Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/51-CqYFnY9JGebppKGrcNdGCMXQ.roa
File: 51-CqYFnY9JGebppKGrcNdGCMXQ.roa (raw, json)
Hash identifier: ApAjPTeBXc9mR80JWjHOYMTACe+evMUhj3UsQ3nhOJI=
Subject key identifier: E7:5F:82:A9:81:67:63:D2:46:79:BA:69:28:6A:DC:35:D1:82:31:74
Certificate issuer: /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial: 018B2A09A04AB7FAD4E8575A63DC95BC878D
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/51-CqYFnY9JGebppKGrcNdGCMXQ.roa
Signing time: Fri 13 Oct 2023 17:15:55 +0000
ROA not before: Fri 13 Oct 2023 17:15:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202945
IP address blocks: 45.154.60.0/24 maxlen: 24
2a0f:b100:2::/48 maxlen: 48
2a0f:b100::/44 maxlen: 44
2a0f:b100:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Oct 2023 19:28:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2a:09:a0:4a:b7:fa:d4:e8:57:5a:63:dc:95:bc:87:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Validity
Not Before: Oct 13 17:15:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e75f82a9816763d24679ba69286adc35d1823174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:d2:fb:9a:d4:97:00:b9:82:8f:c3:7d:d4:
f1:cd:74:cf:90:91:51:4f:d9:28:2a:4d:5f:ae:62:
f7:39:99:08:8c:62:d1:f8:c8:61:76:0b:af:64:2d:
6b:9e:3b:bb:6d:8d:43:c8:a4:8a:da:e4:91:18:5a:
29:a3:0e:9a:7f:c8:3c:51:33:db:eb:a0:29:96:7c:
20:91:4d:aa:9a:bc:9a:ba:f0:4e:b2:40:f8:e6:87:
71:1d:2f:f7:1a:4e:40:a4:04:cf:67:b4:1f:fb:12:
c1:be:5b:ab:c4:1a:5a:96:90:24:43:7e:c7:81:29:
fb:1d:4b:c9:6a:02:3a:42:4a:d0:39:2d:7e:61:66:
bb:ad:b9:7d:07:9c:48:de:d0:af:67:07:a1:19:47:
ae:e1:61:e6:3d:0d:50:50:7a:4e:72:66:36:66:72:
b2:4b:ad:29:e1:61:fa:71:95:7b:63:9a:16:e7:ce:
42:0b:66:61:9b:62:e4:f1:cf:43:90:b9:86:d9:76:
5f:58:f7:60:2e:24:4f:25:68:16:fd:19:49:76:cf:
39:ae:07:fa:38:2f:34:3c:94:2b:e5:59:fd:d2:69:
db:27:77:66:7f:b5:10:b8:b2:5b:cc:57:d7:17:d5:
b5:19:00:1e:cc:05:f1:40:5d:6e:76:dd:3b:27:cc:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5F:82:A9:81:67:63:D2:46:79:BA:69:28:6A:DC:35:D1:82:31:74
X509v3 Authority Key Identifier:
keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/51-CqYFnY9JGebppKGrcNdGCMXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.60.0/24
IPv6:
2a0f:b100::/44
Signature Algorithm: sha256WithRSAEncryption
02:7b:fb:e3:1f:64:6e:a5:3e:24:83:82:15:dd:84:71:d3:82:
7b:58:01:61:29:64:a9:e9:f4:91:67:4a:cd:d9:87:f6:7e:a9:
6a:03:cb:78:04:e3:44:7a:df:27:0b:6f:0d:a8:6e:34:cc:50:
9c:0d:41:67:d6:1d:d1:44:58:51:21:97:45:72:ab:c4:31:b7:
de:c6:0e:d5:23:16:c6:7c:2a:03:fb:0d:a5:22:38:60:e7:f0:
0b:dc:f9:fd:a8:65:ea:7a:6b:09:b1:11:64:09:7b:da:30:c1:
e4:f7:4e:95:ee:e7:18:f8:58:73:5c:c3:0d:a6:e5:9d:ac:d2:
fd:56:fe:ac:96:be:ff:a9:96:5d:45:a8:61:0e:ce:66:c7:78:
0f:3a:34:6b:b7:60:91:95:6f:24:22:38:ad:40:c2:de:7d:26:
cd:2e:f6:01:2c:86:37:21:d3:77:15:fb:7e:7f:34:14:2f:28:
70:aa:e7:43:a7:7e:db:a6:db:6c:e2:22:7d:04:95:51:57:df:
8c:bf:8f:d7:ed:5e:58:1c:72:a4:b3:0e:02:35:0b:17:4e:b3:
4c:a7:17:0b:34:52:5d:b8:79:14:08:79:c7:04:8c:e2:4c:96:
3b:2e:dc:3b:42:39:27:b9:ab:81:a8:29:0e:55:8a:d5:b7:78:
f7:13:f3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:58 2024 by rpki-client on console-fra.rpki-client.org