Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2prkrqikH8RNg3oUgckHZOVZmic.roa
File: 2prkrqikH8RNg3oUgckHZOVZmic.roa (raw, json)
Hash identifier: K9QVgRfjz6j466tkjlzVSUbSWN879Y7GlIzXIXeLAmw=
Subject key identifier: DA:9A:E4:AE:A8:A4:1F:C4:4D:83:7A:14:81:C9:07:64:E5:59:9A:27
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01905981D45B350C62F60FC5117114FC13BA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2prkrqikH8RNg3oUgckHZOVZmic.roa
Signing time: Thu 27 Jun 2024 11:43:19 +0000
ROA not before: Thu 27 Jun 2024 11:43:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214966
IP address blocks: 45.131.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Sep 2024 11:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:59:81:d4:5b:35:0c:62:f6:0f:c5:11:71:14:fc:13:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 27 11:43:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da9ae4aea8a41fc44d837a1481c90764e5599a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:6a:c0:e6:96:b2:6c:4d:69:5d:7a:cf:56:
3d:a9:22:83:d2:11:26:e7:14:0e:4b:c0:1f:48:82:
5b:33:78:6c:87:56:5f:af:64:ae:41:60:89:0b:8f:
73:14:01:7a:7a:12:17:77:67:d3:74:9a:3f:f1:04:
e0:db:85:b3:d0:b6:71:16:51:2c:b9:fd:1a:e0:33:
20:26:3e:20:03:f6:ce:e3:ce:fa:88:a3:ab:3b:82:
55:66:53:6b:34:08:72:09:f1:50:1f:8c:79:42:64:
e0:0e:90:93:41:99:d7:76:50:e7:35:4a:7f:73:00:
64:f2:d3:15:e5:92:d8:55:46:48:e0:a1:01:db:15:
9c:ff:41:b9:1a:38:7d:00:22:69:54:7e:2e:19:7c:
57:90:99:0e:90:e0:9d:97:28:c0:b4:b4:da:53:c2:
8a:ec:2c:c7:5d:19:bc:c6:14:95:cd:b0:00:8f:7d:
c2:af:d1:8a:58:cc:24:10:d5:02:6f:6f:d5:e7:ad:
df:21:aa:36:9b:c8:60:12:9b:9a:fa:fc:de:b9:9c:
67:37:ea:ce:7d:ed:05:12:68:5d:03:ab:13:07:6d:
4c:b2:d5:91:57:bc:1f:f4:e9:71:bf:6b:72:f6:ca:
10:ac:e4:ae:cb:e5:dc:fe:c6:3f:c2:09:be:db:eb:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9A:E4:AE:A8:A4:1F:C4:4D:83:7A:14:81:C9:07:64:E5:59:9A:27
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2prkrqikH8RNg3oUgckHZOVZmic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.184.0/22
Signature Algorithm: sha256WithRSAEncryption
98:2b:22:ce:0b:8f:c3:70:76:7a:3f:8d:5a:b6:67:b9:25:98:
d3:6a:16:d8:de:c9:cf:56:72:75:8f:a9:1f:8a:42:d1:a2:c0:
30:7c:a5:cd:20:eb:fc:bb:1a:9c:9a:b7:07:dd:9c:ca:41:aa:
6c:30:a4:d6:7f:01:12:85:18:4b:f8:48:49:5c:ce:5b:44:8a:
10:60:c3:b4:5a:3f:92:cd:7c:c0:a1:4b:c0:94:14:fb:26:79:
a9:bf:26:86:98:d2:9c:1d:54:d0:26:8b:ab:3b:68:47:89:f3:
14:5f:5c:ea:28:cc:28:a8:6e:5d:29:27:d0:5e:7d:38:c8:91:
88:6a:05:bd:26:26:88:0d:92:ba:36:70:76:a8:24:20:84:c6:
7c:2c:12:57:0e:79:58:0f:ec:3b:07:3c:29:70:1c:64:68:2e:
98:64:bb:70:41:98:83:f9:43:4e:d8:10:5b:47:2c:24:d0:46:
ca:5f:a8:05:9d:89:25:ae:fb:13:0d:56:9c:5b:4f:eb:36:92:
66:af:92:ef:56:7b:38:dd:f1:53:8b:72:bf:74:13:8e:42:be:
d7:dc:03:9e:48:b4:00:3b:00:eb:25:93:35:c7:d3:14:97:fd:
a8:90:98:9a:41:68:0d:e8:55:02:a3:bd:d5:33:fd:77:33:f6:
93:a0:50:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 15:22:07 2024 by rpki-client on console-fra.rpki-client.org