Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-aSJNBTpcGeuMkG6IVg30umY7cs.roa
File: 1-aSJNBTpcGeuMkG6IVg30umY7cs.roa (raw, json)
Hash identifier: gKBtJF0hKBUJyu3Ttrc2PP2NJ3anSJ0qWyjUXoAud5A=
Subject key identifier: F9:A4:89:34:14:E9:70:67:AE:32:41:BA:21:58:37:D2:E9:98:ED:CB
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018800286D0CFCFE5C8BFC90517523209CCB
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-aSJNBTpcGeuMkG6IVg30umY7cs.roa
Signing time: Tue 09 May 2023 10:57:09 +0000
ROA not before: Tue 09 May 2023 10:57:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139659
IP address blocks: 45.11.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:00:28:6d:0c:fc:fe:5c:8b:fc:90:51:75:23:20:9c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: May 9 10:57:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9a4893414e97067ae3241ba215837d2e998edcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2a:2a:5f:d6:17:aa:21:89:0b:c9:bf:e1:64:
ac:d0:8f:fc:22:84:c1:da:64:f1:98:4d:8c:8a:ce:
7d:13:7f:30:b3:0e:cb:dd:85:55:f7:74:c7:31:28:
3e:26:e8:38:09:ba:69:02:8d:5d:59:c2:a2:88:5e:
4f:ee:af:46:1c:76:7b:63:e2:5b:e9:44:dc:b6:21:
0f:35:12:09:82:42:6c:ac:10:de:2d:f0:35:1d:65:
54:4c:0d:d2:42:95:7a:0e:b1:a7:f9:93:27:7e:26:
64:2d:ab:66:03:11:72:f4:3b:9c:8f:ad:e2:59:b5:
92:f3:fb:c8:8b:3e:d3:8a:05:48:02:69:0c:86:63:
5f:a8:8a:e3:fa:61:d6:83:fd:a8:70:c1:4c:6b:94:
75:32:b4:dd:97:ae:da:d2:75:cc:da:ec:ac:5d:74:
1e:86:5c:06:23:e7:63:c0:f1:60:6b:2a:a3:e7:1e:
b0:eb:fa:14:98:17:60:25:84:22:3c:82:09:c7:13:
d8:55:51:87:cb:ea:57:31:44:c3:5b:d4:bd:8c:2a:
83:ac:dc:57:96:a1:17:2c:3a:c6:30:2c:05:40:f5:
91:e6:9c:28:36:53:9d:f2:29:56:8f:d8:7b:16:d7:
37:e1:c2:eb:f3:57:48:0e:a0:06:7d:7a:c6:47:3c:
a3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A4:89:34:14:E9:70:67:AE:32:41:BA:21:58:37:D2:E9:98:ED:CB
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-aSJNBTpcGeuMkG6IVg30umY7cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.46.0/24
Signature Algorithm: sha256WithRSAEncryption
30:d4:fd:e6:38:7b:35:69:9e:28:9c:5a:f6:1c:71:8d:b6:7d:
3b:e3:fb:c5:ab:2c:6e:7e:ad:2c:af:cf:db:c7:1f:98:6d:08:
e2:05:6d:70:7e:70:e1:9b:dd:aa:62:53:4f:4f:d0:bf:fa:19:
9f:4b:38:7c:61:75:be:2c:7f:6f:cc:04:10:a5:13:3c:ee:ad:
24:ac:7a:fa:0f:77:a6:28:ee:91:b3:08:f2:7b:a2:0d:ac:1f:
33:cb:ec:73:52:a2:c5:41:67:c4:74:fd:06:06:bf:38:86:e9:
4f:47:b9:a5:27:98:1e:da:30:69:ab:5b:0d:1d:7f:33:be:2e:
69:75:f9:29:54:3b:19:c0:d0:da:09:57:11:c3:54:cf:40:2a:
15:a0:99:1e:9d:16:7a:44:20:1e:6a:f9:f5:20:4c:cc:80:8d:
1a:bb:ae:0b:56:28:b0:54:21:91:9b:da:dd:68:40:39:15:8c:
60:4e:3d:38:36:8f:4d:89:0e:88:36:8f:a1:60:71:4a:fe:60:
ce:b5:8b:70:de:53:d3:5a:e8:f0:49:06:8d:e8:e4:61:b2:9e:
e3:c9:6c:9c:4e:9f:d0:a6:82:77:80:08:6d:bd:4c:bd:d3:d5:
60:b2:5e:3a:b7:a4:d8:4a:35:48:11:a8:c3:1d:15:31:fb:8c:
41:e1:9d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-fra.rpki-client.org