Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/eyukUjLIiNXOs97MlbXvTrkZjd0.roa
File: eyukUjLIiNXOs97MlbXvTrkZjd0.roa (raw, json)
Hash identifier: 87gzd+YH79GqH5qv3c9OjDvIZf/pnpB3P+tErZuHN6U=
Subject key identifier: 7B:2B:A4:52:32:C8:88:D5:CE:B3:DE:CC:95:B5:EF:4E:B9:19:8D:DD
Certificate issuer: /CN=26d0b2a2954b5e757164444d42bbe8a14ad9b69e
Certificate serial: 0185704BC1DB3F67AF470C9E42E6A08010D3
Authority key identifier: 26:D0:B2:A2:95:4B:5E:75:71:64:44:4D:42:BB:E8:A1:4A:D9:B6:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtCyopVLXnVxZERNQrvooUrZtp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/eyukUjLIiNXOs97MlbXvTrkZjd0.roa
Signing time: Mon 02 Jan 2023 02:24:51 +0000
ROA not before: Mon 02 Jan 2023 02:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204704
IP address blocks: 45.84.66.0/24 maxlen: 24
45.84.65.0/24 maxlen: 24
45.84.67.0/24 maxlen: 24
2a0e:9880::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:c1:db:3f:67:af:47:0c:9e:42:e6:a0:80:10:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d0b2a2954b5e757164444d42bbe8a14ad9b69e
Validity
Not Before: Jan 2 02:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b2ba45232c888d5ceb3decc95b5ef4eb9198ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:19:19:f0:8b:e8:2f:9e:f7:4d:eb:d1:23:1f:
74:2a:0c:07:6a:fd:35:4b:c7:9b:3a:4c:d1:cb:4b:
78:94:c8:bc:13:a0:f4:84:a9:80:72:22:67:01:97:
9f:0c:5a:5e:f4:50:d6:f2:c1:0b:ce:de:99:74:c0:
09:f5:8e:56:71:a6:fa:2d:6f:7f:d2:69:96:17:28:
22:3f:fd:f0:7c:0f:da:69:a3:d6:25:17:40:17:4a:
8a:de:50:c6:de:1a:1f:40:49:15:44:e6:1a:97:54:
81:a7:b3:7c:a0:af:89:58:5e:12:ba:5a:d6:04:bc:
a4:50:34:0c:c5:65:4f:b9:42:97:57:d7:9c:74:c2:
ff:6d:fb:73:d9:fc:9d:c3:6c:bf:1c:d4:a8:77:49:
38:04:d6:62:f1:5d:fb:65:ac:bf:75:22:e1:c3:82:
62:98:d9:c1:7b:1d:11:c5:db:a8:57:23:3b:53:6c:
90:33:0b:b8:ee:7f:15:a6:49:c7:68:9f:27:65:7e:
d5:92:df:ca:50:68:3f:df:87:80:d3:a9:9b:6d:48:
76:86:79:58:0f:64:2f:c0:a9:6a:ca:8d:bd:8a:4f:
66:2e:2d:2e:7f:b2:cc:b8:55:3a:bf:bd:4b:72:82:
75:87:5c:dc:bb:0c:04:52:90:71:6d:a7:18:9a:98:
dc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2B:A4:52:32:C8:88:D5:CE:B3:DE:CC:95:B5:EF:4E:B9:19:8D:DD
X509v3 Authority Key Identifier:
keyid:26:D0:B2:A2:95:4B:5E:75:71:64:44:4D:42:BB:E8:A1:4A:D9:B6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtCyopVLXnVxZERNQrvooUrZtp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/eyukUjLIiNXOs97MlbXvTrkZjd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b46b7-5d23-4692-b39a-6fbce788318d/1/JtCyopVLXnVxZERNQrvooUrZtp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.65.0-45.84.67.255
IPv6:
2a0e:9880::/29
Signature Algorithm: sha256WithRSAEncryption
77:c1:97:39:17:91:74:06:e8:50:74:f5:61:a5:fd:f6:c6:1e:
70:b2:37:17:52:94:b8:a2:15:35:99:18:03:4d:6d:0d:3a:00:
10:95:94:fb:5b:17:51:e6:f7:1d:68:58:e9:11:e9:bd:f4:6b:
8b:95:53:08:f0:8e:da:04:16:31:57:49:47:a7:25:72:31:d4:
db:a1:3a:58:72:86:60:7b:b2:10:c6:87:21:ae:fa:ce:e1:83:
28:48:fc:d8:67:55:a5:b0:e2:1c:e4:06:ce:ba:d3:3e:3b:f9:
14:9b:ba:89:68:9f:14:a4:6f:d5:65:cc:ea:4a:8b:b7:25:cb:
4c:03:dd:f0:de:79:ea:ef:e8:ee:cb:ca:b4:a3:02:f6:77:21:
e5:4e:e5:bb:01:99:35:2b:e7:c7:0b:b9:b9:3b:f7:e6:a3:c7:
01:57:0e:43:58:53:a1:2c:ff:c5:1a:80:4d:d9:2d:46:68:6f:
85:41:71:8a:d7:04:a9:19:42:aa:77:66:0d:4f:a3:0b:25:d0:
e5:53:ab:57:be:92:dc:91:cb:e7:be:f9:74:25:19:f1:07:96:
fc:dc:ce:c2:a4:be:5f:34:ce:6e:76:07:8f:51:ab:fa:57:e1:
ef:b3:06:04:24:6a:6f:4f:ce:fc:11:81:ec:2b:5b:33:a0:e6:
78:af:ef:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org