Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/xWqIdo7ANgCqOs9wsUOXYVpCn9Y.roa
File: xWqIdo7ANgCqOs9wsUOXYVpCn9Y.roa (raw, json)
Hash identifier: bV30yRAAUoBSLMGNeXMqng9Nww0Ij+4qH2YqaPjLlWo=
Subject key identifier: C5:6A:88:76:8E:C0:36:00:AA:3A:CF:70:B1:43:97:61:5A:42:9F:D6
Certificate issuer: /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial: 01856DE668C70D7A6BA62FA9D2281A702495
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/xWqIdo7ANgCqOs9wsUOXYVpCn9Y.roa
Signing time: Sun 01 Jan 2023 15:14:54 +0000
ROA not before: Sun 01 Jan 2023 15:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 45.80.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:68:c7:0d:7a:6b:a6:2f:a9:d2:28:1a:70:24:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Validity
Not Before: Jan 1 15:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c56a88768ec03600aa3acf70b14397615a429fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:39:3e:b1:80:7d:6e:47:cb:c6:5b:29:d4:80:
a1:2e:95:9d:7c:79:d8:80:87:21:3f:93:56:89:0f:
67:56:ea:40:44:3c:7b:c5:d0:48:eb:4f:a8:51:8b:
2b:a6:5b:18:3a:af:23:43:6c:4a:eb:d3:83:df:c6:
ff:58:ef:81:95:db:b0:01:b0:f9:9c:36:73:cd:ac:
8d:12:f7:8e:4a:66:94:86:9c:85:f6:a0:c9:04:16:
a6:62:4c:11:cc:66:dc:b0:b4:ab:c7:32:4b:a1:e0:
43:d8:b2:3d:17:5d:ce:e9:79:0d:56:bc:49:e4:7f:
bd:25:1a:c9:90:65:13:af:af:c8:ef:61:f1:fb:d8:
63:83:9f:02:5e:d2:90:42:11:8d:f4:5d:b2:76:d5:
9b:a0:44:0a:d6:20:4f:d0:68:e4:2e:1f:1f:87:d5:
e6:2c:4e:3e:50:93:f2:b9:5d:15:6e:fb:96:48:0b:
36:65:24:40:88:b4:56:67:f6:db:cc:a7:de:d6:a0:
f5:28:a5:03:bf:aa:58:b8:ba:ba:ff:ef:97:df:26:
7c:86:43:0c:3b:1b:0e:ae:ca:99:31:01:1c:90:d4:
bd:5f:be:9f:c6:bc:2a:48:ff:54:63:56:99:ea:67:
e7:0b:6a:1e:05:e4:c4:57:5d:1b:06:76:7b:94:fd:
27:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6A:88:76:8E:C0:36:00:AA:3A:CF:70:B1:43:97:61:5A:42:9F:D6
X509v3 Authority Key Identifier:
keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/xWqIdo7ANgCqOs9wsUOXYVpCn9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.49.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:45:76:67:98:cb:66:c1:ef:b6:64:60:bb:93:4a:95:9c:df:
94:51:16:a1:d0:30:de:e9:1a:76:ce:2f:d0:2c:8e:15:56:41:
d6:39:ce:66:66:c6:3b:52:59:6d:81:d6:f9:c0:9f:0b:6b:dd:
57:cd:bc:c9:04:40:f4:7d:3e:b9:14:2f:0f:08:b4:46:09:3a:
36:bc:6f:3b:26:56:19:22:ba:39:76:31:a2:ae:d1:cb:da:74:
9d:b3:03:9c:72:c3:dd:4c:20:41:ae:b8:3c:0c:33:1b:3f:44:
5a:48:77:4a:ae:26:62:17:5e:6d:23:08:5f:fd:7d:e0:b2:fe:
dc:20:c0:0c:36:6d:9c:38:f1:16:61:fa:1b:70:7f:06:7e:62:
3a:f9:61:6f:86:7c:c8:83:a5:bb:5d:3c:d1:1a:f9:b0:b1:b5:
8c:cc:94:69:f1:5a:82:76:6f:43:ad:c4:fb:61:d3:d1:9c:2a:
78:c4:f0:f9:2c:39:4c:ac:3c:4a:8f:2a:ae:c0:ea:cd:c6:06:
ed:9b:db:68:8e:43:60:68:26:53:8b:7d:6f:6f:fc:96:b0:a3:
8f:d9:a8:47:36:84:0f:53:a8:b5:c8:36:c6:fe:e0:20:7c:f3:
d1:71:6d:3a:cf:41:bd:d5:90:db:7e:00:da:ac:1a:45:fe:82:
b9:c8:fd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:05 2024 by rpki-client on console-ams.rpki-client.org