Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/aNO17Ee0BxYrUwjggxWqEgqHRMM.roa
File: aNO17Ee0BxYrUwjggxWqEgqHRMM.roa (raw, json)
Hash identifier: n418iZK7SLzwzA5wICZnVhkHQdqbeRR/5PYGsy5IVik=
Subject key identifier: 68:D3:B5:EC:47:B4:07:16:2B:53:08:E0:83:15:AA:12:0A:87:44:C3
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019087AE31FBE6565B3AC5E481B8A6934EDE
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/aNO17Ee0BxYrUwjggxWqEgqHRMM.roa
Signing time: Sat 06 Jul 2024 10:54:18 +0000
ROA not before: Sat 06 Jul 2024 10:54:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 45.8.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Sep 2024 21:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:87:ae:31:fb:e6:56:5b:3a:c5:e4:81:b8:a6:93:4e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 6 10:54:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68d3b5ec47b407162b5308e08315aa120a8744c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:18:b9:c4:e8:e6:ac:5b:e5:65:68:e7:e3:
4e:bd:5b:6d:49:2d:49:23:3d:ba:a4:a4:f1:6a:d8:
ac:7a:17:74:c5:90:d5:7e:c0:fb:2e:b1:d3:ed:94:
76:b8:5b:f5:ba:c8:22:21:a2:73:51:48:53:ef:e9:
b4:6c:7d:6e:32:5e:71:62:14:f3:4c:1d:f1:de:3c:
f0:d1:4a:75:b5:a6:09:0f:9e:9e:77:9d:98:35:17:
91:f1:e7:67:4c:28:f2:42:9c:fe:84:35:8a:81:71:
6f:d5:14:a0:e8:60:1c:76:a5:03:c1:a4:6c:b7:22:
6d:92:0a:2b:88:d1:f6:3f:bd:08:80:5d:5a:5b:98:
a1:88:76:ef:54:be:b6:93:af:38:72:07:f4:ad:0a:
45:4a:38:5d:1f:94:a2:e8:aa:69:8b:25:61:ec:c6:
4b:4e:e4:14:23:12:1b:b1:33:ac:2d:52:ef:25:27:
35:e1:2a:dd:70:9b:5b:08:e3:b8:0d:30:5d:5b:8d:
b0:16:22:17:d7:36:db:2f:c8:e4:40:76:b1:06:2d:
2d:b1:9c:92:4f:d4:2b:ce:c8:5e:20:cc:72:9f:0a:
5e:04:a7:49:0d:e8:ca:c5:bc:75:ff:f2:95:66:42:
c4:20:e7:42:2e:31:e9:4c:e2:22:01:25:c0:72:2f:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D3:B5:EC:47:B4:07:16:2B:53:08:E0:83:15:AA:12:0A:87:44:C3
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/aNO17Ee0BxYrUwjggxWqEgqHRMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.205.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f0:a9:bc:50:31:6b:72:9f:51:1a:50:e8:e8:41:2f:82:75:
7b:dd:67:96:3f:f0:d7:74:43:26:cd:2e:17:74:8a:68:4b:81:
30:1d:63:50:b0:73:2a:22:8b:36:08:27:c3:c9:ad:82:da:f8:
b4:1d:e9:d0:4b:c7:97:68:18:0d:34:6e:d0:e8:60:53:12:dc:
77:37:ad:f9:c9:fc:e7:70:88:24:98:23:a7:5b:4e:5b:06:b1:
23:4f:51:66:4d:8b:62:eb:d1:4c:bb:6d:21:fb:99:da:b8:ad:
b8:f9:16:d4:f2:05:80:eb:d0:62:71:c0:a0:4c:34:2b:25:1e:
6d:a5:40:9d:f5:b5:87:a9:85:1a:a1:25:cf:f9:46:9e:2b:96:
ee:2a:2e:ab:fe:a4:66:84:e5:13:7e:e2:ab:27:a0:8d:dc:3e:
5d:cd:48:5f:64:d0:e3:98:56:05:dc:9f:f0:ce:0c:ba:77:b8:
aa:01:d7:cf:cc:d7:e4:60:aa:44:bf:10:57:e9:62:c4:fe:22:
51:aa:24:f3:b3:23:e5:87:65:b1:40:b5:d1:63:8f:27:40:a3:
d4:03:d4:85:94:24:c3:bd:d5:f9:10:0f:75:7b:76:c0:05:d6:
a3:be:35:80:ab:df:49:e8:b1:fd:66:15:cb:2c:a9:b6:4e:41:
61:8f:46:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 1 22:07:20 2024 by rpki-client on console-fra.rpki-client.org