Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bAIr_Qa9hoqX8xcDlDa3OlLrXlU.roa
File: bAIr_Qa9hoqX8xcDlDa3OlLrXlU.roa (raw, json)
Hash identifier: Nw6Z01hpID0Q1m5niMiydvA7+sTn4y1gIW9EvoKFi+c=
Subject key identifier: 6C:02:2B:FD:06:BD:86:8A:97:F3:17:03:94:36:B7:3A:52:EB:5E:55
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE86DD176B4AC9BEA241CE7EB3F927
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bAIr_Qa9hoqX8xcDlDa3OlLrXlU.roa
Signing time: Tue 02 Jan 2024 06:31:15 +0000
ROA not before: Tue 02 Jan 2024 06:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60949
IP address blocks: 45.8.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 08:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:86:dd:17:6b:4a:c9:be:a2:41:ce:7e:b3:f9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c022bfd06bd868a97f317039436b73a52eb5e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:31:15:57:a2:1b:3e:9b:3e:de:04:cb:e8:
7d:2b:57:00:27:63:40:e4:c1:0f:3f:fe:a4:9f:53:
9a:c6:d5:ae:37:e5:c9:58:30:2a:b8:a4:1b:57:28:
48:d8:69:19:04:6c:e2:e6:08:65:cc:4d:6a:7e:3a:
a8:b9:1b:13:ab:c6:02:f5:2d:86:77:19:00:f9:d3:
01:c2:81:60:76:f7:92:2a:ab:0c:0f:3a:6b:1b:f5:
e8:e9:e6:09:23:b0:4e:6e:f5:d3:23:09:50:54:1e:
7d:67:a1:db:2a:26:4d:c7:95:62:84:76:95:ee:0f:
fa:f5:c6:52:9a:1d:12:9b:5f:dc:82:19:d1:24:11:
18:a7:dd:e5:50:44:ca:68:88:f9:c1:3e:70:df:33:
d4:e4:0f:46:8d:db:b9:06:82:11:3d:ae:02:23:4c:
10:00:81:13:77:01:23:14:18:3b:50:c9:8c:c2:39:
b1:65:2c:f7:9c:bc:10:81:b1:b6:fc:47:b0:66:42:
44:c3:06:0d:e3:d8:0e:8a:c7:8f:2d:8d:fb:f8:2c:
be:66:01:43:ac:8b:8c:80:fe:62:98:52:e2:fc:f4:
23:a7:ea:e4:47:18:69:69:65:b3:43:b2:51:e4:86:
82:8e:45:9e:79:f0:0d:62:55:65:b5:99:7a:1a:ba:
f3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:02:2B:FD:06:BD:86:8A:97:F3:17:03:94:36:B7:3A:52:EB:5E:55
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bAIr_Qa9hoqX8xcDlDa3OlLrXlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.187.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:19:7c:87:4a:ea:e6:30:73:8a:cf:c6:b2:df:25:3c:0f:de:
dc:5b:2d:61:1c:d8:2c:1c:55:9f:b8:ac:db:21:bf:2f:88:e5:
49:ec:c7:35:df:a1:17:0d:fc:27:14:df:ed:bb:67:06:f0:46:
a4:5b:9b:dd:87:22:66:89:26:2e:62:3d:9b:40:f0:90:1e:51:
34:50:dd:ab:0c:3a:a8:a9:58:f8:2a:03:74:13:a6:81:bf:5c:
73:62:ed:af:3d:cf:1f:9d:ff:2f:95:c3:db:ce:76:b7:b3:b4:
23:ab:92:5b:fb:bb:51:e8:ef:4e:71:8f:c5:4f:be:c3:98:23:
f6:21:a4:2c:53:60:17:8d:cd:08:50:ac:50:58:e2:97:d5:a0:
ad:c1:52:d2:c0:ff:33:20:1e:89:5d:52:b3:49:18:75:64:38:
1d:4f:4e:2a:fb:c9:59:00:6b:83:0d:0d:52:3c:0f:37:7a:e5:
0f:53:4e:e4:b9:14:50:6c:27:d0:44:13:77:84:47:2a:92:be:
15:6f:2f:c6:3b:1c:46:71:8b:e3:19:13:a3:58:65:13:92:f6:
21:80:9f:bd:5e:16:ab:f6:ef:ac:c6:00:88:c1:be:57:ed:4f:
07:4e:65:81:9a:6e:68:72:b1:39:32:17:ae:2a:2b:fb:01:ab:
48:7e:37:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 13:40:49 2024 by rpki-client on console-fra.rpki-client.org