Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/kS0PvWSFx99plsH8XOdsgeGhopM.roa
File: kS0PvWSFx99plsH8XOdsgeGhopM.roa (raw, json)
Hash identifier: i7mU0pb32RehKcUvylrRLNp10YanGUIRqsaf6bgs3cI=
Subject key identifier: 91:2D:0F:BD:64:85:C7:DF:69:96:C1:FC:5C:E7:6C:81:E1:A1:A2:93
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01856F1DCD4487AF06FE7F691654E6DCBA7D
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/kS0PvWSFx99plsH8XOdsgeGhopM.roa
Signing time: Sun 01 Jan 2023 20:55:02 +0000
ROA not before: Sun 01 Jan 2023 20:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201839
IP address blocks: 45.67.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:cd:44:87:af:06:fe:7f:69:16:54:e6:dc:ba:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 1 20:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=912d0fbd6485c7df6996c1fc5ce76c81e1a1a293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:40:69:d7:d3:ac:b0:09:ac:28:51:f2:fa:
4f:53:c3:db:d9:be:5e:7e:f1:42:47:5c:43:52:f5:
50:92:1d:2f:39:59:04:3f:c0:2b:58:02:ce:95:4d:
33:e9:62:4c:10:c7:a6:89:e9:94:57:63:d8:f1:68:
85:45:33:0b:f3:6d:a0:aa:4a:22:5f:cd:d3:c0:fd:
e1:8d:f8:46:24:b9:e4:8a:eb:43:f9:2c:2c:0f:25:
24:b8:4c:ad:04:da:88:0a:b8:c2:15:61:d5:53:55:
f0:6e:f2:b9:37:fe:12:cd:b6:29:8a:3b:03:97:b6:
62:0a:aa:7b:07:68:31:7d:1f:27:fa:f0:62:18:f5:
9a:54:ca:e2:db:c7:7f:1b:b9:5f:f0:4b:26:42:2c:
42:3c:66:89:a7:65:df:c2:49:14:a2:4f:cb:60:0c:
b0:84:c6:46:4e:a8:a2:a4:9a:11:b4:d1:26:ca:a5:
de:ad:52:28:aa:23:0d:bd:bf:fd:d2:b8:83:47:90:
0e:08:83:46:16:a8:70:18:e2:c6:49:b9:3c:90:2b:
e0:4d:50:3f:bc:8f:44:19:08:48:cd:ad:3d:3f:f4:
19:44:b8:21:db:6d:7a:8f:69:66:4e:66:eb:f1:6b:
96:34:95:64:5a:01:60:89:27:8a:e4:4c:30:ab:85:
c9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2D:0F:BD:64:85:C7:DF:69:96:C1:FC:5C:E7:6C:81:E1:A1:A2:93
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/kS0PvWSFx99plsH8XOdsgeGhopM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.215.0/24
Signature Algorithm: sha256WithRSAEncryption
60:0a:a1:6b:a7:14:07:24:40:b9:68:70:1e:07:ed:bf:a2:22:
0e:9f:e0:e0:81:32:d7:93:54:cb:c2:18:f7:87:a9:bf:60:30:
ee:06:d1:4c:4d:08:8f:44:78:e6:6c:b3:4a:3f:3c:84:59:3e:
58:91:d7:38:b6:e6:12:58:39:36:4c:53:9a:1a:a1:8b:43:69:
97:4d:5e:c0:54:ae:9a:c9:52:3d:ae:5c:89:b4:aa:a1:ff:b2:
25:a2:c1:25:4e:a3:b8:fe:fd:03:f6:a6:dc:3f:a8:17:44:15:
6f:0d:5e:43:64:7c:cc:be:aa:fb:40:4a:e4:a4:3c:49:41:e9:
71:d6:69:7c:74:a4:c1:e4:b9:75:67:00:70:ec:85:b1:22:5a:
86:65:55:46:57:bf:7f:19:6b:77:69:63:e5:73:50:c1:ef:15:
df:a9:d6:d8:42:48:bb:da:3f:15:04:22:3e:cc:15:6a:31:37:
a0:e9:0f:9b:8a:80:2d:ab:fd:10:f6:2c:82:b6:f6:00:60:d6:
f6:0b:99:8d:e1:03:f8:6c:2a:97:41:67:6f:c3:9f:5c:80:2c:
1f:95:83:e0:ab:7c:1c:d2:b4:51:94:57:9a:37:ac:6c:26:5f:
e8:03:1c:e7:6c:6a:18:d0:63:0a:35:f5:1b:b8:cc:93:33:f9:
04:3e:38:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org