Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/1k1kCHEVPB6ihcU78rixPNBregE.roa
File: 1k1kCHEVPB6ihcU78rixPNBregE.roa (raw, json)
Hash identifier: jkbjH5zrwbFFQ4vXdeg0O4hjv7ul5Gyz/ll/Nwkg66E=
Subject key identifier: D6:4D:64:08:71:15:3C:1E:A2:85:C5:3B:F2:B8:B1:3C:D0:6B:7A:01
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 018CDE2493AEDD47D34BC3871F2D3A0F5420
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/1k1kCHEVPB6ihcU78rixPNBregE.roa
Signing time: Sat 06 Jan 2024 09:39:48 +0000
ROA not before: Sat 06 Jan 2024 09:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20668
IP address blocks: 45.91.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 08:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:de:24:93:ae:dd:47:d3:4b:c3:87:1f:2d:3a:0f:54:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 6 09:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d64d640871153c1ea285c53bf2b8b13cd06b7a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2e:36:1d:5d:65:b3:18:30:76:c1:fd:61:15:
23:22:70:8c:c6:96:9a:77:5b:33:4e:93:73:e2:08:
79:ca:69:5a:62:70:11:0d:9d:b4:9f:60:5c:5c:65:
ac:3d:e4:46:af:d8:24:ea:e0:fc:c8:fc:04:d8:2d:
ac:49:6e:1d:df:44:5b:92:31:c2:80:1c:33:06:78:
e3:f7:19:47:d2:00:32:85:12:45:09:f8:68:2a:1f:
e7:7f:4e:4e:c0:56:06:ae:f4:77:01:4e:91:2a:95:
19:48:ce:ad:18:d7:2d:ff:cd:a0:88:a0:d3:c4:d6:
5f:10:51:f4:09:b2:00:e3:27:86:d4:20:9d:80:d4:
94:0e:ec:27:a7:b3:c9:50:09:1b:ea:ff:ab:95:d3:
86:f8:60:2e:d3:f4:78:fd:b6:7f:9b:be:40:b1:fd:
03:89:5e:1c:65:03:6c:0c:69:49:3b:70:4a:9e:f0:
0b:31:bb:84:b1:11:6f:90:15:53:4f:1d:8d:0f:e5:
f4:db:34:54:a2:be:47:fd:6d:de:5e:20:f8:b1:4f:
f8:7f:25:71:52:e1:78:b8:98:02:3e:55:71:cd:89:
c4:1a:4d:d1:1d:02:31:e8:a7:9e:e7:b1:02:a2:76:
e5:22:a4:ce:de:ab:29:f1:5f:8c:61:9e:7a:98:a4:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4D:64:08:71:15:3C:1E:A2:85:C5:3B:F2:B8:B1:3C:D0:6B:7A:01
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/1k1kCHEVPB6ihcU78rixPNBregE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.4.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ed:e8:c8:51:ce:ce:38:1f:e9:5e:8e:cd:8e:58:1d:ef:9b:
b9:a0:85:ab:f6:93:48:87:ce:d5:02:e2:ea:a0:59:78:24:d8:
b0:99:5a:4e:cc:45:3a:25:e7:b2:72:9c:63:45:65:a8:7f:53:
df:9e:7b:50:30:08:33:7c:bc:f3:f1:77:40:b8:dc:5a:9a:3a:
92:b1:0e:43:4b:3b:ea:40:4d:94:e0:4b:ab:f2:93:63:00:bf:
3a:0a:6e:0e:ca:04:37:e8:d0:e9:30:aa:7c:6a:76:d2:c1:0f:
83:af:1f:41:bb:84:79:66:d4:c1:ec:15:e4:bd:2a:9d:6a:77:
17:e3:1b:08:be:e3:c4:fb:6e:de:10:a0:48:2c:c5:bd:4a:b7:
f1:d2:81:fd:4d:71:18:b2:a1:1b:0a:56:9b:ec:4f:bf:a4:87:
4a:8c:b7:4c:d1:98:13:26:2c:86:05:b7:cb:df:4d:77:2d:d5:
73:60:cf:c6:94:c5:4b:64:aa:9a:6f:23:0f:36:8b:dd:d8:bd:
0d:66:42:b0:eb:08:6f:a3:ef:de:bd:89:60:e1:fc:96:9a:7f:
14:d1:38:eb:a8:67:64:9c:f8:94:82:5b:0a:d0:fd:ae:3b:87:
40:a6:6a:cd:12:7a:ef:25:de:33:5f:97:65:e5:ef:13:9f:68:
8e:b1:f6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:45 2025 by rpki-client