Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/RXI3fSni88MVc8_hL0JZWfBdcqQ.roa
File: RXI3fSni88MVc8_hL0JZWfBdcqQ.roa (raw, json)
Hash identifier: sqRtw+nh+Erg++Z2lcsv8qGHFrm2eMldQfK4b8jUfPY=
Subject key identifier: 45:72:37:7D:29:E2:F3:C3:15:73:CF:E1:2F:42:59:59:F0:5D:72:A4
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 01856DAF67E5D53F97FDFE4AC8DA9530C83E
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/RXI3fSni88MVc8_hL0JZWfBdcqQ.roa
Signing time: Sun 01 Jan 2023 14:14:49 +0000
ROA not before: Sun 01 Jan 2023 14:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30848
IP address blocks: 45.131.76.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Apr 2023 13:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:67:e5:d5:3f:97:fd:fe:4a:c8:da:95:30:c8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 14:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4572377d29e2f3c31573cfe12f425959f05d72a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:11:09:63:77:3e:34:69:99:7e:d8:eb:6c:c7:
a4:49:85:80:62:fa:83:2b:89:03:8a:63:4e:3c:cb:
44:48:4f:24:b9:6e:87:06:d7:8b:a3:b2:9c:1a:f4:
9e:92:00:c3:d7:43:dd:98:84:d1:db:0a:c3:ed:16:
da:60:0e:4c:03:ae:60:75:1e:cb:d7:fc:76:1e:ee:
52:d1:84:2e:75:3d:2d:c0:99:b3:bb:fd:e7:b6:10:
8d:dc:ae:86:56:39:81:1e:66:96:40:13:94:7d:37:
a1:c8:5f:78:0c:c5:c0:73:bf:2e:83:40:2d:8b:d5:
42:e6:28:be:99:bc:4e:66:f7:5b:a8:98:47:af:d6:
9f:d7:1f:12:e5:b6:95:ec:64:b4:24:b3:b3:fe:aa:
e6:f0:cf:44:d2:70:8b:7e:2f:23:d1:e8:05:21:ca:
4d:71:93:d6:62:a1:b8:a3:f7:27:0e:d4:47:4d:e7:
71:2c:29:3b:fd:4a:8a:15:68:39:c5:d2:6d:43:61:
37:9b:12:f4:17:e1:70:de:26:a7:5f:8c:36:3e:ca:
d4:9c:2e:f3:e1:c1:2e:ab:91:a1:98:1b:b4:c2:c6:
01:82:d7:7e:8a:ca:db:71:1e:cb:a6:47:1f:2a:ee:
8a:d9:de:28:ae:69:35:69:5d:41:9f:97:2d:7e:fe:
98:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:72:37:7D:29:E2:F3:C3:15:73:CF:E1:2F:42:59:59:F0:5D:72:A4
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/RXI3fSni88MVc8_hL0JZWfBdcqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.76.0/23
Signature Algorithm: sha256WithRSAEncryption
22:fa:10:33:67:18:8d:d7:13:be:9d:9c:6b:ee:d5:a7:3f:cf:
60:5a:b9:48:6d:6e:82:f8:7e:64:57:58:58:01:c5:43:58:01:
f0:fd:8d:5e:df:b5:08:37:b8:c6:dd:a4:4e:35:7e:30:83:b6:
4d:b8:ff:52:b0:1e:46:0b:04:ff:67:53:30:8f:22:89:39:46:
27:bd:06:8d:11:54:c0:5b:07:8b:5f:48:76:c7:0b:fb:ff:47:
07:ca:26:1c:c8:99:80:d8:4d:66:2a:d6:fb:a8:af:8c:63:3b:
ac:92:0d:e2:45:26:b9:a2:58:cd:c9:d4:c4:f8:ce:bc:44:fe:
cf:42:41:ca:b3:cc:82:14:e7:c5:27:b3:29:7b:9b:5e:83:cb:
97:cb:12:38:e0:c6:73:0b:a4:6a:8d:a1:0a:66:59:9b:e2:f7:
1c:b8:fd:87:4e:99:db:99:1d:97:62:83:00:a7:d1:f9:af:e4:
7c:78:15:41:7f:8f:69:57:68:1a:70:c8:b6:e2:c1:75:20:45:
df:b4:4e:2d:13:66:b0:ac:3e:9c:87:7f:da:a5:59:1f:9a:8b:
f7:10:60:b1:ad:73:c9:6a:42:6c:56:9e:1b:e2:e1:87:a0:26:
c7:0e:f4:91:99:e6:8a:d5:eb:92:1a:c8:dd:ea:aa:98:6d:b5:
24:75:7f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:29 2024 by rpki-client on console-fra.rpki-client.org