Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/qwZJKJWBDgV1WvsKBwxT0D4Wxzk.roa
File: qwZJKJWBDgV1WvsKBwxT0D4Wxzk.roa (raw, json)
Hash identifier: NshtRrieiP0l1/A5mS/CmIUOY9M6WMHaKT5ElcT0IEI=
Subject key identifier: AB:06:49:28:95:81:0E:05:75:5A:FB:0A:07:0C:53:D0:3E:16:C7:39
Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial: 018CC8DEA2D26796F76EB2615E86BE04E611
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/qwZJKJWBDgV1WvsKBwxT0D4Wxzk.roa
Signing time: Tue 02 Jan 2024 06:31:22 +0000
ROA not before: Tue 02 Jan 2024 06:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206583
IP address blocks: 45.93.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 11:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:a2:d2:67:96:f7:6e:b2:61:5e:86:be:04:e6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Validity
Not Before: Jan 2 06:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab06492895810e05755afb0a070c53d03e16c739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:95:08:4d:34:48:e7:fd:43:11:e2:98:a8:46:
ee:8d:0d:11:57:76:63:d2:de:58:6f:23:83:45:8e:
40:82:96:b1:dc:7a:88:07:38:05:94:a4:42:a5:4f:
04:6b:d8:a2:41:32:8b:9d:2a:6d:20:96:68:60:fb:
e7:5d:10:a9:ae:68:61:30:cf:d2:05:47:9f:ef:57:
7c:aa:41:8d:af:3b:88:e8:2e:40:99:69:2b:90:12:
b5:71:f5:0c:d0:e0:f4:6c:1e:a9:38:ea:c9:7e:2e:
ec:67:96:04:4c:bc:04:4a:3d:76:82:68:56:0a:48:
98:d1:7c:9e:11:01:26:34:aa:dd:43:8b:ea:2c:0c:
dd:d5:06:ec:c7:ee:5b:6f:96:ca:72:63:d7:da:3d:
45:b4:6d:88:4a:11:ba:cd:7a:54:89:91:b1:6f:4a:
f6:08:a3:da:43:e8:e5:e9:c2:5d:e5:6d:fb:63:e7:
ae:99:d5:b1:95:b1:b2:94:9e:02:c4:d9:e1:fb:0d:
a0:1e:94:a6:66:1f:41:aa:e0:4e:9e:b8:88:eb:61:
4e:b4:d8:09:01:61:24:27:0d:8a:a9:a3:2d:15:e7:
07:a0:15:74:0d:bc:94:12:3c:5b:13:88:3a:22:a0:
f5:d9:0e:0e:7a:73:b3:23:89:7b:15:17:c1:0c:3f:
6a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:06:49:28:95:81:0E:05:75:5A:FB:0A:07:0C:53:D0:3E:16:C7:39
X509v3 Authority Key Identifier:
keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/qwZJKJWBDgV1WvsKBwxT0D4Wxzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.191.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:94:cc:76:c6:a2:f8:2a:f8:c9:40:7a:df:32:a1:28:2c:b2:
30:38:26:57:52:ab:cc:e4:49:3a:53:51:8b:81:58:f6:07:dd:
b2:f4:94:8d:3b:21:b8:4b:3e:f0:5d:07:42:72:cb:0f:29:ef:
83:68:36:51:21:3e:9b:e3:0e:7d:b7:f4:d3:a3:15:20:2e:d4:
48:e2:3e:11:78:24:d6:1c:5c:f2:d9:be:46:b4:34:ea:4c:28:
fd:66:7b:cf:74:a9:e0:82:9c:01:d0:a4:3d:ce:4d:0f:71:72:
a6:fe:bd:f5:28:88:fe:d5:a1:d0:75:e2:70:4e:42:d3:94:16:
c3:7f:f7:16:3f:f4:27:b2:5c:3a:e0:73:af:7a:98:c6:4f:d3:
a4:d2:8f:ce:d9:fd:52:ac:cb:da:65:a9:0c:37:c4:1e:a9:52:
c4:6a:b8:e3:df:cd:ad:57:f5:83:1f:df:a7:bf:5d:4e:dc:4d:
86:59:d6:15:e4:4f:f6:ca:af:17:d1:a6:67:a4:c3:39:76:b8:
08:5a:61:dc:78:48:19:60:b4:02:ab:14:44:c0:21:1c:8a:d4:
4f:28:18:7f:78:85:af:b5:1a:18:6e:c3:e0:62:70:f4:c8:d6:
1b:cc:ad:7b:2e:88:2b:eb:19:5f:65:18:04:0a:a4:fb:8b:c8:
5c:24:c7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:33 2025 by rpki-client