Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/If7adWqjbgsxG3GzuBng9jh7_NU.roa
File: If7adWqjbgsxG3GzuBng9jh7_NU.roa (raw, json)
Hash identifier: Q6BenVmP7GEMybmEcQB4yL9NgCgt5C48CP4hnb+JAVY=
Subject key identifier: 21:FE:DA:75:6A:A3:6E:0B:31:1B:71:B3:B8:19:E0:F6:38:7B:FC:D5
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 018570FB937B0E9E15688D03FE026D0F1AF5
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/If7adWqjbgsxG3GzuBng9jh7_NU.roa
Signing time: Mon 02 Jan 2023 05:36:53 +0000
ROA not before: Mon 02 Jan 2023 05:36:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48336
IP address blocks: 45.135.226.0/23 maxlen: 24
45.86.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:93:7b:0e:9e:15:68:8d:03:fe:02:6d:0f:1a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 2 05:36:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21feda756aa36e0b311b71b3b819e0f6387bfcd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1e:30:b3:64:4c:49:f5:03:22:f9:30:42:cc:
11:30:48:e6:0c:a1:fe:26:29:b8:7d:15:21:14:5a:
e3:50:a1:2c:22:b9:31:ae:8d:7c:de:4b:b9:79:a8:
ea:94:61:1d:86:7c:52:81:a9:2f:4e:fe:25:06:c6:
05:c8:c3:5f:aa:09:59:95:dc:9a:62:8e:56:bb:c5:
cd:88:a7:f3:89:b2:2f:6f:33:f9:b0:66:43:14:e7:
71:25:65:b3:da:b2:da:65:67:6f:34:2c:13:af:a8:
df:7a:1a:00:0a:c7:35:52:40:9f:80:33:8a:b6:e5:
18:66:36:2d:3f:7e:d5:46:51:39:4a:72:d7:e7:d0:
b1:20:52:3b:9c:63:1d:7f:22:a5:e9:c9:15:d4:d4:
87:0e:7b:99:d0:8c:bf:01:2d:93:b9:1a:6a:84:27:
b7:7e:17:ac:47:11:03:ee:b3:b8:07:a1:6e:66:91:
0f:21:6e:9e:f0:60:4d:90:2e:ef:c6:58:85:02:1f:
f1:3b:e2:b8:90:fc:fd:56:24:b7:83:60:6b:d9:3c:
93:2c:01:7c:c6:af:bf:3a:b6:ac:81:8e:a5:0f:0d:
e2:de:0d:e5:f7:f9:a7:30:5d:c0:f5:42:48:71:e8:
e2:2d:dc:e8:e4:e2:19:d7:50:93:86:38:5a:ea:cd:
cd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FE:DA:75:6A:A3:6E:0B:31:1B:71:B3:B8:19:E0:F6:38:7B:FC:D5
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/If7adWqjbgsxG3GzuBng9jh7_NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.240.0/24
45.135.226.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:29:33:d8:11:30:87:b3:23:2b:44:86:42:4e:6a:64:a2:c1:
2a:5f:8b:5c:07:b1:ed:34:af:b0:28:9a:1e:69:dc:04:e5:00:
37:fb:50:97:a6:8f:74:0b:07:48:32:52:45:79:d1:b1:b3:71:
a3:ec:21:e0:82:09:8b:3c:ba:0e:52:df:8f:c9:66:d6:cd:ba:
2c:0e:41:7a:9b:ee:31:bb:e9:98:61:98:4f:c7:9a:9a:74:a9:
71:7d:34:39:b3:de:7c:5b:8c:e6:71:d2:09:7e:0f:91:1b:b6:
13:ba:ef:f0:69:3a:71:0f:92:f5:ce:cc:c6:dd:4e:93:c0:9f:
65:72:ba:b3:27:08:1d:07:ad:3d:15:f8:6c:0e:64:98:a1:de:
e9:f7:4f:17:75:0f:4c:b6:a3:60:9a:63:32:3e:f2:2b:2e:b4:
ef:9c:78:f0:a4:4f:66:ac:0b:ba:ee:8b:28:4f:13:40:fe:0c:
37:4d:8d:0b:48:fb:d5:ec:52:89:4e:8a:85:75:32:50:b4:17:
ab:68:5a:58:b6:1c:52:b1:cb:76:d7:81:3c:58:df:7e:dd:cd:
4e:f0:e0:5b:a1:7f:c3:7c:4a:dd:7d:68:1e:5d:89:b7:88:0e:
39:01:01:1f:55:3d:89:61:00:39:6f:30:44:62:9e:35:a1:35:
5e:5c:55:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:53 2024 by rpki-client on console-fra.rpki-client.org