Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/J-Is6I97bDXx336wP7LNPlnLjcs.roa
File: J-Is6I97bDXx336wP7LNPlnLjcs.roa (raw, json)
Hash identifier: PqjbJExAwCpMHOvaaYr6Y6dnl7S9ApvpZoKtG7aYHqg=
Subject key identifier: 27:E2:2C:E8:8F:7B:6C:35:F1:DF:7E:B0:3F:B2:CD:3E:59:CB:8D:CB
Certificate issuer: /CN=ac91f230a0e2eeda3810522e74a698200713e620
Certificate serial: 0188442B3EC9E255AB75ABA634B64E17F5B9
Authority key identifier: AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/J-Is6I97bDXx336wP7LNPlnLjcs.roa
Signing time: Mon 22 May 2023 15:54:24 +0000
ROA not before: Mon 22 May 2023 15:54:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 45.131.20.0/24 maxlen: 24
45.131.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 May 2023 12:24:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:44:2b:3e:c9:e2:55:ab:75:ab:a6:34:b6:4e:17:f5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac91f230a0e2eeda3810522e74a698200713e620
Validity
Not Before: May 22 15:54:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27e22ce88f7b6c35f1df7eb03fb2cd3e59cb8dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:06:60:5d:98:4e:5f:1b:61:c1:b3:72:8c:ba:
64:91:2f:84:f9:b6:c4:02:04:ff:d5:b1:04:8b:d9:
0a:74:fa:5a:81:ba:4e:e9:d9:8e:88:37:45:15:34:
9b:77:12:86:59:cf:90:97:e0:70:8b:3d:07:3c:60:
ab:b5:cd:82:86:d6:d8:ad:45:35:fd:d3:35:05:b2:
fc:fd:f8:f3:44:21:97:f8:07:cc:ba:e7:7a:cf:70:
f1:17:0b:35:f8:25:dd:9d:1c:2e:fa:85:89:d0:45:
d4:1a:25:69:b7:35:6a:74:69:0c:9b:c0:eb:45:00:
8e:db:72:75:f5:41:59:55:72:7c:32:fe:94:65:03:
b6:b0:73:12:c9:56:28:eb:10:88:9f:62:88:a3:98:
05:3d:a4:01:2d:3d:c2:94:f6:2b:ea:9f:1b:7d:df:
8f:fb:c7:fd:9f:94:28:03:0e:27:0f:f5:ad:2d:cb:
cd:ef:9f:1d:7c:2c:66:72:4a:93:5c:6c:39:28:90:
6d:cc:5b:49:32:d5:c8:ed:ef:4f:86:6e:5b:46:21:
13:16:e6:ec:76:06:fd:bb:77:4c:b1:d6:e2:11:1f:
e8:3e:da:bd:91:42:7c:8e:9a:08:9b:60:65:21:60:
e2:94:20:ff:57:b4:9b:52:ca:b2:18:97:62:fe:b9:
36:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E2:2C:E8:8F:7B:6C:35:F1:DF:7E:B0:3F:B2:CD:3E:59:CB:8D:CB
X509v3 Authority Key Identifier:
keyid:AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/J-Is6I97bDXx336wP7LNPlnLjcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.20.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:d3:38:3c:3e:a7:be:70:68:e5:ee:f1:21:a7:92:6b:63:30:
25:90:64:47:e1:60:c0:0d:fd:ad:68:e2:09:ce:79:73:41:7f:
e2:71:14:09:3f:21:2c:72:cf:3a:0e:77:e5:45:39:2f:fa:54:
e2:2a:8c:5c:82:f0:9a:41:77:cf:01:c9:69:f8:19:4f:f4:2f:
c4:45:4b:ad:32:ff:5d:ed:d1:3e:7f:11:9f:ab:fd:89:88:c1:
d2:0d:4c:ae:90:89:82:f9:59:2b:36:d8:e7:54:d2:d1:cc:0a:
d7:7d:85:10:ab:81:5d:7f:14:51:9f:04:2e:70:0f:5b:2d:51:
8c:6d:fc:cd:c3:9a:eb:08:ae:d4:7d:6f:05:2e:64:0a:af:6c:
0a:4e:6d:76:75:5e:38:1b:c6:63:e7:97:df:48:a3:eb:41:fc:
01:77:fb:3e:5b:37:39:b0:4d:36:98:c0:ae:d5:61:0b:5b:d5:
e8:22:48:ab:30:d8:66:0f:0f:8a:92:6f:62:30:30:74:dc:7f:
6b:91:56:63:51:b8:8c:e6:d8:6e:da:06:b7:e3:63:03:46:85:
de:a6:9a:8b:e5:96:4d:c2:1f:d5:32:be:2e:c3:52:7f:b0:68:
8b:fc:7c:87:cd:9f:c7:fb:32:d0:28:4b:0a:8c:ce:1c:3a:b2:
44:c3:aa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:47 2024 by rpki-client on console-ams.rpki-client.org