Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/n-FDJ6gE4a5WZvYnUWZtEKUYdGM.roa
File: n-FDJ6gE4a5WZvYnUWZtEKUYdGM.roa (raw, json)
Hash identifier: cGG6Jf6TLs5KMjqLzEcag8902MYa65llYwB/4Nhuijg=
Subject key identifier: 9F:E1:43:27:A8:04:E1:AE:56:66:F6:27:51:66:6D:10:A5:18:74:63
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 018CC3B66E0B00B44CF93F69BB107FB5F1B5
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/n-FDJ6gE4a5WZvYnUWZtEKUYdGM.roa
Signing time: Mon 01 Jan 2024 06:29:22 +0000
ROA not before: Mon 01 Jan 2024 06:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201364
IP address blocks: 45.10.56.0/24 maxlen: 24
2a0b:a280::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 08 Feb 2024 18:53:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:6e:0b:00:b4:4c:f9:3f:69:bb:10:7f:b5:f1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jan 1 06:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fe14327a804e1ae5666f62751666d10a5187463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:a6:a0:8c:6c:f1:87:a0:a0:91:83:59:bb:
47:81:24:9e:25:77:bc:6d:14:fa:f9:0b:2b:61:06:
f1:b0:df:cd:42:01:2f:79:c4:af:b0:52:85:0c:af:
fc:1f:79:09:bc:80:8c:84:6c:8c:15:c7:ed:49:6c:
a0:d4:91:db:a0:93:f3:4c:34:ed:65:b0:b8:b8:b6:
96:96:78:54:37:47:f2:24:bd:11:5f:d8:70:70:f1:
c2:29:d8:f6:6b:73:68:fb:b8:90:55:f3:04:40:37:
2a:d0:df:19:29:eb:de:0b:97:e1:24:e2:5d:55:ed:
f1:14:0e:b1:d2:f7:bb:5b:aa:59:0a:72:2d:02:9e:
33:c3:fd:38:51:32:a4:bf:06:05:66:cd:28:61:2c:
77:1d:b1:b9:5e:07:2e:89:7d:0c:bb:c4:4b:3e:a4:
dc:c1:93:ea:38:37:a5:65:e2:b1:f7:8e:a3:e7:ae:
05:74:1b:67:68:b5:cb:fb:54:f6:80:37:8e:a6:30:
58:f0:01:e6:11:2e:31:38:b9:63:ba:6b:a4:a8:dd:
48:72:0d:af:ae:0d:24:1a:32:cc:b6:41:0b:c0:89:
52:e9:32:dc:d6:d7:68:41:23:fe:4b:06:b0:80:30:
cc:99:61:d9:45:b5:0f:70:e8:54:b1:ac:29:7d:9b:
61:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E1:43:27:A8:04:E1:AE:56:66:F6:27:51:66:6D:10:A5:18:74:63
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/n-FDJ6gE4a5WZvYnUWZtEKUYdGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.56.0/24
IPv6:
2a0b:a280::/32
Signature Algorithm: sha256WithRSAEncryption
2a:0e:f2:ae:aa:d6:d2:60:4b:2c:6f:7e:56:14:68:da:ac:07:
df:58:70:b2:98:4f:98:e1:31:35:f8:69:17:a3:64:62:95:9c:
f8:b1:72:a9:a0:97:58:21:aa:1e:a4:fc:cd:6f:f6:8c:65:7a:
2d:31:c6:b0:07:d9:a0:99:93:01:08:b2:fb:b0:e3:f2:dc:ec:
ba:22:e4:34:07:17:fb:53:bd:6d:4c:89:a3:19:58:54:cd:c2:
87:f8:8a:e0:c6:6c:87:33:31:82:22:18:4f:57:bb:35:a2:ab:
1f:24:ee:62:76:af:af:be:ef:cb:f2:ac:11:53:c7:73:2e:75:
55:b5:17:04:67:6e:97:41:93:64:5b:b4:6f:0e:3a:c6:aa:dc:
0d:00:45:b0:8f:35:ae:38:ec:1b:5a:67:72:f4:f2:a4:9e:a8:
4b:41:0d:2c:9f:46:a7:4f:ec:7f:9d:74:d1:5a:c2:c1:19:55:
28:60:ca:d4:bc:b7:2c:73:08:c0:3e:56:32:90:72:69:49:34:
0d:dc:e3:4c:1c:66:5c:9c:73:28:a1:9e:29:72:07:45:59:81:
37:7f:ee:f3:87:d4:51:f6:50:87:1b:dd:54:ca:06:40:18:50:
a8:f6:8f:72:9e:83:d3:49:4d:d4:cc:0a:78:13:ff:a5:6f:bc:
0c:e1:0c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 21:03:01 2024 by rpki-client on console-fra.rpki-client.org