Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/MyBX5np7tTjfwWABv82RP3DFO1M.roa
File: MyBX5np7tTjfwWABv82RP3DFO1M.roa (raw, json)
Hash identifier: 3GejXM134qfTdPCgELIIHh7GtkIqHzoG+s9gkjk78To=
Subject key identifier: 33:20:57:E6:7A:7B:B5:38:DF:C1:60:01:BF:CD:91:3F:70:C5:3B:53
Certificate issuer: /CN=578041152df80f6e531342663dd003109905084f
Certificate serial: 018B23D7EE8DAA4027905B929634D559DB39
Authority key identifier: 57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/MyBX5np7tTjfwWABv82RP3DFO1M.roa
Signing time: Thu 12 Oct 2023 12:23:55 +0000
ROA not before: Thu 12 Oct 2023 12:23:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202182
IP address blocks: 45.153.90.0/24 maxlen: 24
2a13:9c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:23:d7:ee:8d:aa:40:27:90:5b:92:96:34:d5:59:db:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578041152df80f6e531342663dd003109905084f
Validity
Not Before: Oct 12 12:23:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=332057e67a7bb538dfc16001bfcd913f70c53b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f9:7c:e5:c8:39:1e:0b:25:3c:67:46:34:ea:
4b:2a:d7:8b:f4:b4:35:fd:62:ae:aa:5a:f0:4f:e5:
46:31:77:14:e5:32:c7:1e:53:85:9f:4f:1e:10:59:
a3:43:3d:4d:88:ca:a4:ce:97:a8:54:db:bb:c9:c8:
5d:5e:ef:43:0b:9d:d7:c0:4e:06:9a:24:1f:93:68:
7d:e9:19:42:f3:e5:21:bd:c4:44:35:d2:5c:d8:11:
0c:df:ee:c7:8d:28:bf:8f:aa:7f:71:8d:eb:4e:77:
9e:4a:91:50:20:41:60:cb:c7:ee:84:fb:c8:31:c0:
1d:38:c2:d2:f0:b5:af:47:9d:63:1f:bc:07:42:24:
a1:ca:45:3f:86:3d:32:1e:7e:5e:03:ee:6d:9a:3b:
fd:c6:b0:f1:22:8a:9e:c7:9d:ea:20:76:c7:81:b7:
75:8b:6f:dd:a8:9d:92:fe:42:cc:ba:f7:47:fd:13:
7c:a0:02:18:84:3f:9e:12:0b:97:44:21:7d:12:38:
a7:01:b0:64:6c:2c:e1:97:cd:4a:dd:00:2e:73:3a:
25:72:0e:ba:39:d4:b8:65:21:21:39:60:b0:89:16:
f5:ef:48:20:5b:b2:96:bc:fc:dc:3e:19:d8:fb:4b:
20:30:f2:a6:72:09:da:bd:95:9d:52:4d:7f:62:58:
3d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:20:57:E6:7A:7B:B5:38:DF:C1:60:01:BF:CD:91:3F:70:C5:3B:53
X509v3 Authority Key Identifier:
keyid:57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/MyBX5np7tTjfwWABv82RP3DFO1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.90.0/24
IPv6:
2a13:9c0::/48
Signature Algorithm: sha256WithRSAEncryption
6b:be:42:f7:88:27:53:ac:8a:1f:48:64:5c:be:d8:c7:4f:f9:
ac:52:6d:28:2e:72:09:54:78:a0:45:6b:41:71:b6:ca:3b:15:
c9:cd:44:37:65:ca:dd:a5:6e:c8:48:cc:1d:11:e6:26:6e:0f:
d7:21:f5:1b:14:52:7a:8f:32:4e:48:e7:a0:75:b6:62:e6:a1:
9f:64:fe:10:31:a3:d8:9f:da:4d:88:58:85:ad:9f:5f:fd:a4:
04:18:b7:c4:0c:6c:5c:cd:36:3c:24:69:b5:0d:61:4c:cd:31:
5a:33:81:bb:d1:4a:f0:19:79:7f:22:0d:06:e3:40:4e:46:bb:
59:4e:c5:88:8e:ca:a4:a3:85:23:60:2e:ea:d9:d6:bd:de:c0:
21:8b:85:c0:de:1c:39:92:a8:bc:eb:52:7c:61:30:58:91:45:
62:5a:c3:88:70:22:23:ef:39:34:5a:6a:b4:d1:5d:17:35:5b:
af:4c:4f:01:89:38:c7:dc:6e:5c:2e:9f:15:9d:9d:72:0e:b1:
14:f3:34:bb:45:59:f8:db:8d:9c:ec:75:bf:03:d2:16:04:59:
ab:21:ca:db:4b:94:78:b8:d7:88:31:87:33:12:ef:c7:e1:57:
06:0c:f9:a5:e8:b0:36:de:65:7c:99:8c:8f:44:81:9c:7a:86:
8d:0a:ea:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:25 2024 by rpki-client on console-fra.rpki-client.org