Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/_4ykecS-IDj6UMZJ0bTrcl720Cw.roa
File: _4ykecS-IDj6UMZJ0bTrcl720Cw.roa (raw, json)
Hash identifier: Z3OFV52vgDkjlaVWEKVOKBbUyuh8W7z2mh4/vq4yLlE=
Subject key identifier: FF:8C:A4:79:C4:BE:20:38:FA:50:C6:49:D1:B4:EB:72:5E:F6:D0:2C
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01871034C886952965A8874D440A4152CE96
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/_4ykecS-IDj6UMZJ0bTrcl720Cw.roa
Signing time: Thu 23 Mar 2023 20:41:47 +0000
ROA not before: Thu 23 Mar 2023 20:41:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209984
IP address blocks: 45.155.62.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 04 Oct 2023 17:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:10:34:c8:86:95:29:65:a8:87:4d:44:0a:41:52:ce:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Mar 23 20:41:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff8ca479c4be2038fa50c649d1b4eb725ef6d02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:a8:34:6f:5b:97:e2:e5:77:d3:15:6f:7d:
23:6f:0d:d6:a8:14:1d:c9:b8:13:b2:5e:16:69:cb:
c2:80:7f:e9:e5:3c:91:35:08:c3:6d:78:99:5b:d5:
b9:a7:7a:b5:8c:a8:12:ea:69:29:16:61:7d:1d:90:
65:ea:5d:18:da:a0:78:4d:de:c4:81:cb:4b:51:a6:
93:6d:8c:af:29:a4:4c:81:cb:4f:cd:ed:3a:3f:b1:
2c:3b:a4:b7:0d:6e:a6:a1:28:8d:4c:9f:a3:66:2e:
b7:9f:24:c1:ec:2a:31:4f:ad:85:6a:d5:7e:20:3e:
04:93:87:e2:29:9c:b9:a8:70:5f:bd:9e:bf:ec:76:
c5:a0:b1:9b:46:36:63:79:68:1c:55:34:eb:53:b1:
e0:74:ef:9e:aa:74:f7:58:3e:50:61:da:36:0d:7e:
96:e9:b7:22:22:ed:1c:1b:82:15:64:8c:fb:06:aa:
9a:6b:9a:d9:8c:f9:bd:bf:35:e7:41:f2:d2:c9:37:
24:7e:9c:9a:e8:6b:44:47:9b:8d:03:f6:06:42:a6:
cf:49:44:d5:6d:71:cc:a7:e3:63:ba:41:ac:bc:80:
50:96:9f:03:1a:72:88:52:e0:28:8d:33:e8:dd:f7:
2f:5d:04:45:f0:65:6e:4b:ca:a3:4f:80:db:e6:2d:
37:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8C:A4:79:C4:BE:20:38:FA:50:C6:49:D1:B4:EB:72:5E:F6:D0:2C
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/_4ykecS-IDj6UMZJ0bTrcl720Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.62.0/23
Signature Algorithm: sha256WithRSAEncryption
23:10:4c:4d:ae:70:07:b7:d9:3b:49:e7:be:aa:9e:22:4f:9d:
e9:b4:ac:53:2f:21:3e:64:be:aa:6b:23:a6:2c:ab:13:1d:ce:
ee:25:9a:da:52:5f:39:af:d0:ac:c8:20:b1:db:54:f3:c9:c4:
01:80:28:0e:43:9b:ca:2e:a6:00:74:6b:f9:e2:4a:dc:96:36:
1a:52:29:77:92:5c:c5:00:93:30:51:f3:23:a7:b2:b2:aa:18:
a4:0d:11:86:d5:d4:27:07:e3:a6:dc:bb:d7:c2:a4:89:df:35:
63:78:b3:94:48:07:1f:7a:94:6d:45:32:ca:5c:a4:5d:e3:6f:
ac:ef:f0:dd:92:d0:d9:63:75:3e:9f:cd:b7:7f:ad:b6:d3:e2:
fc:dd:3a:35:1e:c1:4e:9f:88:f2:38:7e:97:03:9c:f8:7e:f0:
4e:3f:2a:bd:5f:55:e7:10:2e:71:ee:a5:df:09:99:88:76:44:
58:6f:7a:f2:cc:df:05:1f:cd:61:da:65:ad:4a:4c:9e:e6:b2:
43:dc:81:0b:37:2d:92:61:ac:4a:2a:60:bb:9e:f2:1f:d8:b0:
2c:71:80:26:50:1a:21:2d:79:d0:09:26:07:c0:90:3e:aa:9f:
ed:07:d1:d7:f1:51:36:22:5a:b8:42:18:c0:c5:6b:7c:b5:dd:
be:37:51:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org