Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/B0PuVKCBAkFm72vkxzpzT1uXCmM.roa
File: B0PuVKCBAkFm72vkxzpzT1uXCmM.roa (raw, json)
Hash identifier: 6MI2V3fRglMe9/x72v4GrgeGXwhdLw5JzvZyKWWccQY=
Subject key identifier: 07:43:EE:54:A0:81:02:41:66:EF:6B:E4:C7:3A:73:4F:5B:97:0A:63
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 0189D613A4280AB6AF2F49F1694771D9A4CE
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/B0PuVKCBAkFm72vkxzpzT1uXCmM.roa
Signing time: Tue 08 Aug 2023 16:55:58 +0000
ROA not before: Tue 08 Aug 2023 16:55:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200639
IP address blocks: 45.92.42.0/24 maxlen: 24
2a0e:1cc0:11::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 11 Oct 2023 09:54:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d6:13:a4:28:0a:b6:af:2f:49:f1:69:47:71:d9:a4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Aug 8 16:55:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0743ee54a081024166ef6be4c73a734f5b970a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e8:f7:bf:92:24:75:dc:a4:d6:ac:be:f3:6e:
67:ff:f7:85:d9:81:ed:f1:cf:c8:b3:f1:49:d2:fd:
b4:c2:e3:f0:49:28:34:c0:36:6e:54:b7:0c:5b:12:
b9:bd:4e:d9:e5:ee:0e:82:54:c7:88:ce:26:e5:c8:
91:2b:39:c1:14:98:d0:36:e6:40:b5:60:e3:fd:c7:
12:cc:b3:80:29:bd:99:8a:34:ab:e2:4a:3a:91:02:
44:09:6e:6b:9c:85:2a:c9:19:74:7c:55:3a:02:a7:
b4:1c:4e:14:28:c2:c2:dc:37:be:5d:c4:bb:20:8c:
2f:31:bb:19:7e:72:99:76:ef:b3:22:d0:18:85:f6:
8d:d3:a6:98:39:40:28:18:30:a9:9f:66:96:04:a3:
62:dc:d2:5b:50:77:ee:ca:08:96:20:9e:a0:e6:3e:
1b:d1:cf:73:20:8d:26:6a:34:e3:a4:98:8e:e2:72:
e7:99:9f:8e:39:eb:d4:06:cd:b4:d3:bc:e1:c9:ea:
f4:3f:e7:2f:d9:20:8d:17:32:7c:89:09:61:f8:fc:
6a:a0:f7:55:9f:eb:99:5b:83:ee:0a:3a:06:71:b3:
f8:42:9f:ec:e1:f6:6f:69:f4:16:61:f5:86:40:37:
70:e5:42:24:9c:71:f6:2b:54:a2:e4:01:2a:6a:23:
54:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:43:EE:54:A0:81:02:41:66:EF:6B:E4:C7:3A:73:4F:5B:97:0A:63
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/B0PuVKCBAkFm72vkxzpzT1uXCmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.42.0/24
IPv6:
2a0e:1cc0:11::/48
Signature Algorithm: sha256WithRSAEncryption
58:c9:d3:17:78:5a:a6:b8:7e:7e:fd:aa:6a:e0:62:8e:6a:5d:
1f:73:97:9a:ac:7d:50:3d:f7:29:1d:bb:58:cf:25:ef:d3:56:
90:4a:67:00:8c:f2:1b:cc:56:80:76:70:91:f2:72:9c:83:01:
86:46:f7:72:00:f1:04:ac:7f:86:27:b3:98:71:97:ab:5d:fe:
9f:50:30:ea:b1:6d:8e:32:cb:8b:ac:02:c1:79:84:c1:ac:f0:
d8:6e:be:42:4e:a5:cc:00:5d:dc:d3:51:a6:d5:15:d4:f2:d2:
1b:f4:c8:6a:0f:e3:48:9a:ac:ce:45:53:fd:99:c6:ad:5a:5b:
8d:67:8f:6d:b7:05:18:6f:b8:85:88:a8:90:ea:eb:aa:8f:1e:
12:a8:9d:b6:0e:cc:71:29:67:ea:80:67:ab:62:39:10:7d:7f:
a4:5d:c3:b8:4b:c9:28:1e:a0:f3:a0:53:9b:6a:17:00:13:7a:
f9:80:ef:6b:0b:dc:a0:0a:a4:9f:aa:bc:22:61:72:f7:a6:b5:
c3:8c:1a:12:a9:8e:e4:64:36:eb:f0:b6:db:81:6a:33:f8:14:
4c:0e:52:69:89:73:92:a1:fd:3e:96:e0:e9:cc:e6:ad:5b:23:
e9:c3:1b:25:89:db:b2:2a:6a:65:e7:bd:3d:91:d8:34:4f:a3:
fe:d5:ed:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:37 2024 by rpki-client on console-ams.rpki-client.org