Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J9b81vucITu1zwsMfjU-eAzIKcc.roa
File: J9b81vucITu1zwsMfjU-eAzIKcc.roa (raw, json)
Hash identifier: RZLsQMARLDGh4HqSd82TFDKem/a3DDF7r7H6/IMWr8Y=
Subject key identifier: 27:D6:FC:D6:FB:9C:21:3B:B5:CF:0B:0C:7E:35:3E:78:0C:C8:29:C7
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 01884DB5DFAB04523DB711771AD1DCE9FC30
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J9b81vucITu1zwsMfjU-eAzIKcc.roa
Signing time: Wed 24 May 2023 12:22:24 +0000
ROA not before: Wed 24 May 2023 12:22:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202914
IP address blocks: 45.84.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:b5:df:ab:04:52:3d:b7:11:77:1a:d1:dc:e9:fc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: May 24 12:22:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27d6fcd6fb9c213bb5cf0b0c7e353e780cc829c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:d5:36:4e:38:16:d7:84:e7:04:c9:17:ed:
ad:29:08:b1:39:01:bb:47:44:bd:e3:aa:62:84:61:
8b:5e:31:e7:55:c3:81:af:49:ba:7d:82:05:8f:c6:
6d:9f:64:ca:5b:60:51:30:c4:e7:90:be:e5:07:53:
65:e1:da:fb:7b:5b:d6:74:40:cb:69:87:6a:a7:4e:
1c:88:ac:c9:6a:8c:33:4a:7c:40:25:3a:64:69:dd:
11:ee:4a:ab:4f:77:47:94:e2:45:bc:16:ef:d5:aa:
e2:92:dd:2b:ba:3d:26:c3:04:44:0c:11:55:69:84:
d9:f4:57:10:0f:02:25:9b:15:e7:69:7e:52:9d:6e:
8e:00:13:66:6c:fb:2a:21:05:7e:7b:ae:66:e1:37:
44:6d:ec:a4:5c:98:ed:13:22:66:66:38:92:61:9d:
3f:21:a7:b0:3d:20:22:89:6a:9a:ef:48:f8:9b:ac:
de:1b:1f:61:48:d8:47:35:0c:61:ac:c3:7d:74:6e:
32:08:fa:97:19:ee:19:ca:af:31:be:53:54:56:95:
76:8c:e5:fe:6f:2b:d3:36:ee:ad:42:3c:cd:01:ac:
2b:c1:b5:02:6a:b9:4c:57:ad:a9:60:aa:ff:96:c0:
f9:7b:0a:ab:4c:a9:e9:04:e0:6b:23:a7:d9:fb:67:
65:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D6:FC:D6:FB:9C:21:3B:B5:CF:0B:0C:7E:35:3E:78:0C:C8:29:C7
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J9b81vucITu1zwsMfjU-eAzIKcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.100.0/24
Signature Algorithm: sha256WithRSAEncryption
31:59:a5:32:90:09:32:0e:53:36:7c:7c:9b:a5:28:bf:6c:aa:
dc:cb:5c:7b:e6:a3:ac:68:83:41:cb:3f:e8:11:ba:2f:86:08:
38:43:a7:cf:16:bd:44:88:8c:9f:96:ce:e6:e1:e4:3c:39:a7:
6b:06:78:ba:ce:6c:e1:87:87:e5:2c:8f:6c:4c:f6:d6:f0:5e:
5b:b1:e6:57:83:b2:1d:08:41:cc:f5:17:83:9f:79:0e:7e:02:
25:16:8e:b4:e8:a6:d2:c1:09:bf:f3:0c:c5:e8:fb:1c:2c:20:
34:25:4a:f1:9c:6f:ec:6e:0b:31:7b:aa:7d:62:d4:23:4b:75:
42:b6:03:ec:47:ed:1c:bf:46:29:d8:09:2d:b4:c1:70:21:5a:
52:dc:56:41:21:71:2c:4e:46:7c:94:24:7d:e5:ed:50:4d:6b:
a5:30:4e:00:0f:cc:5d:89:6c:1e:ad:bf:78:46:83:a9:97:f0:
51:77:04:3a:99:b5:ee:69:d5:1f:bb:2b:1f:22:01:cb:53:0c:
6f:6c:fe:15:a8:d5:26:5c:07:a1:2a:6f:10:f3:66:e8:74:47:
66:2b:c3:35:fd:d4:fe:ea:49:7a:62:5f:51:8d:13:76:b1:77:
11:5f:c3:39:0c:b2:6f:62:37:8b:41:3b:19:07:ce:82:bf:b0:
8a:5c:e1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:19 2024 by rpki-client on console-fra.rpki-client.org