Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/tGGxmPc9Wqfx4a8Crabf4OvZTyE.roa
File: tGGxmPc9Wqfx4a8Crabf4OvZTyE.roa (raw, json)
Hash identifier: YEpQ8LWr7yMd+Pk9nASEEUW0xvsiFuVrND676QVj7pM=
Subject key identifier: B4:61:B1:98:F7:3D:5A:A7:F1:E1:AF:02:AD:A6:DF:E0:EB:D9:4F:21
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018CC86FC2953F214427687E642F15E9F4AF
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/tGGxmPc9Wqfx4a8Crabf4OvZTyE.roa
Signing time: Tue 02 Jan 2024 04:30:16 +0000
ROA not before: Tue 02 Jan 2024 04:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62300
IP address blocks: 45.67.214.0/24 maxlen: 24
45.136.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 19:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:c2:95:3f:21:44:27:68:7e:64:2f:15:e9:f4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 2 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b461b198f73d5aa7f1e1af02ada6dfe0ebd94f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:8c:cd:a6:ba:d5:64:91:fc:92:b9:79:52:
26:05:98:45:09:83:42:34:8b:53:d6:84:02:98:35:
76:91:bf:68:d7:db:c1:41:2a:a9:4e:c8:cc:67:d5:
c9:e3:b6:00:2f:5f:e8:77:45:72:86:38:60:80:89:
a0:4a:e5:d3:4c:fb:95:ab:18:ea:2d:ae:74:1a:86:
6b:bd:2f:f0:19:8c:c1:9d:73:3e:6b:5b:42:8e:3a:
4d:d6:fb:71:ec:c0:18:a0:5a:b4:73:c3:89:62:ba:
e2:76:3d:5f:fc:b2:b8:16:01:65:4a:b3:fb:e5:15:
36:db:0a:2b:54:fd:e0:4f:b4:49:b2:e1:da:c0:b3:
6b:99:70:19:49:a8:7f:12:e5:25:bc:6d:17:2c:72:
49:0c:5e:31:ca:f5:d4:d4:ab:d5:d2:84:54:8b:34:
d7:03:d6:f3:3a:9b:77:f3:bb:9d:47:20:0f:2c:b1:
68:48:60:36:c3:a0:fa:de:77:09:f7:79:7a:95:37:
49:2b:af:b0:60:7e:0a:fc:ed:e1:fc:ea:03:b9:a4:
b5:18:1d:b0:b1:87:c2:ac:8e:dc:f2:c7:fc:0d:21:
f3:60:ba:69:ed:20:e8:90:9b:90:9c:ed:26:d1:a2:
88:6d:cb:36:45:aa:78:da:60:06:5c:9b:41:46:a6:
7a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:61:B1:98:F7:3D:5A:A7:F1:E1:AF:02:AD:A6:DF:E0:EB:D9:4F:21
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/tGGxmPc9Wqfx4a8Crabf4OvZTyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.214.0/24
45.136.146.0/24
Signature Algorithm: sha256WithRSAEncryption
97:1c:5f:22:1f:44:aa:56:19:0b:81:27:c3:89:c8:3d:1a:d5:
57:b7:8f:4e:b1:e2:6d:55:34:da:ce:59:4c:87:46:a1:98:12:
fa:88:95:11:36:93:ab:03:0a:76:ee:92:32:ba:41:39:8f:34:
20:91:11:1b:97:5b:4a:ef:d6:8a:e4:5d:01:6c:ff:76:8c:b9:
8f:eb:60:76:15:3f:81:6a:b9:b4:ba:d2:aa:26:81:61:2c:5e:
8f:00:31:0e:75:32:2b:45:0a:b0:d0:b9:10:30:26:dd:70:ae:
ee:36:a0:e1:9f:ba:26:56:d3:33:df:ac:f7:19:29:07:ed:93:
1b:2f:2e:5a:2a:4b:1a:de:8d:36:ca:92:76:18:38:17:da:7d:
32:f8:39:74:03:79:ac:93:63:0b:6e:5d:1b:f3:07:1a:ee:f2:
78:6c:2d:f4:f1:32:6b:f8:65:3c:ac:0b:d8:2d:96:24:4c:29:
db:1d:0c:6c:61:15:9d:d5:9b:5b:44:2e:6c:be:86:d1:0f:ef:
42:03:d7:66:0b:15:24:82:7d:6e:b7:91:bc:e1:f9:59:0d:44:
2f:75:24:6a:f8:c9:64:3e:70:6f:58:d5:4b:6f:1b:a2:a3:95:
b3:50:23:45:9a:8c:cb:c4:16:5d:e5:9c:46:38:e5:6d:68:db:
9a:4f:60:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 22:06:21 2024 by rpki-client on console-ams.rpki-client.org