Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/du6ZhGjmix7CaTU5VlmfS5MsbJs.roa
File: du6ZhGjmix7CaTU5VlmfS5MsbJs.roa (raw, json)
Hash identifier: 2nEECAHYXn65IvUu7uQkyDYimI3ShiQm5vuDRqhiAlY=
Subject key identifier: 76:EE:99:84:68:E6:8B:1E:C2:69:35:39:56:59:9F:4B:93:2C:6C:9B
Certificate issuer: /CN=54404da602dab0625be7223d09320b1cd7aafced
Certificate serial: 01856BCA3DEE84D308869377075267E9B4AC
Authority key identifier: 54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/du6ZhGjmix7CaTU5VlmfS5MsbJs.roa
Signing time: Sun 01 Jan 2023 05:24:54 +0000
ROA not before: Sun 01 Jan 2023 05:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207117
IP address blocks: 45.152.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:3d:ee:84:d3:08:86:93:77:07:52:67:e9:b4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54404da602dab0625be7223d09320b1cd7aafced
Validity
Not Before: Jan 1 05:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76ee998468e68b1ec269353956599f4b932c6c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:0b:b6:42:49:c2:f5:0a:0b:11:80:b1:ed:
31:b4:f4:2f:75:14:64:d2:49:c8:99:dd:f0:2e:d2:
a9:ea:3a:a1:2f:a2:40:08:ba:ea:56:14:c4:76:f6:
9d:2e:56:f6:b3:45:0e:48:2e:9c:05:b5:f4:b1:b5:
b9:a4:31:2f:d7:11:16:9e:9c:3b:b3:49:8d:45:68:
91:07:65:3b:a8:b2:42:c1:c8:35:6c:cf:e1:1c:77:
86:f0:1e:ce:de:4a:89:52:85:03:93:15:b9:6c:f9:
0b:3a:cb:86:3c:84:eb:69:c8:4c:50:08:75:0d:f1:
0d:04:df:ad:ac:27:ee:80:1c:e8:f8:98:ce:38:23:
ca:90:6a:3a:60:d4:53:67:c2:5c:6f:e6:de:a9:7f:
3c:62:04:45:63:ce:a3:b4:d4:b8:b7:21:f2:6b:fb:
e5:f6:02:c6:11:96:b8:4f:57:a1:d1:54:24:67:61:
96:71:a6:b3:6f:7e:74:6e:ba:35:52:cb:f4:62:bc:
e0:53:0d:7c:b7:19:2f:b6:57:7f:c7:5f:38:00:5b:
e9:ed:44:9e:0c:7f:73:80:64:6c:28:e4:75:ad:5d:
cf:b1:de:3e:cd:04:4e:65:1a:a4:47:eb:ae:50:78:
34:5c:bd:47:d3:49:62:20:63:19:05:4d:83:d4:a6:
45:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EE:99:84:68:E6:8B:1E:C2:69:35:39:56:59:9F:4B:93:2C:6C:9B
X509v3 Authority Key Identifier:
keyid:54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/du6ZhGjmix7CaTU5VlmfS5MsbJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.78.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:09:3e:5e:47:dc:ce:7f:11:55:a5:c8:07:a8:75:48:5c:ed:
4c:e3:66:6b:f4:fe:2d:35:33:8e:4c:da:62:a0:68:26:b5:cb:
3a:a4:af:78:a0:fd:94:66:9c:3a:6f:ce:17:dd:01:0f:fe:1c:
c7:b4:cd:13:b1:53:b5:94:3f:72:cd:f7:0f:87:06:ce:86:b6:
5d:c7:84:a6:f9:f9:f6:21:50:b8:c5:81:4a:b6:8f:e8:cd:e0:
33:d4:97:cb:1f:83:e0:24:2a:8e:fd:16:93:b0:63:d4:6a:f2:
62:b6:39:63:c2:27:a6:50:21:32:c1:d4:ae:1a:af:2b:db:15:
ed:76:51:4f:45:5e:b4:d7:26:26:ce:a1:b2:b4:08:2e:18:a2:
f0:62:8d:6a:a4:79:4d:85:84:d5:2e:c0:7a:c5:28:3f:bd:6e:
22:5e:a5:a3:9c:2c:9b:5c:7c:3d:f7:f2:ee:9c:dd:f0:fb:16:
4b:34:6d:02:e8:ff:9b:07:23:d6:28:55:07:14:91:a3:2f:72:
03:f3:15:ea:1b:91:39:10:52:52:1c:a8:9d:b3:ce:fb:7f:f2:
86:78:1e:dc:5c:d0:c7:82:89:57:5f:51:f1:80:31:2e:9d:79:
78:fc:b7:c8:a7:24:4c:57:de:1e:0b:09:dc:fb:67:9a:1e:76:
1b:f4:fe:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:54 2024 by rpki-client on console-ams.rpki-client.org