Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/Kh10yA8faPqilcVDQn3N4mpsXA0.roa
File: Kh10yA8faPqilcVDQn3N4mpsXA0.roa (raw, json)
Hash identifier: xinhS5t0bArwbB8oNG27zDhz6ZGezg5mEY6PLUBVc9U=
Subject key identifier: 2A:1D:74:C8:0F:1F:68:FA:A2:95:C5:43:42:7D:CD:E2:6A:6C:5C:0D
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 018A6AD31A2CEE00718DDCACA541BCC3AAB0
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/Kh10yA8faPqilcVDQn3N4mpsXA0.roa
Signing time: Wed 06 Sep 2023 14:08:54 +0000
ROA not before: Wed 06 Sep 2023 14:08:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 45.84.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Nov 2023 12:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6a:d3:1a:2c:ee:00:71:8d:dc:ac:a5:41:bc:c3:aa:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: Sep 6 14:08:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a1d74c80f1f68faa295c543427dcde26a6c5c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:f2:c7:ca:3b:73:8b:08:e1:b4:9a:e8:c1:
84:a9:f4:8a:70:ea:18:d6:a1:92:dd:e4:9d:e2:7f:
a5:4c:71:1d:2b:51:cb:88:dd:dd:68:ed:10:94:c4:
8d:2b:40:35:46:59:ca:24:bb:ed:38:09:98:d8:09:
fd:c8:dd:a1:dc:24:25:8b:e0:39:ea:b5:ff:36:3a:
bf:85:19:dc:bd:7b:2f:5f:7b:b2:2c:52:b6:35:c3:
c8:73:b8:b7:36:a1:01:e6:12:32:a1:e3:a2:52:d4:
f9:31:6d:d2:cb:73:60:a1:24:10:2f:a4:fd:ba:53:
0e:fc:af:1d:53:fc:97:0f:d9:ad:25:28:0f:e3:52:
41:08:6b:9f:36:53:a5:c5:3f:bc:84:03:87:63:39:
7b:5d:20:ab:09:5c:d8:33:b6:a8:4a:e2:04:42:b8:
33:e4:08:c4:c4:11:28:74:77:ba:64:f4:52:64:0b:
b6:7b:8d:2d:69:dd:83:a1:5f:33:7c:14:e3:71:5a:
26:64:60:1c:a6:ae:20:13:6a:0c:6d:a6:7c:52:53:
fc:bc:bb:f6:d4:ec:33:9b:8e:0c:47:b4:82:dc:e6:
67:1f:23:19:63:69:43:45:5b:1f:4f:82:ae:88:ff:
22:0f:94:b4:c5:d3:b1:03:54:41:47:85:aa:5f:22:
e3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1D:74:C8:0F:1F:68:FA:A2:95:C5:43:42:7D:CD:E2:6A:6C:5C:0D
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/Kh10yA8faPqilcVDQn3N4mpsXA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.101.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:9f:b1:f9:85:6a:c8:2b:f0:6b:9f:44:c1:ac:5f:9c:12:1e:
36:78:bb:a9:b6:a6:1e:2e:47:00:2c:8a:c7:a3:c3:d6:f7:d2:
24:90:24:40:05:8e:66:f1:33:28:7c:61:26:c0:53:59:91:e4:
f9:d0:fb:c4:29:f4:50:ca:c1:b5:1a:25:d2:03:a0:1e:54:b3:
42:ac:cc:5a:91:c3:65:34:d2:6e:a1:57:4a:0d:cf:37:19:91:
83:7f:da:2f:95:3d:a4:70:80:32:f5:f9:de:f6:17:37:69:88:
70:46:1e:37:d9:3a:e9:f3:13:76:7d:d3:d1:ac:e2:75:e3:3d:
a5:9a:b5:55:f2:df:96:81:d0:5e:93:38:f5:c2:5e:e6:7a:da:
c5:1d:55:b1:72:66:7f:16:fe:38:c2:f5:b8:02:b3:bd:2b:5b:
29:8a:3c:9e:ea:2a:ee:2f:1e:96:f8:7e:f7:1d:3c:72:5b:42:
5e:05:d3:c5:75:9d:2e:22:75:6a:2d:52:3f:5e:f8:d8:15:cc:
01:0b:3e:68:33:c2:1c:b9:4d:c6:34:6a:b8:c8:ee:ac:46:6a:
3b:b5:5b:57:64:3e:a7:e2:82:93:e8:1e:66:f8:2b:e8:c1:8a:
d2:5a:a8:3e:e6:1e:cd:b3:da:71:69:25:f9:41:b1:36:82:c0:
d0:7b:e3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:19 2024 by rpki-client on console-fra.rpki-client.org