Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/n3ITeLlCpXF_EOWH2wt0w3tG1G8.roa
File: n3ITeLlCpXF_EOWH2wt0w3tG1G8.roa (raw, json)
Hash identifier: 26xOAsrbp3R4JRSQYtRa5T22Bq72y6MYkTrTbmk9eB4=
Subject key identifier: 9F:72:13:78:B9:42:A5:71:7F:10:E5:87:DB:0B:74:C3:7B:46:D4:6F
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 018DEAE00D20860F2ABA57B42E16B8A56DB7
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/n3ITeLlCpXF_EOWH2wt0w3tG1G8.roa
Signing time: Tue 27 Feb 2024 14:02:48 +0000
ROA not before: Tue 27 Feb 2024 14:02:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211318
IP address blocks: 45.10.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 14:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ea:e0:0d:20:86:0f:2a:ba:57:b4:2e:16:b8:a5:6d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Feb 27 14:02:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f721378b942a5717f10e587db0b74c37b46d46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:0f:31:90:cc:b1:b0:0c:c2:a3:a0:a8:2b:
39:b7:cf:77:a4:73:fd:38:ce:88:d8:bf:dd:55:0a:
c0:12:cb:92:32:e0:6e:f0:3a:16:dc:de:ce:91:6f:
df:80:54:ca:d3:cf:d5:df:e8:b5:7c:7f:a7:e5:72:
8b:1c:5b:b6:ad:2e:b2:6b:9e:80:80:6e:c1:3d:88:
8d:03:0c:ed:00:88:5c:3f:1a:dc:5e:8e:1b:0f:a1:
d9:9a:b9:ca:a2:37:2b:d2:39:f4:9d:16:ba:fa:16:
af:d4:26:93:61:68:1e:ca:e7:0d:85:8f:ab:de:a6:
7f:19:fd:61:45:d5:e8:bd:5c:35:db:79:60:6b:e6:
48:f3:fc:80:85:8b:2f:af:bd:fa:98:48:39:a2:f3:
03:0f:b7:88:7d:71:42:de:d6:d6:51:d8:6d:a9:63:
fb:5f:59:0c:6b:2b:d0:0f:c4:0f:51:58:01:6f:27:
3e:8f:53:bc:75:24:92:c5:91:2b:c8:7a:f1:7b:8d:
b4:19:4e:f1:50:94:44:05:eb:55:1c:fa:08:8b:21:
3e:7b:32:95:a0:62:ec:c7:58:e5:84:df:c4:4e:b5:
ce:aa:02:dc:2e:5e:d3:f4:4a:e9:4a:40:4e:58:df:
f1:ae:9c:31:ab:fe:a3:f6:f1:51:8b:ab:c6:75:5b:
04:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:72:13:78:B9:42:A5:71:7F:10:E5:87:DB:0B:74:C3:7B:46:D4:6F
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/n3ITeLlCpXF_EOWH2wt0w3tG1G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.56.0/24
Signature Algorithm: sha256WithRSAEncryption
93:eb:18:33:e8:94:19:67:a7:2d:9f:cd:ed:bc:9e:ab:ed:84:
21:c8:9e:9c:55:08:12:e4:d4:a9:7c:3e:be:dd:46:e3:0e:7a:
5c:c2:f2:5b:09:82:12:1e:16:9c:cb:dc:3c:a9:2f:fb:09:ea:
31:b8:88:1f:e8:80:cf:7d:a5:81:c9:76:df:ab:9a:ea:ce:c3:
b2:26:f2:00:90:b6:32:9c:21:d9:40:22:bf:0c:9b:8f:c3:ee:
97:04:77:54:b9:41:20:d4:ec:30:07:30:03:a2:72:c2:68:d0:
fe:8b:37:6e:79:bb:b1:fa:f0:c3:3d:0d:df:52:b1:bd:ca:07:
c4:00:e1:86:91:7b:ae:c8:92:fb:cb:b2:cf:32:2f:f2:01:a0:
9b:83:34:94:d7:ee:7b:3b:e3:9e:4f:da:e0:92:fc:97:a0:93:
09:a2:65:b7:dd:26:60:89:01:36:e7:8c:0e:5b:ad:4c:7d:52:
aa:69:62:cf:64:30:6a:2a:db:62:65:0e:1b:62:fe:15:6c:06:
f4:c3:80:6f:38:1f:a1:ee:1e:f7:16:ae:ce:52:99:11:d2:a0:
f1:15:49:f0:2f:4e:cb:d7:90:bc:a0:df:2e:c2:ef:40:a4:cd:
38:50:47:98:f2:bc:8e:1f:6f:dc:eb:99:71:86:0a:b2:62:b2:
e4:f7:d8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 17:08:11 2024 by rpki-client on console-fra.rpki-client.org