Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/9Kb6VeSiYT9myAk1A4jWESXmkwg.roa
File: 9Kb6VeSiYT9myAk1A4jWESXmkwg.roa (raw, json)
Hash identifier: LIrOQl5SM0LhRUy+xRfO0bVwDhwIad7ghiAaQYPhrj4=
Subject key identifier: F4:A6:FA:55:E4:A2:61:3F:66:C8:09:35:03:88:D6:11:25:E6:93:08
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 01856DAF6A4661BCDFD3894BCAA0974F2B61
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/9Kb6VeSiYT9myAk1A4jWESXmkwg.roa
Signing time: Sun 01 Jan 2023 14:14:50 +0000
ROA not before: Sun 01 Jan 2023 14:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197759
IP address blocks: 45.131.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:6a:46:61:bc:df:d3:89:4b:ca:a0:97:4f:2b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 14:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4a6fa55e4a2613f66c809350388d61125e69308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4f:39:b9:c6:40:07:32:79:39:a4:b4:da:b5:
fc:37:a4:6e:5f:10:3c:bd:61:82:13:1b:0e:a3:5d:
73:1b:a8:fb:c6:83:c7:bc:41:40:78:ba:e8:73:8d:
dd:ed:d6:c9:7e:64:6f:ef:75:28:f8:d7:05:65:18:
22:95:ed:b5:d9:be:9b:b2:58:d4:98:c4:17:6c:77:
5f:ee:42:4f:05:b6:72:06:2b:ef:c5:e0:a4:a4:78:
aa:39:80:7f:c3:4b:2f:d9:e6:ed:00:58:98:1f:d0:
31:51:04:ab:25:c8:c9:12:3f:ce:73:87:97:35:cb:
cb:2f:c7:b6:e5:7a:44:c9:6d:e7:df:5b:e0:52:1a:
61:07:ee:d1:8f:53:0a:72:ae:a5:c1:12:58:f2:67:
24:f7:0e:d7:e1:a8:ac:8a:de:f5:27:bc:78:b1:e3:
56:fa:50:d7:73:b1:ad:ab:b2:4f:f8:c8:83:86:9b:
bf:ba:8d:ad:78:a5:f1:3d:96:f7:1b:05:a1:0d:55:
3a:fb:06:14:46:f1:83:f6:8f:68:6b:28:7a:77:40:
7a:14:20:b2:5c:85:53:58:b0:45:12:10:a9:f8:fa:
77:05:f2:54:aa:a6:d0:e1:d5:08:d0:da:4e:ec:da:
37:29:e3:ea:39:8d:ba:7a:bb:57:33:d0:1c:04:e6:
31:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A6:FA:55:E4:A2:61:3F:66:C8:09:35:03:88:D6:11:25:E6:93:08
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/9Kb6VeSiYT9myAk1A4jWESXmkwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.78.0/24
Signature Algorithm: sha256WithRSAEncryption
25:8f:c4:77:26:6b:a2:b0:65:d3:87:37:09:56:d9:54:3f:69:
98:c1:4a:2c:7f:0f:a3:61:2c:fc:eb:e1:43:8e:fb:79:c5:d6:
a3:ff:dc:fe:85:c4:7d:10:8f:b8:f8:ed:81:1e:6a:92:71:cd:
e0:f0:22:e5:38:e6:b7:fc:11:d3:fa:2c:87:bb:9e:02:6c:7e:
68:d7:7f:5e:1f:47:b1:cb:5a:b2:6d:3c:d4:bf:81:61:5d:e2:
27:5d:81:8c:49:82:bd:0d:da:2e:f8:31:8e:10:de:24:33:4a:
47:b1:5d:90:51:5a:4e:2f:77:2a:dc:ab:ce:e7:12:d4:8d:dc:
f0:a3:69:51:73:ff:1e:94:16:a5:e1:ad:46:ba:0f:d3:a1:c1:
af:4f:33:f3:c3:55:df:fd:a8:75:8e:f8:87:bd:75:fd:0c:ee:
00:7b:e3:dc:78:2a:69:66:57:9e:01:2b:0e:b9:a7:9a:1c:62:
91:58:13:1a:62:64:74:cf:68:fa:15:63:b2:f9:71:02:b5:76:
8f:e5:77:f2:27:79:32:34:75:03:7b:3b:55:b4:71:cf:c0:e0:
dd:d8:45:f9:37:97:5d:84:c8:2b:c4:5c:d3:35:98:80:be:0c:
fb:02:8e:6a:fc:78:40:34:3b:b1:c7:9f:eb:b4:0a:d6:a6:da:
42:d8:48:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:29 2024 by rpki-client on console-fra.rpki-client.org