Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/62SK5q9J2o9qLjIvNXi5ZpmD2jk.roa
File: 62SK5q9J2o9qLjIvNXi5ZpmD2jk.roa (raw, json)
Hash identifier: sQY7LfLXomFCNgC4Mt3PSLWlSp4OcL9Fc9UiKiSDmXQ=
Subject key identifier: EB:64:8A:E6:AF:49:DA:8F:6A:2E:32:2F:35:78:B9:66:99:83:DA:39
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 019083DC69A443F3A527A8694A0CA0BEDD1C
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/62SK5q9J2o9qLjIvNXi5ZpmD2jk.roa
Signing time: Fri 05 Jul 2024 17:06:18 +0000
ROA not before: Fri 05 Jul 2024 17:06:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 45.134.12.0/24 maxlen: 24
45.134.15.0/24 maxlen: 24
212.8.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 05:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:83:dc:69:a4:43:f3:a5:27:a8:69:4a:0c:a0:be:dd:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Jul 5 17:06:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb648ae6af49da8f6a2e322f3578b9669983da39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:44:e3:4c:15:0a:a6:48:8a:f6:37:be:29:ab:
1c:3c:ae:3b:49:cd:04:1e:db:24:49:35:8c:bb:b8:
cb:70:a5:83:34:8f:8f:b6:11:99:fb:cf:41:22:7a:
5a:82:86:30:89:7d:5d:a5:f7:d4:a6:af:d4:21:fc:
3e:d3:88:07:86:c7:82:8a:79:6e:e5:7b:3f:55:97:
1f:10:3e:e6:f4:61:5a:b8:09:c0:ac:10:6d:5e:22:
63:63:98:b6:bd:0a:93:1d:f8:af:55:3b:52:4a:9f:
2d:a3:f3:f4:a6:a9:d1:6f:c8:a3:13:2b:11:34:09:
d4:a3:2f:ce:c3:4e:3d:9e:ec:1d:f9:cd:0f:a3:d3:
08:15:8e:26:a0:55:f6:c1:7d:4b:42:1b:f0:79:43:
b6:81:e6:30:1b:25:dc:4f:a8:88:b1:24:1a:c6:88:
9e:af:b5:de:3f:83:c3:1c:dd:47:8f:16:61:19:af:
de:6d:c0:a9:fb:be:f6:15:4f:4b:bc:b9:cf:c2:9d:
f9:1a:f5:31:c0:ec:2e:b6:9d:98:8b:47:de:ab:5b:
24:25:0d:f1:8e:9f:61:b4:fe:26:31:58:bf:7f:fa:
d7:e7:ab:ef:f0:74:c1:36:ae:fd:95:75:1f:93:c4:
89:88:8f:ec:39:35:4e:ff:04:4e:ff:38:fb:06:36:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:64:8A:E6:AF:49:DA:8F:6A:2E:32:2F:35:78:B9:66:99:83:DA:39
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/62SK5q9J2o9qLjIvNXi5ZpmD2jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.12.0/24
45.134.15.0/24
212.8.229.0/24
Signature Algorithm: sha256WithRSAEncryption
65:ff:2b:4e:f5:5c:25:dd:eb:94:22:a2:48:42:cf:30:0a:ad:
b8:d1:e7:60:f4:22:a8:12:b4:47:de:21:e4:87:52:3b:af:8f:
16:36:40:80:59:39:75:74:36:0c:aa:5b:01:b1:f4:49:63:63:
50:0d:a8:2f:e0:1d:8d:53:ab:dc:d8:42:95:fd:fd:d0:b3:5d:
0a:92:40:3b:cc:68:10:8c:95:ce:7d:11:8f:00:20:e5:2e:59:
fe:e8:e5:0e:7a:72:63:46:da:cb:b4:59:0f:11:a9:f2:76:b3:
ef:b4:99:09:86:12:06:bd:f0:32:5a:a8:59:86:1c:61:db:f0:
43:d1:73:21:88:90:e1:49:e2:70:06:8a:92:53:6a:da:94:d8:
3a:94:60:33:5f:38:59:60:02:a4:52:74:17:a9:f5:3f:b4:27:
e7:2a:6d:89:bc:e1:1d:25:8f:ad:37:90:f1:80:4b:80:ba:82:
a5:6a:63:2c:fc:20:c1:cf:9c:bf:db:c0:10:43:24:d9:18:a2:
4d:c7:81:f3:98:18:7d:26:92:78:f3:da:72:ca:eb:6c:df:71:
35:97:0a:21:96:45:18:4c:9f:19:65:a2:0c:0d:c3:ca:88:63:
39:77:92:e5:27:50:2d:68:a4:af:43:d2:62:82:75:17:05:39:
69:09:62:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 06:25:23 2024 by rpki-client on console-fra.rpki-client.org