Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Y6kXMZdjHQa22PtZ_WIbr_9iexU.roa
File: Y6kXMZdjHQa22PtZ_WIbr_9iexU.roa (raw, json)
Hash identifier: qvyM+NKaRPvadKzdxr3onbTKtQ/felVRy+Gb64o15qA=
Subject key identifier: 63:A9:17:31:97:63:1D:06:B6:D8:FB:59:FD:62:1B:AF:FF:62:7B:15
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FB97DBE7014C51CCEB73E6816C662
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Y6kXMZdjHQa22PtZ_WIbr_9iexU.roa
Signing time: Tue 02 Jan 2024 04:30:14 +0000
ROA not before: Tue 02 Jan 2024 04:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399471
IP address blocks: 45.85.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Aug 2024 13:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b9:7d:be:70:14:c5:1c:ce:b7:3e:68:16:c6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63a9173197631d06b6d8fb59fd621bafff627b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:d4:2d:75:b8:e3:aa:29:70:92:07:a9:83:
34:9e:4d:e2:38:83:d0:a4:d2:88:a7:f9:5a:75:b6:
8c:82:b6:0c:e6:81:ce:b8:28:e1:26:2e:54:b6:cc:
06:23:8a:7f:a3:22:c0:b3:2c:aa:84:27:dc:2b:a8:
6f:38:7e:ed:aa:04:e3:5c:84:27:85:37:44:5d:1c:
a9:74:5a:39:33:66:25:3c:5d:14:bb:3e:8f:36:a6:
f5:d2:92:39:0f:ec:4f:1a:ef:c4:44:05:72:4a:40:
dd:d1:f8:48:e6:d9:23:09:ca:5d:7d:bb:cf:84:ca:
01:29:ad:55:37:05:1b:95:17:ac:b2:64:9f:08:5a:
6f:92:e4:71:94:15:51:2e:a9:c2:9f:1e:24:1e:35:
ec:d1:76:9e:0d:b3:eb:9a:7e:96:11:5d:27:f0:18:
d9:50:3d:f2:73:0c:76:b7:9d:22:35:fb:bf:2d:7f:
4e:8a:ff:39:20:7d:1d:a5:ab:1f:a8:5f:eb:d7:31:
7d:22:7d:8f:2b:0f:73:cf:c7:43:ab:52:2a:8a:68:
dc:dd:b2:15:42:cf:c3:02:a9:82:59:37:69:f1:43:
bc:52:13:9f:00:e9:43:c8:42:1a:1e:04:92:41:3b:
f6:f7:60:fa:24:9f:a6:d2:f3:ca:d8:5e:a6:df:0e:
e6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A9:17:31:97:63:1D:06:B6:D8:FB:59:FD:62:1B:AF:FF:62:7B:15
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Y6kXMZdjHQa22PtZ_WIbr_9iexU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.90.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:0d:ae:b7:e3:5d:c7:42:3e:39:96:79:f1:bd:09:f2:c1:6b:
ad:15:ca:b6:aa:05:f7:bd:83:65:63:72:16:de:30:bb:7a:5a:
37:c2:ef:fa:24:d9:c6:69:54:be:6b:c2:5c:20:a4:b0:90:19:
04:80:74:7f:b9:3f:63:58:7a:29:85:d5:c1:65:7e:e8:38:10:
a3:c2:30:ac:5b:d1:0b:0f:98:52:b0:85:1e:48:7f:76:b1:1a:
c8:22:ab:0c:bb:10:e5:55:af:9e:00:a7:f5:d4:15:24:4c:49:
eb:40:c5:ef:f8:82:93:6e:05:72:5f:70:e8:7e:e2:21:f7:eb:
d3:a2:61:78:1f:96:37:76:3d:ad:73:e7:30:ae:ef:1f:c0:48:
10:7d:e6:86:d1:10:b2:b1:d3:31:9f:97:af:e0:ab:92:4b:47:
61:c6:1a:6e:c2:ed:81:be:7e:44:93:b4:4d:2d:db:a9:fb:59:
91:82:61:69:3c:53:fd:fc:fc:eb:fb:d5:f2:c4:51:3f:66:5c:
99:85:bc:50:53:f5:3b:45:b1:52:cc:d8:cf:21:18:aa:c4:70:
50:fe:86:ab:5e:ca:21:99:9f:3d:e8:d3:ee:33:72:64:0c:f2:
23:aa:c3:8d:1e:2f:c4:04:eb:da:aa:55:e7:65:c0:47:67:58:
54:85:aa:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 17:10:13 2024 by rpki-client on console-ams.rpki-client.org