Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/jsxvuvYoq-JfhtPVzSaaZ-9DG28.roa
File: jsxvuvYoq-JfhtPVzSaaZ-9DG28.roa (raw, json)
Hash identifier: rvyp4h1z2IaFxV1px/fd6Mk/laPxhl4fGH2zf9bm0oI=
Subject key identifier: 8E:CC:6F:BA:F6:28:AB:E2:5F:86:D3:D5:CD:26:9A:67:EF:43:1B:6F
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F797BE0C9C660444B619A5185DB1487
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/jsxvuvYoq-JfhtPVzSaaZ-9DG28.roa
Signing time: Sun 01 Jan 2023 22:35:10 +0000
ROA not before: Sun 01 Jan 2023 22:35:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 37406
IP address blocks: 45.148.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:7b:e0:c9:c6:60:44:4b:61:9a:51:85:db:14:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ecc6fbaf628abe25f86d3d5cd269a67ef431b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:06:09:f8:b4:4c:96:cd:59:c8:10:4e:58:
36:af:e8:c9:41:1f:da:17:90:d1:a8:d7:dd:2d:98:
e9:9b:98:ef:d5:5d:4b:a5:c6:0a:d0:03:83:39:e5:
1a:64:10:3a:53:b9:6e:1f:8c:40:19:58:1e:79:cd:
98:ae:fa:56:e8:9c:30:7c:f6:97:df:9a:7a:39:34:
ab:b7:5a:69:1e:bd:47:84:d9:78:af:2b:d3:3c:e8:
c8:20:1a:e1:cd:84:af:0f:85:d8:a2:67:be:9f:89:
81:5c:03:63:8a:4a:e9:6d:46:f6:4d:e1:e2:0a:48:
57:d7:03:ae:6b:3e:c7:b1:61:f1:a9:f9:aa:e3:3c:
4d:e0:3e:e5:a6:30:d1:0c:89:0e:ed:11:6d:dd:e9:
da:d6:be:28:47:19:cd:f9:df:93:64:b0:2f:b2:08:
2b:24:77:f1:2c:57:9e:39:99:18:ae:93:3d:3c:f0:
05:86:10:e5:60:8a:13:20:3f:4e:68:a1:af:a0:4f:
3b:74:6e:10:81:32:f6:04:53:5e:1a:d4:c9:1a:a0:
02:68:d6:b3:13:bb:cb:17:44:a2:97:c4:41:21:d9:
dd:e6:6f:86:1d:a3:67:eb:19:ac:92:8c:a0:0c:4f:
94:45:10:a0:14:16:c5:6b:78:82:d1:fe:91:0a:24:
f8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CC:6F:BA:F6:28:AB:E2:5F:86:D3:D5:CD:26:9A:67:EF:43:1B:6F
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/jsxvuvYoq-JfhtPVzSaaZ-9DG28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.27.0/24
Signature Algorithm: sha256WithRSAEncryption
52:47:9c:74:4c:4a:1e:34:f4:35:d0:33:36:cb:ab:ee:2a:14:
79:d1:c9:cb:8a:92:d8:02:65:3d:ff:64:b8:29:57:82:7f:0f:
42:2b:9f:e4:7e:6d:f9:87:15:0b:69:9b:c7:d2:34:8c:95:29:
72:33:2c:f4:1b:29:26:7c:9f:f9:40:d2:24:49:4d:60:ef:97:
d6:48:46:ed:01:29:02:4f:a6:04:27:bc:88:3b:b4:e1:8e:3d:
2b:0d:09:c7:96:3a:26:d3:12:16:52:a7:c8:f2:c2:0c:2a:00:
c0:97:09:00:0c:94:b6:aa:0d:b1:73:79:6d:cc:eb:f8:0a:c1:
96:2f:84:6f:8f:75:2b:29:c9:37:7a:62:d9:7f:30:56:bf:67:
8b:4f:5f:36:f9:7a:f9:50:18:0d:0a:98:ff:c3:22:fa:df:6b:
4b:56:ee:71:80:d5:01:72:47:c5:6d:5b:a8:7d:eb:9f:26:4d:
57:cd:5e:7b:98:3d:bb:ea:31:4c:3b:c5:6e:26:b8:98:c5:27:
0a:a7:01:56:22:73:75:a3:cc:05:d0:69:b9:85:fb:cf:23:8d:
6a:e7:dc:00:03:86:cd:42:26:f0:12:1e:f5:d8:1a:14:17:a5:
92:1f:23:80:f7:6e:8e:a2:8c:93:bc:ba:14:8b:06:b3:d6:83:
f8:2a:21:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:52 2024 by rpki-client on console-fra.rpki-client.org