Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/DAM5GT2A3mtiCIw_5nuqzGkwo1E.roa
File: DAM5GT2A3mtiCIw_5nuqzGkwo1E.roa (raw, json)
Hash identifier: FyuZfMhezKl78eF0GtiVDdqkJrwdmNKBaX1KvqMXL8I=
Subject key identifier: 0C:03:39:19:3D:80:DE:6B:62:08:8C:3F:E6:7B:AA:CC:69:30:A3:51
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 01857295DC160FC50ECC978CB404B825D723
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/DAM5GT2A3mtiCIw_5nuqzGkwo1E.roa
Signing time: Mon 02 Jan 2023 13:05:01 +0000
ROA not before: Mon 02 Jan 2023 13:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 45.15.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 May 2023 15:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:dc:16:0f:c5:0e:cc:97:8c:b4:04:b8:25:d7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Jan 2 13:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c0339193d80de6b62088c3fe67baacc6930a351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:7e:7a:8f:a2:05:90:9c:13:ea:45:8f:cc:
2a:2b:f3:48:69:84:46:2f:80:50:f4:ea:f3:28:8b:
e3:ff:64:ee:7c:5a:3a:28:5a:03:47:84:b2:cf:a9:
30:5e:9c:27:33:42:9c:c5:79:08:8d:c7:e9:67:5a:
50:6e:c6:0e:0f:c5:56:0d:ab:38:45:f4:61:60:b0:
6d:0c:6d:79:47:73:62:2d:23:22:fb:8e:65:47:12:
dd:68:73:d6:7b:fb:05:23:d4:99:56:c9:ad:e5:10:
fd:b0:0f:61:2d:09:d6:4c:96:ed:2b:80:69:e7:6d:
aa:2b:80:74:62:9c:8f:4c:01:49:ab:70:52:2b:0c:
79:0e:e5:ef:0d:c9:56:dc:0b:ab:af:02:5f:35:61:
bc:f8:17:92:bd:b9:c6:d0:87:a4:09:96:e6:a6:72:
b5:ec:df:a6:48:f9:a7:be:31:d3:87:c7:3d:45:55:
78:38:fb:e9:e3:cd:42:fc:89:8b:17:ec:d1:d1:35:
23:8c:2b:18:6f:59:85:e1:85:5b:9b:bd:e7:16:ea:
95:74:66:bc:c7:e8:b4:96:48:d7:ff:2e:30:3c:bf:
1a:cf:21:c5:8b:2e:b3:c2:28:de:bb:dc:3d:50:ad:
5f:39:ad:40:ad:63:99:ef:b8:e8:ac:3e:3e:ad:6d:
67:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:03:39:19:3D:80:DE:6B:62:08:8C:3F:E6:7B:AA:CC:69:30:A3:51
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/DAM5GT2A3mtiCIw_5nuqzGkwo1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.159.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:93:4d:54:57:09:83:fe:16:89:d0:90:47:f7:41:1f:a6:70:
67:77:f3:b5:e2:13:62:47:c9:d6:34:be:26:d8:28:71:bb:d2:
10:d7:3a:e2:a7:e6:3a:1f:b7:cd:99:35:53:fb:e9:8a:70:36:
27:29:41:5f:92:c9:34:03:bb:8d:04:c7:99:6e:1d:aa:cb:17:
f2:1d:2b:ac:21:38:e6:9c:23:6d:db:16:ab:a4:fc:0e:62:20:
9a:e7:22:fa:f6:73:1b:fb:68:32:33:54:13:45:f9:d3:77:14:
aa:52:61:d4:09:09:f6:47:5d:15:49:ef:8e:db:1c:46:86:81:
a4:18:cc:7a:65:96:11:d9:56:e8:6e:dc:6f:86:5c:41:4a:86:
e2:e6:67:d3:7c:de:79:a6:ba:57:82:d2:dc:40:23:21:32:48:
60:65:e9:ae:16:bd:4e:f4:13:29:48:b8:8a:fd:ee:40:54:2c:
49:18:2f:5b:0a:1e:92:ed:70:a8:a2:e3:ba:11:55:64:7d:3f:
d9:3e:2b:4c:0f:3b:b6:24:b5:9b:2a:dd:85:97:6c:de:fe:8c:
6d:05:b9:fc:39:94:71:7e:ec:12:69:a5:d2:6f:21:7f:d1:a9:
88:95:9f:14:c7:99:10:cb:bc:a8:9f:b5:eb:84:89:aa:77:17:
3a:89:69:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org