Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/r0gKO2AijBcbBuq9Sb5v5MA5KCA.roa
File: r0gKO2AijBcbBuq9Sb5v5MA5KCA.roa (raw, json)
Hash identifier: A57wnq0uOw96QWbTWKiKPeWCh96j78Ise2BoIdbTDAU=
Subject key identifier: AF:48:0A:3B:60:22:8C:17:1B:06:EA:BD:49:BE:6F:E4:C0:39:28:20
Certificate issuer: /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial: 01857231028C6E4E4219B89471DF2C5E9735
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/r0gKO2AijBcbBuq9Sb5v5MA5KCA.roa
Signing time: Mon 02 Jan 2023 11:14:52 +0000
ROA not before: Mon 02 Jan 2023 11:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208815
IP address blocks: 45.84.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:02:8c:6e:4e:42:19:b8:94:71:df:2c:5e:97:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Validity
Not Before: Jan 2 11:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af480a3b60228c171b06eabd49be6fe4c0392820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d6:2d:01:80:79:62:24:66:90:54:f1:3e:39:
6d:9f:dd:b7:9a:6c:80:4b:36:ae:12:b8:ae:85:21:
39:ce:30:30:f3:2c:7c:3d:8e:2f:be:a1:22:5d:67:
7a:80:c8:6f:4c:81:3b:71:79:49:a4:08:c7:fa:a2:
a1:17:d3:1d:2e:10:b5:2f:b5:36:6b:08:0c:1e:0a:
08:02:95:95:a0:68:74:53:60:9c:c4:11:6f:ba:45:
e1:5c:a0:bd:2a:41:5b:34:d6:1e:e8:00:11:81:9e:
3a:db:3f:4b:25:17:89:8c:00:2f:45:79:fd:17:66:
9b:a2:d9:62:32:e9:72:f8:95:93:2f:48:b3:92:ce:
4f:06:b2:bb:88:d4:ee:e8:cc:14:72:8c:38:01:1a:
6e:07:4c:4f:c5:79:d5:36:18:2a:74:0e:31:78:b1:
3b:19:49:7a:01:71:7c:bb:90:31:c8:ec:d5:1b:89:
29:0e:89:2a:e0:c8:94:84:55:ac:36:da:2e:35:33:
63:67:0a:82:2e:06:27:82:33:77:23:e2:33:84:14:
08:c9:6c:73:48:f2:5e:d6:23:06:4c:61:cb:fe:db:
da:5f:d2:db:4e:a9:51:18:b4:4e:d6:a2:f4:6c:13:
51:1f:ac:56:5a:b7:6a:05:40:90:85:d3:94:bf:d9:
0c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:48:0A:3B:60:22:8C:17:1B:06:EA:BD:49:BE:6F:E4:C0:39:28:20
X509v3 Authority Key Identifier:
keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/r0gKO2AijBcbBuq9Sb5v5MA5KCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.36.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a8:8b:94:93:98:cb:4a:5a:00:bf:4c:f4:af:21:9c:5b:ce:
24:90:34:51:db:3a:b4:fc:c7:3e:df:27:a3:1d:64:00:2b:2a:
68:5c:9b:fb:ce:73:c1:72:c0:3f:3f:10:87:59:b8:66:23:08:
4b:cd:24:bd:a5:1e:b9:16:52:1c:37:c6:c5:e2:16:54:ea:41:
53:be:a6:48:83:15:db:9b:2a:c0:3d:f1:dc:fb:0c:1b:c9:06:
6e:53:b3:5f:66:53:f1:5d:ce:6c:72:bc:30:e8:25:4c:06:d4:
64:fb:ab:81:b7:4e:84:fb:27:73:83:ea:23:a9:a8:49:7d:53:
25:1e:30:05:a0:b2:74:7e:e0:aa:2f:30:de:50:2b:c7:f9:0e:
f4:c5:01:5e:25:12:f1:37:99:4f:f5:e7:e4:23:85:19:ed:92:
f7:6c:1c:be:7c:3c:5b:0a:20:b4:31:be:fc:a4:a2:d9:3f:4e:
3d:5c:d9:97:ff:84:4d:d0:ab:5b:0b:e2:14:55:e9:88:34:73:
e7:4b:d1:3d:4b:09:dc:dc:43:2b:39:98:61:81:a5:06:e2:a5:
ef:2c:65:4a:50:88:38:c1:3e:47:e8:6b:1b:ac:7c:1d:7c:44:
5b:d7:21:94:d9:a4:7e:27:00:60:79:81:77:b8:fe:d5:b1:30:
c0:74:4b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:20 2024 by rpki-client on console-fra.rpki-client.org