Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/rc74xu1VLmfgr0DbuUVjRyX1hJs.roa
File: rc74xu1VLmfgr0DbuUVjRyX1hJs.roa (raw, json)
Hash identifier: rDN0vXdFwMf/5M34h9Zm1LyaqHXcV+jGx/gqq/TOPto=
Subject key identifier: AD:CE:F8:C6:ED:55:2E:67:E0:AF:40:DB:B9:45:63:47:25:F5:84:9B
Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial: 018571A7991DADC153C257C3DF4B0946B97C
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/rc74xu1VLmfgr0DbuUVjRyX1hJs.roa
Signing time: Mon 02 Jan 2023 08:44:47 +0000
ROA not before: Mon 02 Jan 2023 08:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206583
IP address blocks: 45.93.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:99:1d:ad:c1:53:c2:57:c3:df:4b:09:46:b9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Validity
Not Before: Jan 2 08:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adcef8c6ed552e67e0af40dbb945634725f5849b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:5b:a1:81:3d:a7:84:24:bf:57:9d:4c:d0:
de:d1:04:91:d2:60:c3:d8:15:41:09:a0:ce:3b:f7:
62:64:63:fb:ac:39:0c:4a:8d:1d:81:f9:0b:18:f7:
38:34:f0:ce:aa:be:60:63:c0:c1:08:80:4d:01:5b:
86:39:f4:38:89:bf:8c:2b:c5:c9:ed:e1:44:f9:24:
ba:8f:2a:73:4c:a8:25:c4:ee:76:3f:3a:62:19:a7:
cf:9b:d2:b3:7d:f7:e0:03:2a:23:06:66:07:0f:6d:
6a:49:07:44:49:7a:ee:64:5e:11:89:5a:c3:b0:70:
57:50:01:e9:ec:ec:d7:5b:8f:fb:96:07:80:79:99:
55:11:dc:6b:83:28:90:4e:16:a4:37:c0:67:ab:41:
93:39:52:a9:db:59:bf:a7:e4:87:37:dd:94:00:3d:
0e:e2:12:06:a8:d4:b2:11:ba:bb:81:27:fb:39:23:
8b:a3:76:d2:82:e6:1a:77:05:a4:54:f9:b2:82:d8:
32:a3:c1:dd:f0:d5:bd:db:33:6f:e6:72:b8:bb:0c:
84:b1:91:0d:40:00:17:6f:d5:a7:29:1e:bb:8e:4d:
ee:60:d0:2a:4c:7f:19:9c:93:d5:00:78:eb:4d:34:
75:20:7b:86:b2:4b:df:ff:05:29:d5:d0:53:c4:3a:
46:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CE:F8:C6:ED:55:2E:67:E0:AF:40:DB:B9:45:63:47:25:F5:84:9B
X509v3 Authority Key Identifier:
keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/rc74xu1VLmfgr0DbuUVjRyX1hJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.191.0/24
Signature Algorithm: sha256WithRSAEncryption
85:3d:f9:cf:13:15:be:76:4d:e5:9b:b4:9d:bf:14:e6:27:b8:
c6:14:19:57:35:32:5d:70:33:b9:c1:30:94:f6:37:1f:3f:17:
f8:41:83:59:a2:a5:85:f6:a8:f7:51:42:83:a5:47:94:53:5a:
bb:e9:7e:36:4e:69:ce:ae:80:ad:4d:87:8a:5c:f5:88:03:74:
b3:5b:3d:9f:74:6a:35:88:2a:5f:b1:20:42:d2:74:a2:ea:4f:
f0:d2:6d:a1:fb:35:9c:c7:49:fc:13:3e:3c:c7:9c:b7:a9:bd:
0c:12:2a:c1:0f:4c:49:e8:0e:c0:f9:7a:a7:f7:da:b0:4d:fd:
c5:f5:0e:09:44:39:d5:07:92:17:35:2b:d6:46:5a:ab:74:5e:
14:33:2b:ce:50:35:5c:cb:e8:97:8c:e7:cc:1e:3a:21:64:52:
46:d6:5e:64:e0:12:de:27:25:00:c1:85:83:34:e6:8a:3c:dc:
17:34:33:3f:ed:83:f1:cf:b1:c1:2e:c5:a6:a5:e2:de:1f:f5:
3a:1f:ea:1d:78:a9:79:05:b3:9a:56:52:31:ee:e9:60:25:ce:
cf:d6:3b:dd:f7:e6:6b:06:8e:18:e8:3c:57:63:cf:58:91:37:
63:5e:d6:29:cc:9d:66:8e:6a:a1:43:de:39:c8:29:44:b8:b8:
26:db:f5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:13 2024 by rpki-client on console-ams.rpki-client.org