Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/DkaMLTJFZ9RGs_KVYJeNo5WJaUk.roa
File: DkaMLTJFZ9RGs_KVYJeNo5WJaUk.roa (raw, json)
Hash identifier: +oATNWQYkQ8TJo+kg3GClIbTMcJ7qF75fpnWlCb4uoE=
Subject key identifier: 0E:46:8C:2D:32:45:67:D4:46:B3:F2:95:60:97:8D:A3:95:89:69:49
Certificate issuer: /CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Certificate serial: 0188F4F7BE430AFA786DC16D980CBEA39FDF
Authority key identifier: 3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/DkaMLTJFZ9RGs_KVYJeNo5WJaUk.roa
Signing time: Sun 25 Jun 2023 23:50:56 +0000
ROA not before: Sun 25 Jun 2023 23:50:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.93.21.0/24 maxlen: 27
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f4:f7:be:43:0a:fa:78:6d:c1:6d:98:0c:be:a3:9f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Validity
Not Before: Jun 25 23:50:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e468c2d324567d446b3f29560978da395896949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:48:4f:ac:ec:d9:40:31:7e:0b:24:6d:06:
ce:55:73:51:b7:c8:f7:38:05:ec:93:d5:37:23:a7:
64:52:cb:0c:eb:ba:c7:83:7a:e0:8e:9a:a3:d6:d7:
8b:4b:c3:71:f8:4e:26:d0:00:9b:d1:4e:e2:22:34:
cd:97:ba:d2:07:00:04:29:43:43:0b:5b:a2:f8:74:
08:16:eb:74:f1:e6:77:61:52:b4:6b:5c:eb:8e:f5:
22:e8:32:2f:08:8c:17:b3:af:36:64:43:e3:19:44:
8b:4c:a3:ef:a3:fc:9a:fe:aa:5f:44:b3:ab:71:32:
9c:d8:ff:ff:9a:d3:58:e1:5e:bc:e3:2f:e3:92:ad:
5f:8f:ca:18:f6:9b:8a:e1:ea:50:5b:88:c6:6c:90:
f9:12:34:17:80:03:89:54:4d:16:5e:a5:a9:50:b2:
d8:c3:84:01:a1:d3:d5:b8:23:29:09:76:ea:0a:c5:
d9:00:ef:89:04:4c:07:7b:35:2a:25:eb:c1:b5:48:
66:3f:85:53:02:2c:5b:f6:83:5c:bb:8b:11:41:11:
aa:1c:d3:8e:f7:f8:8b:a4:cf:ea:c9:53:ec:e2:dd:
5e:95:91:08:24:c1:03:4f:98:4d:ff:f7:ed:f2:c7:
87:e6:da:a8:fe:ba:77:e3:dc:02:18:6d:80:32:f5:
22:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:46:8C:2D:32:45:67:D4:46:B3:F2:95:60:97:8D:A3:95:89:69:49
X509v3 Authority Key Identifier:
keyid:3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/DkaMLTJFZ9RGs_KVYJeNo5WJaUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.21.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:9d:02:c6:e3:6a:78:24:30:2a:f6:20:fe:01:54:ae:dd:54:
69:82:57:23:73:67:d8:e6:e1:8d:96:83:af:30:92:f1:1f:64:
67:80:8d:83:2b:e6:ed:50:c3:9d:fe:84:fb:78:e0:83:79:8f:
6a:09:60:bf:cc:f9:95:0e:71:e8:d4:63:19:4f:d4:a9:69:e7:
31:4b:f7:4a:50:1d:8b:c0:3b:7c:17:ad:aa:2e:45:b0:0d:aa:
9b:89:5b:e3:52:0a:ce:f4:e1:b5:c7:4a:d9:b8:6d:b4:25:18:
38:dc:93:30:78:77:d9:43:ea:5d:59:38:f6:b0:fa:f1:07:4b:
7b:48:24:b5:86:2f:d9:37:3b:95:73:1c:60:2c:e2:83:74:c3:
6a:b4:5d:8e:1a:12:47:d4:77:bc:2d:3c:b8:5f:2f:05:30:4b:
5e:f6:5f:c5:4e:37:4b:5a:0a:10:30:fd:5f:34:b0:3f:1a:23:
49:12:79:e5:bd:12:70:d1:03:ee:b0:00:ff:cf:07:e8:0e:fb:
a4:c0:09:d5:dd:6c:c3:38:b6:a4:63:da:7a:b8:42:59:31:b8:
7c:72:02:5b:6b:5d:55:e9:b8:28:ac:64:e4:2d:cc:bd:99:c0:
a8:b5:0e:05:82:eb:65:b7:36:86:a2:5c:29:6d:78:b0:35:c2:
a9:f0:46:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:36 2024 by rpki-client on console-ams.rpki-client.org