Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/2CFlRd3SftzMwTNRW0mEfJ3QLfE.roa
File: 2CFlRd3SftzMwTNRW0mEfJ3QLfE.roa (raw, json)
Hash identifier: EaHvHqiyPS6Y/S1055HSWnS5R24hYTwQ8Bt0EXarPMc=
Subject key identifier: D8:21:65:45:DD:D2:7E:DC:CC:C1:33:51:5B:49:84:7C:9D:D0:2D:F1
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 018CC26CFBAD7406B943EA96935C78783E9D
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/2CFlRd3SftzMwTNRW0mEfJ3QLfE.roa
Signing time: Mon 01 Jan 2024 00:29:31 +0000
ROA not before: Mon 01 Jan 2024 00:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208619
IP address blocks: 45.92.132.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 26 Mar 2024 11:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:fb:ad:74:06:b9:43:ea:96:93:5c:78:78:3e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jan 1 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8216545ddd27edcccc133515b49847c9dd02df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:52:a9:6b:c3:06:15:09:ba:6b:00:b9:90:4b:
5e:35:03:4a:c2:86:80:93:fc:04:38:ce:45:26:d0:
4a:e7:7c:42:d9:f8:13:ff:03:21:ad:64:66:79:79:
2c:c5:08:03:3f:02:62:10:69:42:18:e3:73:d9:ba:
cf:34:f9:ab:a0:ad:1a:6d:cf:50:df:a7:7d:c9:c2:
93:4b:6c:bb:ec:49:be:04:2c:44:7f:e0:ec:42:85:
2a:3c:03:18:ea:cd:e5:05:cc:05:c6:86:c1:43:05:
ea:32:51:eb:c0:14:f7:74:27:32:c2:88:89:d9:02:
68:aa:0d:0a:e1:ca:82:68:5c:ca:dc:ea:64:b9:f7:
4a:a7:f7:cc:cd:88:71:ee:09:b4:06:24:d0:9f:b5:
18:b4:0e:4b:ff:fc:77:3b:9c:f9:2a:95:2a:16:33:
d3:e9:da:33:7f:25:13:c0:f7:0d:70:03:c5:78:12:
4a:59:85:33:e9:c7:8c:74:fa:8a:e7:bc:33:81:42:
6f:73:a4:fd:57:c2:7f:46:9e:60:e5:1b:0d:90:ea:
9d:6f:27:77:65:5c:a2:4c:4a:ef:e5:51:ab:c9:96:
db:d7:4d:b6:0d:29:76:e3:f1:d8:53:3e:d2:9e:d5:
2c:9b:f6:73:6b:af:80:52:5b:57:0b:ac:9e:0e:26:
ac:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:21:65:45:DD:D2:7E:DC:CC:C1:33:51:5B:49:84:7C:9D:D0:2D:F1
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/2CFlRd3SftzMwTNRW0mEfJ3QLfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.132.0/22
Signature Algorithm: sha256WithRSAEncryption
11:80:99:6d:73:05:d2:d5:4b:bf:25:78:f7:8f:46:4b:56:8b:
d0:ee:7a:6e:58:4b:ec:70:ba:c2:de:d4:45:bf:f5:f5:0e:de:
28:39:95:ba:98:41:7f:16:4e:01:88:e0:84:e5:81:7c:f7:da:
1d:f1:e9:c1:11:84:b4:c8:4d:79:3b:c0:cf:22:43:32:37:55:
67:8d:40:d4:5d:72:e0:94:d2:34:b1:9d:63:81:78:2a:4c:de:
eb:cf:0e:fa:13:57:fd:8f:a4:c0:01:f1:d6:47:ce:7b:ac:40:
2a:f2:8a:4f:70:e0:14:1c:05:f4:15:50:45:2c:fc:d1:0c:4f:
a1:09:b4:b0:40:63:e8:d9:86:81:27:bd:1a:e9:8a:67:7a:d2:
32:ea:ff:a0:2f:a2:ba:44:39:24:23:b5:68:23:3f:43:85:69:
1f:57:38:12:f0:e6:d3:aa:d3:12:a4:c0:f3:d0:a9:50:53:71:
09:c5:d8:d1:52:d8:39:3a:55:97:45:c8:fa:79:da:4a:94:3d:
f3:29:59:bf:51:77:58:e8:0c:b1:f2:2e:fa:ac:db:9f:b9:e1:
b4:0b:10:b6:7d:8c:d2:fa:fa:69:f3:5c:90:12:32:c2:94:87:
2c:ab:bd:67:c6:52:f5:87:8f:ab:a9:b8:96:86:3c:6a:d9:6d:
77:d8:a2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:47 2024 by rpki-client on console-ams.rpki-client.org