c:34:79:b7:ef:c4:09:3b:45:dd:f2:54:8f:11:
71:5a:71:5a:c7:92:a3:0d:d4:b5:c6:ec:40:c9:a4:c9:69:cc:
61:b9:86:73:d6:ed:87:40:49:63:60:73:a5:3b:87:22:a3:e0:
a3:0e:11:89:43:d9:c6:01:78:33:77:97:45:37:fa:ae:e3:a5:
7a:60:51:07:b5:45:40:45:16:97:fc:16:6c:8a:66:3a:1a:a6:
af:d1:1a:6f:08:65:c7:df:d9:6f:87:aa:53:de:4a:b6:82:f2:
57:cc:a2:25:64:f9:13:f3:33:74:d9:8c:43:f7:c9:0d:19:ef:
0e:39:91:7a:83:d8:bd:d3:11:b5:91:f3:70:f3:93:c3:a2:3f:
8e:e7:6d:8f:a8:cc:1e:24:74:c5:03:e2:37:6c:de:ad:9f:a8:
b5:0f:1e:ba:ca:12:a3:5b:13:98:13:c3:4e:1d:6e:5c:8c:f1:
00:b6:62:2e:80:0a:7f:10:c4:35:c0:2f:c3:f9:c3:5e:3d:29:
6a:70:f7:b4:d8:a6:df:47:2f:d8:e2:a5:84:a2:d2:80:72:16:
c2:1f:75:97:ae:d3:98:35:a1:81:4c:b2:09:37:05:3b:dd:2b:
03:97:32:31:db:c9:84:56:08:c2:b4:cc:7e:f4:e1:d6:94:62:
e2:9d:c7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org