Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/0cu9QhKRgoIsGDtz-A9x7h32oGA.roa
File: 0cu9QhKRgoIsGDtz-A9x7h32oGA.roa (raw, json)
Hash identifier: UH3py4117P/r8kPMHpdFBB/+r2GZ7bU+kzxS51ICT08=
Subject key identifier: D1:CB:BD:42:12:91:82:82:2C:18:3B:73:F8:0F:71:EE:1D:F6:A0:60
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0186BFEC513FBEFE22D0777DBE97C7B92D01
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/0cu9QhKRgoIsGDtz-A9x7h32oGA.roa
Signing time: Wed 08 Mar 2023 06:33:00 +0000
ROA not before: Wed 08 Mar 2023 06:33:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212356
IP address blocks: 45.155.123.0/24 maxlen: 24
2a0d:f407:1048::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bf:ec:51:3f:be:fe:22:d0:77:7d:be:97:c7:b9:2d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Mar 8 06:33:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1cbbd42129182822c183b73f80f71ee1df6a060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f2:9d:09:df:7b:86:bf:19:3b:c9:e3:c8:8f:
c4:ef:47:19:cc:57:03:09:8b:8f:9c:b4:dc:7a:e9:
ca:b5:2d:b1:47:06:c4:e9:e5:a9:8f:31:f7:2e:7e:
7b:0e:f1:8d:c3:4a:2f:06:73:f5:63:71:e1:cf:d7:
08:93:d4:b8:0e:d2:43:d7:fa:75:83:21:bb:92:42:
8b:6e:9a:35:ca:5a:e3:43:8f:a7:91:e3:ab:ff:16:
c3:9d:c5:d5:82:ae:77:b4:f5:bc:4b:f3:0a:19:49:
f7:09:86:39:5b:92:5a:f6:09:2b:5d:7d:ba:8c:d1:
25:41:c8:cf:4e:ff:7f:b4:1b:0c:6c:51:b9:5f:f1:
2a:b7:aa:8e:d9:de:8f:16:8d:a1:f5:ab:fc:17:4f:
2c:48:73:36:86:d3:bf:21:08:bc:bc:72:37:35:3c:
81:aa:ea:b4:aa:48:0c:55:ee:ff:22:fc:59:86:3a:
98:87:e9:3d:bb:58:b1:d5:54:b4:fd:ca:3a:ef:79:
f6:64:12:1f:f5:bb:6d:99:71:83:09:ac:3a:45:77:
46:e9:4c:dd:e7:f0:16:fb:31:39:0d:1f:b0:4d:30:
ce:63:e4:c2:a8:e7:ff:0d:ec:da:8c:51:5d:32:07:
8e:15:0b:db:ca:5e:b0:d5:78:12:36:c8:a4:aa:18:
f4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CB:BD:42:12:91:82:82:2C:18:3B:73:F8:0F:71:EE:1D:F6:A0:60
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/0cu9QhKRgoIsGDtz-A9x7h32oGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.123.0/24
IPv6:
2a0d:f407:1048::/48
Signature Algorithm: sha256WithRSAEncryption
a6:46:22:b4:40:d1:30:88:e4:f0:d3:f7:fd:9d:21:1f:66:f2:
e1:02:f9:cb:a9:2e:08:50:5d:df:84:51:00:0c:03:64:1e:0b:
d7:c4:44:7d:27:ab:b6:ab:7e:b6:12:0f:c1:38:55:d7:de:17:
ec:d9:e2:b4:02:35:8d:c6:e8:2c:8d:fb:2c:d1:eb:83:f5:8a:
05:f0:c3:c9:2e:40:e0:64:6d:6f:f6:f6:da:15:9e:39:17:86:
17:3f:f8:06:60:ca:ee:35:7e:4a:3b:04:d1:9f:e2:52:c4:e6:
a9:42:cf:37:4a:71:b6:c3:e2:4f:66:d6:43:4f:05:28:a6:07:
11:af:4a:ee:44:e3:1e:bc:09:d2:7c:5b:bc:7b:29:00:25:9f:
e2:87:60:b0:fc:e9:91:bc:88:79:47:fc:8e:18:c2:87:2f:8a:
5d:28:08:ac:ff:2b:76:42:49:d6:70:7f:c6:d6:c1:f0:9a:a5:
e5:15:40:22:04:aa:a5:ef:0f:58:93:6a:fc:1c:20:39:ef:c8:
5d:9d:a0:b8:ad:e9:90:16:04:75:04:32:e2:c2:91:82:11:b2:
78:2e:a8:e1:68:42:33:c8:0f:37:32:36:e0:d8:08:8c:a9:4f:
71:93:5f:8b:9f:cd:c5:0b:cc:97:13:dc:c3:ab:b5:90:a0:f5:
48:93:00:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:36 2024 by rpki-client on console-ams.rpki-client.org