Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/CsVfp3xQaQ9WeRHEWbiNBs179Vc.roa
File: CsVfp3xQaQ9WeRHEWbiNBs179Vc.roa (raw, json)
Hash identifier: siNHo1lYQmJQgEWwDrAuDKu27H6ySu7Rg90Nlu4FHPc=
Subject key identifier: 0A:C5:5F:A7:7C:50:69:0F:56:79:11:C4:59:B8:8D:06:CD:7B:F5:57
Certificate issuer: /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial: 018BEEE53910345B37AB670FBECD48AEBDDF
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/CsVfp3xQaQ9WeRHEWbiNBs179Vc.roa
Signing time: Mon 20 Nov 2023 22:41:21 +0000
ROA not before: Mon 20 Nov 2023 22:41:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12874
IP address blocks: 45.84.195.0/24 maxlen: 24
45.153.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Nov 2023 20:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ee:e5:39:10:34:5b:37:ab:67:0f:be:cd:48:ae:bd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
Validity
Not Before: Nov 20 22:41:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ac55fa77c50690f567911c459b88d06cd7bf557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1d:0a:e0:92:8d:c4:25:ab:e8:9a:04:ef:59:
be:9a:84:15:c8:6c:db:11:1d:0b:1b:f1:a5:f7:a9:
38:7d:d6:9c:75:dc:8a:83:85:94:bf:6a:55:93:45:
01:d2:05:79:ff:85:32:fb:de:0b:87:2a:3b:39:75:
53:b5:05:18:dc:bb:81:4a:bc:fe:f9:ca:4a:b4:7f:
db:14:d2:2f:c9:4b:71:eb:77:3a:ce:a4:de:e4:e4:
a8:d4:ef:93:76:7d:dc:41:b3:4a:16:59:62:35:44:
48:13:1e:62:44:97:7f:f1:89:0f:5a:80:b1:97:72:
c7:ab:59:1e:83:ff:f2:b6:81:1e:77:5e:98:a0:11:
5f:83:cb:06:c2:17:2d:25:3d:50:da:39:fd:1c:21:
04:a1:2f:e4:a1:11:d0:8b:43:1a:c8:fb:4e:7c:ba:
8e:9e:60:d0:86:b3:c5:bf:ce:1f:cb:b5:e2:42:44:
c9:c5:f4:38:4a:99:4b:84:e0:01:71:b4:46:ec:f8:
89:c8:db:64:20:21:e1:8a:ad:cc:57:4e:18:47:7d:
c7:71:a3:8b:cc:4c:08:aa:76:fc:e9:5d:e1:dd:f0:
91:29:b2:97:c3:ff:0d:35:f4:83:96:7e:c7:e3:5d:
b7:bf:1e:72:7b:2d:dd:8b:7d:cf:a2:20:e3:3f:ae:
e4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C5:5F:A7:7C:50:69:0F:56:79:11:C4:59:B8:8D:06:CD:7B:F5:57
X509v3 Authority Key Identifier:
keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/CsVfp3xQaQ9WeRHEWbiNBs179Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.195.0/24
45.153.109.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:45:aa:cb:3a:8a:48:10:87:44:45:0b:a2:f3:67:31:34:62:
43:0a:b8:f3:ce:63:90:95:81:de:7b:da:90:8c:5d:bd:c4:59:
8f:1e:4c:fb:0b:49:46:41:22:d4:f8:e7:e5:36:3d:7d:a6:81:
04:e8:11:68:6b:24:f4:63:3e:6a:96:89:33:bc:bd:5b:f9:e3:
86:5c:8d:de:b3:54:53:d7:74:21:fa:ad:4b:e0:1c:a9:ba:4a:
93:8c:c9:57:1a:4d:61:8d:db:19:46:d6:f0:cc:c7:95:ef:20:
d6:05:ff:53:da:7f:78:ef:5e:ee:09:45:45:e1:50:e8:ad:73:
f1:f9:b9:bf:19:5e:85:ae:b9:e4:75:9b:72:2f:7a:83:b6:02:
dd:5a:93:2c:e6:f5:dc:79:8b:7c:44:28:86:c8:9f:73:d2:6d:
ee:83:55:34:24:99:19:ba:bb:86:32:df:15:e2:55:f5:c7:09:
e1:bc:32:90:07:5a:81:91:47:62:c4:1f:2c:e5:0d:2e:94:8f:
e2:70:2f:63:96:d8:eb:2b:78:aa:af:d4:bd:ba:b0:0f:be:d4:
01:c1:08:0a:de:09:f5:9e:b5:f2:44:56:68:03:09:20:1e:82:
a9:5c:ef:77:95:ff:e9:9a:cd:4c:16:7f:b6:e2:d1:94:a9:42:
b3:1d:fb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:12 2024 by rpki-client on console-ams.rpki-client.org