Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/J-lBC4aXfbYTYwvTscEr0exPgjE.roa
File: J-lBC4aXfbYTYwvTscEr0exPgjE.roa (raw, json)
Hash identifier: kF0hznrZSybwLz15CB2s6m6RX9WEUGsTS9S3+OwQHVE=
Subject key identifier: 27:E9:41:0B:86:97:7D:B6:13:63:0B:D3:B1:C1:2B:D1:EC:4F:82:31
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 01856FCB907E914C5C79C4FBC90FF9BDEA34
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/J-lBC4aXfbYTYwvTscEr0exPgjE.roa
Signing time: Mon 02 Jan 2023 00:04:49 +0000
ROA not before: Mon 02 Jan 2023 00:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 45.92.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Jun 2023 02:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:90:7e:91:4c:5c:79:c4:fb:c9:0f:f9:bd:ea:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 2 00:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27e9410b86977db613630bd3b1c12bd1ec4f8231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:35:3d:cb:8a:58:b5:cb:31:e1:fd:ce:b5:
d5:40:e4:9a:77:2f:2a:f9:39:2d:31:57:14:56:20:
7e:e6:3d:c3:0f:79:50:59:19:a5:74:18:54:89:92:
c6:92:cb:21:49:f1:21:e2:35:c9:94:b5:92:a9:d7:
e9:48:3a:63:88:36:09:9d:45:3e:b1:e9:79:16:de:
f5:9b:29:f0:82:4a:44:66:99:08:38:83:7a:ec:61:
ec:60:05:fe:1e:f6:ed:79:e4:3b:82:68:f5:de:c6:
a3:35:ae:7c:80:d1:75:1a:76:18:fe:2d:65:a2:f5:
59:98:bc:c4:c1:6a:a5:17:c5:8e:4c:47:dd:5b:5c:
bc:67:58:d3:6c:1c:6c:a1:3c:cb:2b:f7:26:bf:95:
fe:3a:54:5e:8a:db:71:62:b4:68:8e:ee:4d:63:f9:
da:95:a3:92:76:6a:9e:93:31:26:f5:81:4d:a2:6b:
87:ad:0e:b3:61:fe:20:2b:4e:4a:8d:cb:9b:3f:1a:
37:6e:42:fb:6a:46:d7:68:de:1f:88:4c:3c:2a:8c:
62:38:a5:f5:d3:04:2f:fe:3d:f1:b5:97:28:36:5e:
9e:a0:72:af:84:dd:c1:45:e2:07:14:06:bf:88:90:
5a:7c:a3:92:a3:e1:f8:e2:87:0f:a3:28:19:63:d0:
65:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E9:41:0B:86:97:7D:B6:13:63:0B:D3:B1:C1:2B:D1:EC:4F:82:31
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/J-lBC4aXfbYTYwvTscEr0exPgjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.29.0/24
Signature Algorithm: sha256WithRSAEncryption
06:c3:00:6e:e7:a5:74:03:20:54:6d:bf:5d:cb:2e:20:93:93:
e6:c1:b8:94:ad:ef:0e:69:dd:a6:ab:c0:0c:a9:f1:3d:a6:fb:
1a:b6:ac:72:bb:90:a1:c3:42:9a:f7:ec:6f:7f:c4:eb:b0:9f:
20:00:0c:b9:7e:55:a0:89:4d:0a:34:9a:71:0a:fb:c5:66:65:
f7:3d:8f:00:e2:e5:f5:9e:d0:63:0b:a5:ed:96:cb:4a:6d:c8:
d3:d5:09:47:f9:55:e3:27:02:28:5b:18:02:3b:ea:94:60:89:
06:4a:65:2b:ec:f0:c6:ba:06:a2:6c:0e:cd:0c:a1:e3:db:80:
eb:ff:15:4e:39:3d:18:bd:dc:ea:e0:d5:03:68:6f:a4:22:d4:
dd:e4:34:93:14:e7:a5:04:34:1d:8a:a6:2b:0b:dd:1b:a7:5d:
ca:46:eb:05:fd:95:be:45:37:31:71:d7:95:30:48:18:dc:91:
53:be:83:68:41:b2:13:f3:bf:4f:98:58:67:2d:2f:4f:f4:34:
9a:33:85:20:f5:08:9f:8b:98:d9:82:c5:06:00:3e:ac:c7:78:
77:4a:ea:dd:7e:61:14:28:33:1d:3c:8b:2d:a4:5a:40:94:f9:
06:f4:06:e1:d0:98:f3:99:c5:02:4f:90:e1:75:bf:bb:7c:0d:
4b:9c:c1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-fra.rpki-client.org