Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/mygHQUhESDH2XN4ueHOeTYn4p3s.roa
File: mygHQUhESDH2XN4ueHOeTYn4p3s.roa (raw, json)
Hash identifier: tzPw9vPNpf73YdZl5tFOFpht1wZJx9caoP0MXUhxu1A=
Subject key identifier: 9B:28:07:41:48:44:48:31:F6:5C:DE:2E:78:73:9E:4D:89:F8:A7:7B
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 0191A9A537FB0C8CDACFE93F58CC38B6F4DA
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/mygHQUhESDH2XN4ueHOeTYn4p3s.roa
Signing time: Sat 31 Aug 2024 18:14:22 +0000
ROA not before: Sat 31 Aug 2024 18:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64286
IP address blocks: 45.84.102.0/24 maxlen: 24
2a10:3b04::/32 maxlen: 32
2a10:3b05::/32 maxlen: 32
2a10:3b06::/32 maxlen: 32
2a10:3b07::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 31 Aug 2024 18:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a9:a5:37:fb:0c:8c:da:cf:e9:3f:58:cc:38:b6:f4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: Aug 31 18:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b28074148444831f65cde2e78739e4d89f8a77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:62:ac:ad:aa:eb:f9:ee:61:40:01:f1:85:
69:d0:9a:8f:11:2f:f9:aa:b4:a0:c9:50:58:02:a5:
69:59:95:df:c5:3e:87:4b:4f:f2:d9:32:a7:80:b2:
bd:91:df:91:31:cf:af:5a:ad:3d:19:5a:3b:e7:e5:
92:65:53:c7:f8:96:db:12:14:f9:1b:13:3b:ea:24:
eb:d3:10:1b:29:2d:f2:8b:ba:51:a2:92:14:fd:bd:
14:f5:3a:2b:75:59:57:0a:e0:69:fe:49:08:e6:eb:
bb:80:a7:e2:c5:81:a9:8e:bf:0f:11:a3:04:58:42:
7a:07:37:90:d5:e1:6d:fe:01:d7:67:d9:fc:d5:c5:
7f:b7:25:89:76:15:67:27:18:55:09:5a:92:2e:7e:
77:34:89:3d:69:ab:c7:35:5f:30:d1:fb:a3:a9:a9:
f0:13:c5:25:0b:ba:a0:f9:81:91:1e:b4:7f:86:9e:
8d:db:00:4f:b3:b0:b9:7f:fd:a3:91:d5:f3:c6:e9:
c1:e8:ec:8a:40:14:2f:8e:26:80:28:33:55:5e:87:
27:5a:03:33:24:5d:bb:1b:5f:7d:02:c6:ba:36:da:
85:a2:74:43:ce:86:cf:62:d4:12:a6:ef:11:b5:84:
05:c9:17:31:7e:84:08:9b:2b:9c:72:7a:79:98:33:
bf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:28:07:41:48:44:48:31:F6:5C:DE:2E:78:73:9E:4D:89:F8:A7:7B
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/mygHQUhESDH2XN4ueHOeTYn4p3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.102.0/24
IPv6:
2a10:3b04::/30
Signature Algorithm: sha256WithRSAEncryption
0c:95:51:47:26:9b:93:5b:46:67:b1:5e:ad:6d:c2:c4:b7:0f:
6c:19:9a:9f:78:7c:dd:3a:a7:72:3a:c4:47:98:76:6a:01:37:
e6:4b:3a:82:92:50:f2:03:51:85:96:24:ea:2a:2a:8e:76:86:
0f:95:78:ed:17:d2:11:55:b1:e0:a2:7b:f0:0b:2d:80:60:9a:
bb:dc:35:cc:d8:dd:e5:ec:73:ed:53:dd:18:41:9d:f7:d0:09:
45:64:8f:84:d9:e8:10:a6:93:84:1c:de:92:39:0a:34:5c:f8:
a9:9c:f3:b3:a7:51:8a:4c:e1:58:52:54:27:b6:3a:0a:73:f4:
9a:59:af:33:a1:12:17:de:0a:a0:8d:53:e9:37:b4:52:06:9d:
56:9e:89:47:28:75:cb:e6:f8:97:8c:d3:ef:d3:8b:b5:cf:7d:
52:27:a7:81:b8:d7:9b:4f:08:50:fe:53:87:28:63:d0:f0:11:
59:79:12:2c:5a:a2:89:4f:96:73:0c:11:6c:f3:89:45:24:d0:
bb:d6:48:4e:6e:94:df:48:09:5d:73:e3:7b:8b:eb:33:a9:2b:
8d:55:d6:4f:34:f7:d2:af:a3:cd:dd:e4:0d:8d:65:bf:29:0a:
27:a8:87:c9:e6:b1:df:24:d9:46:4d:37:74:45:11:36:24:07:
fb:89:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 20:28:23 2024 by rpki-client on console-fra.rpki-client.org