Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/89FAbCm6SmJ4jOAZAjKv3TCwBYE.roa
File: 89FAbCm6SmJ4jOAZAjKv3TCwBYE.roa (raw, json)
Hash identifier: y3c61PO/MIYZrWOU9R41c3rs0kGSXGqb03sZDarG59I=
Subject key identifier: F3:D1:40:6C:29:BA:4A:62:78:8C:E0:19:02:32:AF:DD:30:B0:05:81
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 01907D3DC4E5C77AD35D742DAC284F8A7CB6
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/89FAbCm6SmJ4jOAZAjKv3TCwBYE.roa
Signing time: Thu 04 Jul 2024 10:15:18 +0000
ROA not before: Thu 04 Jul 2024 10:15:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 45.134.12.0/24 maxlen: 24
45.134.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 17:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7d:3d:c4:e5:c7:7a:d3:5d:74:2d:ac:28:4f:8a:7c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Jul 4 10:15:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3d1406c29ba4a62788ce0190232afdd30b00581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9b:b7:b7:b2:76:77:90:39:4c:53:eb:99:18:
46:c9:95:32:9b:e2:47:dc:ca:20:35:3a:5e:3a:86:
17:ba:fd:5f:88:3c:9e:f5:7e:00:26:2d:27:9c:0c:
18:79:bf:7f:d6:fb:bb:b4:33:85:3a:34:b4:a4:19:
c9:5d:b6:fb:94:bf:62:1a:58:55:b5:0d:15:8a:4d:
50:a2:0c:4a:9f:aa:f3:14:05:08:a9:d9:9a:9d:52:
e8:60:8d:7c:e2:08:77:71:b9:94:f0:4f:78:09:12:
56:8c:5a:18:79:98:ca:86:f3:96:68:e1:12:40:0a:
8b:c5:d1:f0:db:b6:85:89:76:16:a5:36:37:07:e6:
ab:86:cf:f1:54:29:ca:10:1a:65:1d:29:2c:ca:44:
dc:ff:e4:44:3c:82:c0:30:b2:b1:83:fe:e0:7a:34:
db:87:b6:1f:f4:f9:56:38:c5:cd:b1:84:25:8f:55:
7d:44:b1:5e:4c:9f:18:fd:d9:24:df:9d:83:c0:b0:
44:50:3c:c1:0a:33:8d:39:a9:8f:e2:57:5a:05:0b:
d7:b4:6e:90:20:42:45:b2:ba:dc:37:7e:3c:5d:1e:
8a:36:41:a8:53:0e:e6:65:2b:3a:d2:0f:4d:25:c2:
41:c5:61:8a:a6:33:83:ad:ff:13:bd:4c:f0:c4:85:
82:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D1:40:6C:29:BA:4A:62:78:8C:E0:19:02:32:AF:DD:30:B0:05:81
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/89FAbCm6SmJ4jOAZAjKv3TCwBYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.12.0/24
45.134.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:89:be:72:88:93:0e:88:c3:16:27:55:0f:3c:a0:a9:b4:e9:
73:1e:5e:c4:e6:c2:2b:2e:e6:2b:ef:0b:41:07:48:00:20:65:
ab:af:21:ee:08:b7:a1:92:68:a7:59:58:65:1d:25:c9:8c:98:
f3:f7:88:c8:ed:23:bf:2b:db:77:ed:94:53:a2:93:c9:95:6d:
ab:a1:e7:a7:c2:d6:93:17:14:e7:14:32:ab:57:0d:bb:2d:ee:
a3:6c:f7:15:41:88:cf:c2:8a:7b:a3:b0:4f:2f:01:e6:68:fb:
bc:7d:97:7a:7e:59:74:58:91:e4:6d:e8:3c:45:b1:50:85:27:
f6:f5:98:78:e4:2a:a6:6b:27:48:9a:2f:61:00:86:19:5b:75:
fa:b2:07:ba:6d:25:95:e0:04:6d:b3:72:00:97:f5:21:ff:2e:
ab:10:fe:a6:79:28:e8:ef:bf:07:63:6e:ff:c8:ab:46:0b:7c:
a9:83:de:50:33:fc:84:67:5a:24:db:00:e5:4e:00:00:eb:4c:
03:40:0e:3a:50:b1:14:d0:a4:9a:aa:23:d6:80:0d:6a:29:fc:
d7:4d:b0:97:6c:9a:83:5a:9c:fc:29:91:00:bd:bf:2e:79:cb:
80:12:52:2c:8b:20:9f:c3:f5:71:47:20:a7:ce:d2:61:2e:b6:
3a:4e:6f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 18:08:40 2024 by rpki-client on console-ams.rpki-client.org