Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/b3139xf4phM_PRB6F6dY8kiCnuQ.roa
File: b3139xf4phM_PRB6F6dY8kiCnuQ.roa (raw, json)
Hash identifier: EGChrux7u0CYtNSNi3FinJl+rB/hsgJi5AtquIJbh4o=
Subject key identifier: 6F:7D:77:F7:17:F8:A6:13:3F:3D:10:7A:17:A7:58:F2:48:82:9E:E4
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01908D6AB3C0C6D6D8BA86E9DBA24320A653
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/b3139xf4phM_PRB6F6dY8kiCnuQ.roa
Signing time: Sun 07 Jul 2024 13:38:18 +0000
ROA not before: Sun 07 Jul 2024 13:38:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.89.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jul 2024 11:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8d:6a:b3:c0:c6:d6:d8:ba:86:e9:db:a2:43:20:a6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 7 13:38:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f7d77f717f8a6133f3d107a17a758f248829ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:c7:0b:3e:ff:a6:a9:84:4d:0a:96:f1:6c:
93:31:8f:42:29:bf:3d:8f:ae:98:f9:9c:67:16:92:
ec:6a:f9:74:67:12:09:87:a1:2b:ed:db:4b:2a:ff:
cb:86:6e:1d:57:46:2f:e9:ff:81:d4:20:5b:3c:37:
9f:ba:24:78:fb:6a:f2:d3:46:61:9c:6b:0b:e2:47:
c0:63:fe:0a:d3:10:7f:0b:37:de:c4:b2:9c:cb:6a:
aa:3e:9b:5e:f5:b5:ba:d8:a0:eb:94:1c:d0:77:c8:
37:e0:a2:9c:af:31:ad:c7:1b:9f:e0:27:e1:0b:51:
60:69:fb:83:92:b9:39:e0:f3:6f:1d:68:ee:4d:a9:
40:59:2a:75:dd:8b:3c:4a:73:10:fc:3e:db:1b:a9:
c3:47:95:b6:43:bc:ff:a5:e9:f0:60:74:53:c7:d4:
7e:a2:df:81:46:cf:86:9a:0b:b4:2c:11:6c:69:bc:
5d:9c:71:39:94:b2:bc:ff:e9:6d:dd:0c:24:db:fc:
16:e6:86:57:03:46:c2:8b:24:7e:b3:6a:fc:77:8a:
b7:f7:ed:92:b1:5a:50:b7:8a:ae:5d:4e:82:33:43:
0d:59:50:8f:8c:ab:80:cc:03:cb:75:ca:5a:c0:7a:
f1:a4:11:06:30:71:cf:33:86:98:11:23:7d:8d:70:
8e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7D:77:F7:17:F8:A6:13:3F:3D:10:7A:17:A7:58:F2:48:82:9E:E4
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/b3139xf4phM_PRB6F6dY8kiCnuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.99.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:2b:84:bd:7c:71:b6:b1:5c:db:7d:3d:cb:1f:87:99:36:92:
d8:a4:6a:cc:36:44:ce:56:15:93:02:45:e5:7b:58:5d:17:26:
00:8a:94:70:05:23:56:9e:b0:34:e1:0f:d5:cc:aa:d7:6b:17:
e3:9d:9a:90:ef:ec:c1:9c:f8:0e:f2:ce:d2:26:fc:5e:df:89:
78:54:1c:71:aa:be:eb:83:90:0d:96:07:7b:df:b0:34:a0:6c:
47:a9:d9:02:1e:73:9e:43:51:0b:b0:64:cc:8f:62:16:6b:14:
50:16:ed:34:78:ec:08:e1:1c:9e:62:4d:81:79:57:cd:7f:1d:
b2:6c:58:d8:99:21:bb:c3:e4:5b:2b:93:e8:7e:35:94:58:e0:
79:39:9f:0b:e2:bc:57:5f:71:02:62:41:88:a6:3e:26:f1:b1:
54:05:29:ce:ae:63:64:37:74:e7:3d:88:90:48:22:8a:de:c4:
86:87:b1:91:60:a5:68:be:46:23:9d:ee:93:99:23:09:d1:c0:
33:59:4f:48:da:1c:cc:dd:fb:91:2d:16:25:16:c3:b1:f6:52:
fb:c4:52:b4:1b:02:6d:d8:67:21:14:ff:54:0e:29:a5:b8:05:
64:b5:f2:3c:d0:51:8c:14:48:db:70:16:79:d9:c3:cb:b5:fc:
53:da:66:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:52 2025 by rpki-client