Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/9hYBXoQy_DDBZp81zTA5A-EZwGI.roa
File: 9hYBXoQy_DDBZp81zTA5A-EZwGI.roa (raw, json)
Hash identifier: rxe53CN4DYpiKwQ6+R7Q22KnHNckaQl4fxUM5ENRtWc=
Subject key identifier: F6:16:01:5E:84:32:FC:30:C1:66:9F:35:CD:30:39:03:E1:19:C0:62
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0186F53095C7169414232CA334060AAD60B7
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/9hYBXoQy_DDBZp81zTA5A-EZwGI.roa
Signing time: Sat 18 Mar 2023 14:47:27 +0000
ROA not before: Sat 18 Mar 2023 14:47:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30860
IP address blocks: 45.95.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Mar 2023 11:42:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f5:30:95:c7:16:94:14:23:2c:a3:34:06:0a:ad:60:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Mar 18 14:47:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f616015e8432fc30c1669f35cd303903e119c062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:0b:00:5e:63:79:2e:5e:80:5e:cb:91:0f:
bb:f8:1b:4f:38:9f:05:b6:81:33:0c:25:5b:56:ac:
87:7b:bc:d3:a2:07:3b:64:03:ae:01:ec:5f:11:2e:
2b:4a:b8:65:ea:7a:63:5a:21:e4:3e:0d:d5:eb:13:
8b:28:28:44:c2:de:75:67:62:f8:ce:da:9a:29:62:
f6:58:f3:88:0f:50:2f:c8:92:99:6e:3c:de:1b:84:
35:de:12:65:dd:30:96:29:cd:2e:22:55:7a:e2:1f:
28:90:79:c1:55:d8:d4:c9:65:02:e1:ec:70:88:0b:
73:6e:11:1b:db:98:25:f2:f7:15:61:68:20:72:e2:
c3:36:bb:a8:07:53:55:c7:8c:cc:51:2b:ae:27:a6:
90:84:af:d8:dc:41:52:57:ef:ec:fd:79:bd:e7:06:
54:c0:e7:b5:42:59:c4:f2:0d:f2:39:e0:69:56:05:
ef:33:fd:0b:43:d2:59:e2:29:69:fc:ce:d2:5f:2c:
c9:bf:2a:6d:d7:6c:ac:1c:5c:a2:fc:ed:d1:5f:5e:
6f:b0:c8:2b:d1:c3:99:1e:c5:d0:90:4a:83:5a:43:
ee:e0:88:45:46:e4:de:c2:ee:a0:93:3a:d9:9a:c1:
98:b7:52:c3:78:76:70:03:3b:a0:5e:54:5f:02:22:
13:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:16:01:5E:84:32:FC:30:C1:66:9F:35:CD:30:39:03:E1:19:C0:62
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/9hYBXoQy_DDBZp81zTA5A-EZwGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.235.0/24
Signature Algorithm: sha256WithRSAEncryption
00:f8:fe:85:47:15:c7:2e:cf:69:1a:8a:47:f2:9b:5a:71:7b:
c4:67:24:31:88:9f:e7:08:33:7f:cd:1e:25:e1:6b:d5:3c:35:
45:61:27:8f:cb:ec:1f:fa:27:5f:47:37:4c:88:e2:3f:14:0a:
e6:9e:1a:62:80:79:cb:90:a3:b0:df:fa:8a:db:fa:d0:62:fa:
fb:29:72:21:f3:d6:9d:38:12:ce:81:16:eb:f9:49:15:ea:3c:
cf:a8:ba:15:b4:51:b6:88:5b:69:fb:b8:8b:5d:9b:72:6a:d4:
53:bf:83:17:26:17:ce:61:d5:69:c4:30:63:33:a3:49:c8:76:
0b:7c:24:35:f9:61:92:e2:20:ab:2e:c9:ca:5a:39:46:47:7f:
9e:e8:ac:48:b6:89:ab:e6:7f:e0:83:fe:10:6f:eb:9e:49:29:
71:16:86:23:ea:8b:d0:7d:f2:6d:41:8e:ca:18:e6:9f:4c:7d:
aa:28:e4:8e:43:01:2c:f6:6f:7d:0c:53:de:2e:0d:55:61:54:
49:65:3f:46:8f:be:1e:3f:75:d1:16:fa:d1:d7:c3:76:a5:4c:
f6:56:f1:68:22:0a:8a:43:60:ab:b2:43:13:f6:05:52:ee:2e:
cb:94:41:30:e4:ac:6c:0b:f5:df:69:5f:5d:80:d7:a9:32:cb:
a5:ad:9d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:54 2024 by rpki-client on console-fra.rpki-client.org