Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/yoR9WlxhD2HuNxGSLbCJd_0Z-20.roa
File: yoR9WlxhD2HuNxGSLbCJd_0Z-20.roa (raw, json)
Hash identifier: fzRR/h7fxTeQwQab7OEYjWwvuxmyhq2pWuHQCE1cS38=
Subject key identifier: CA:84:7D:5A:5C:61:0F:61:EE:37:11:92:2D:B0:89:77:FD:19:FB:6D
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 018CC3B6FEBD23C2DC99FCDC17CBE6F7A87F
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/yoR9WlxhD2HuNxGSLbCJd_0Z-20.roa
Signing time: Mon 01 Jan 2024 06:29:58 +0000
ROA not before: Mon 01 Jan 2024 06:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64286
IP address blocks: 45.84.102.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 May 2024 17:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:fe:bd:23:c2:dc:99:fc:dc:17:cb:e6:f7:a8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: Jan 1 06:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca847d5a5c610f61ee3711922db08977fd19fb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7a:3c:a3:7b:32:c5:11:25:88:47:76:e8:f0:
27:1d:87:ba:11:d2:50:ce:2a:95:0e:42:4b:7f:80:
4e:3d:1a:3d:62:1d:3c:bf:82:17:fc:93:b8:74:a5:
ce:bc:49:51:17:f8:96:67:0f:c8:88:51:28:fe:42:
55:07:4c:4a:f5:d3:61:72:8c:fd:ea:7e:12:f7:bb:
28:21:05:e9:44:cb:b6:bc:97:42:c0:a2:94:28:99:
3a:2c:6f:11:3d:79:79:c3:43:8a:c5:25:95:e4:93:
1b:c9:72:e8:cd:6b:a6:48:a3:de:f6:ac:7f:9f:45:
a6:4e:30:ec:17:2b:d4:c6:dc:72:ff:ef:ee:e8:30:
83:2f:e6:5d:a5:ac:b3:ad:51:5f:be:fd:ac:bc:0d:
0d:92:86:23:73:30:9e:f2:cf:ee:6c:be:54:12:04:
cd:a6:38:14:63:99:18:85:53:8e:c1:73:12:14:aa:
ad:8b:a2:e9:4b:7a:cd:a3:53:d8:66:15:fe:99:7f:
1f:66:db:6e:d2:c8:1c:51:2c:56:68:59:99:e3:30:
74:3c:e2:69:68:09:c1:12:2d:f1:87:0b:df:b4:f6:
a4:3d:58:aa:65:82:e5:9c:b3:e9:7b:29:f8:36:e3:
d1:52:70:eb:c6:3e:bf:e7:28:e8:e8:4c:ae:84:4c:
93:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:84:7D:5A:5C:61:0F:61:EE:37:11:92:2D:B0:89:77:FD:19:FB:6D
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/yoR9WlxhD2HuNxGSLbCJd_0Z-20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.102.0/23
Signature Algorithm: sha256WithRSAEncryption
50:f2:c4:37:28:92:1e:d4:79:b7:17:8e:6c:51:c0:1a:f1:46:
fe:ce:95:9c:91:ce:e5:a9:e5:ce:dc:fe:c3:99:94:21:03:f9:
52:33:d5:97:89:e7:4c:66:69:de:93:a0:d9:ea:fb:25:37:b0:
a7:52:19:b0:26:e3:98:91:1c:8b:e6:2a:f0:b6:10:da:e8:82:
7d:20:3d:9d:49:c7:c4:08:ac:b4:f9:9b:bc:f3:e2:c9:ed:d3:
63:cd:de:9f:fa:9b:74:ad:3c:3a:62:f9:97:87:24:ef:8f:0a:
a9:c5:75:ba:4c:17:28:e1:89:03:13:74:e5:31:0d:4a:4a:9b:
70:f8:9d:17:39:65:23:1f:f2:89:95:c5:99:a7:c2:39:c8:2f:
b6:59:79:57:63:93:2b:4d:29:f7:80:d6:ba:3a:51:4e:55:10:
37:e5:e4:a7:06:fb:14:60:f8:3b:bb:93:a4:58:3f:39:0e:9e:
98:61:05:9d:4c:02:24:35:5e:8d:9a:2e:59:d9:a3:37:37:5c:
33:f8:47:7d:4c:af:66:cb:06:6c:1c:31:4b:35:1a:22:72:f4:
9f:7b:f6:19:c2:9e:7b:a1:09:fd:e3:2d:11:a4:a1:62:39:73:
3c:cd:ff:93:ef:35:fe:39:a5:7f:02:87:b7:60:1f:5e:f3:df:
b7:23:9e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:59 2024 by rpki-client on console-ams.rpki-client.org