Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/SkoM5xd3VZIxJBwGjLdAzR3mIdM.roa
File: SkoM5xd3VZIxJBwGjLdAzR3mIdM.roa (raw, json)
Hash identifier: Wh3fwB6vq8lOzFFCUxyYHaW+WcaD3Av3v3Cxor4Ig5E=
Subject key identifier: 4A:4A:0C:E7:17:77:55:92:31:24:1C:06:8C:B7:40:CD:1D:E6:21:D3
Certificate issuer: /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial: 01857082BC03D62D31FA788D2C125C0AA779
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/SkoM5xd3VZIxJBwGjLdAzR3mIdM.roa
Signing time: Mon 02 Jan 2023 03:24:54 +0000
ROA not before: Mon 02 Jan 2023 03:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210118
IP address blocks: 45.154.61.0/24 maxlen: 24
2a0f:b100:100::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:bc:03:d6:2d:31:fa:78:8d:2c:12:5c:0a:a7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Validity
Not Before: Jan 2 03:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a4a0ce71777559231241c068cb740cd1de621d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:90:fc:3c:8e:47:14:38:f4:88:5a:41:1a:4f:
4b:93:45:f3:d4:f2:85:b3:fc:f0:8e:d0:04:5f:cf:
0c:d6:f2:db:69:34:bc:18:70:e0:33:2a:b9:aa:aa:
73:af:2a:27:f7:02:6e:a0:33:90:2c:de:46:bc:2f:
8a:4e:17:43:d7:7c:72:74:91:63:e3:a6:01:3a:9d:
a4:a3:ec:23:fe:d2:1f:1d:8b:09:b3:37:df:ad:f3:
99:81:f5:0a:90:75:39:0f:4b:da:73:e4:60:96:1c:
38:23:e9:e1:47:e4:6f:b7:80:ca:1d:bb:06:73:a9:
1a:a1:1e:a6:b9:e8:75:0e:2a:e5:c9:cd:5f:76:7c:
1d:24:9d:cf:df:0e:60:9c:35:99:2b:4a:10:41:a6:
b0:ae:d7:16:fc:cf:20:85:4e:28:5a:d4:77:7a:9f:
de:20:bd:7c:7a:08:40:e7:66:b2:99:af:3c:a9:8e:
c9:65:a5:e1:df:b9:c2:15:c1:a4:a0:3d:f4:0d:a6:
af:23:3d:8e:4e:f1:a7:dc:8c:91:15:88:59:20:6c:
7a:ed:53:01:1a:96:c0:0f:90:08:76:94:8b:d2:f3:
09:ff:70:ac:64:01:90:3e:0b:67:da:4d:42:81:d3:
50:c8:50:56:ce:73:a7:95:12:09:45:8a:82:db:06:
65:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4A:0C:E7:17:77:55:92:31:24:1C:06:8C:B7:40:CD:1D:E6:21:D3
X509v3 Authority Key Identifier:
keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/SkoM5xd3VZIxJBwGjLdAzR3mIdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.61.0/24
IPv6:
2a0f:b100:100::/40
Signature Algorithm: sha256WithRSAEncryption
93:2e:f0:dd:25:98:22:50:25:fd:77:5a:a8:d9:89:dd:eb:07:
18:76:bb:a7:d5:b9:71:2c:84:30:41:c1:55:6f:80:b9:eb:4b:
cd:5d:06:3c:15:cd:31:43:1f:1f:3b:06:13:e6:6a:db:9d:a4:
72:f4:79:9c:6d:14:ae:d9:08:02:17:0a:ba:b2:cf:66:5c:49:
81:b7:90:10:c3:4f:4e:56:d9:ee:47:15:81:cb:d3:45:3e:11:
6d:9a:65:80:75:13:a9:c8:d1:73:b7:6a:e4:54:3f:04:9a:fa:
bd:43:d3:05:4e:ef:83:c7:45:ea:24:2f:7f:52:f9:d9:e0:88:
cb:60:75:84:fa:7f:cb:05:08:ad:39:dd:8e:69:b7:2e:0b:39:
56:83:17:57:28:53:7b:0f:0a:6d:9e:6a:e9:4e:29:dc:be:1c:
68:4a:56:1e:cf:d4:f3:05:10:bd:bd:70:dd:f4:ba:fc:12:e0:
c4:d4:db:9a:f4:d5:9c:b3:10:0a:be:63:f6:c3:2e:0c:51:c9:
77:c2:eb:f3:37:32:1b:6a:d4:6a:ef:05:14:ed:f9:95:a6:42:
72:51:51:bf:dc:87:07:77:23:6a:f6:4e:42:f7:92:5f:5d:b2:
85:25:ec:78:92:4f:43:6c:bb:61:b6:59:8f:56:d7:fb:aa:99:
64:97:9f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:50 2024 by rpki-client on console-ams.rpki-client.org