Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/o-2s42qAVAT_asdU83VGsGJBOpw.roa
File: o-2s42qAVAT_asdU83VGsGJBOpw.roa (raw, json)
Hash identifier: oVglQPxeOlms5SMmIfo6UtEyN8XwWTQf8GFbJPNXg1g=
Subject key identifier: A3:ED:AC:E3:6A:80:54:04:FF:6A:C7:54:F3:75:46:B0:62:41:3A:9C
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0186FACC212CCD42DD505F51E4DFCADBD09E
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/o-2s42qAVAT_asdU83VGsGJBOpw.roa
Signing time: Sun 19 Mar 2023 16:55:27 +0000
ROA not before: Sun 19 Mar 2023 16:55:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 45.8.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fa:cc:21:2c:cd:42:dd:50:5f:51:e4:df:ca:db:d0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 19 16:55:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3edace36a805404ff6ac754f37546b062413a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:aa:69:37:23:78:d6:da:15:10:75:d2:43:
c5:9d:b3:9b:fc:32:4f:0c:6e:34:6e:52:7c:1d:c6:
26:9e:9b:6b:d9:8d:65:4d:a7:c3:5b:25:8b:88:26:
12:88:4d:d9:3b:e5:87:7c:19:83:3f:f7:7b:ff:ca:
22:6e:81:ec:97:f9:de:5c:5c:d6:58:6a:4b:fb:b2:
fc:c3:94:01:3b:86:7e:2b:e9:f8:7d:bc:3c:fb:f4:
0f:39:5c:e9:0d:dc:36:10:79:e7:2e:63:6c:0c:a4:
d2:90:c7:98:32:d2:91:2e:ea:25:28:e4:7c:72:55:
1c:62:f4:48:b5:04:90:22:bb:9d:71:31:92:bc:aa:
f6:74:e7:2b:31:cc:36:83:46:87:6f:ef:14:9c:2f:
8e:c5:01:e3:c0:40:d6:6c:46:11:c4:90:c5:6b:c8:
c4:db:91:ae:81:c9:52:21:0d:e3:5b:a0:58:4a:8f:
ce:e1:f6:06:80:9c:07:cc:2e:cf:0f:8e:cb:92:7a:
b5:4d:7a:a9:11:41:4f:6a:bb:dd:4e:f3:10:86:68:
8d:40:60:c2:cb:27:92:ba:2d:93:dc:70:69:20:a6:
b8:46:c7:fe:94:77:de:cd:ad:c2:e0:dd:8f:fc:0d:
cc:7b:14:80:62:ce:e8:6a:8d:61:43:77:da:de:e2:
73:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:ED:AC:E3:6A:80:54:04:FF:6A:C7:54:F3:75:46:B0:62:41:3A:9C
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/o-2s42qAVAT_asdU83VGsGJBOpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.196.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ab:fb:f1:4c:2a:99:1e:13:31:b7:dc:e5:4c:9c:5d:2e:e4:
ac:df:e2:f4:f6:0c:13:63:b4:5b:05:50:cf:ae:6a:25:9d:cf:
61:cf:f8:84:12:c9:c5:4a:1e:2f:70:f5:60:28:97:d4:66:af:
43:71:13:52:a0:34:63:0b:31:a2:0d:f1:2a:0a:d0:1d:1c:25:
6c:4f:d6:ba:fb:0f:7d:94:8a:1c:81:d2:9d:19:ee:30:53:09:
77:dd:97:e4:79:6a:f4:9d:c2:50:3a:25:cc:fe:f1:13:c3:31:
ec:fd:6e:5a:40:c1:47:eb:27:ec:5d:e5:da:64:20:df:80:4a:
ce:09:db:65:ba:bc:85:a3:f9:0b:17:18:8d:c9:a0:1d:37:5c:
5c:0b:bc:85:6c:08:27:97:7f:27:d7:e4:65:16:ca:02:6e:14:
dc:a3:49:49:32:cc:c2:06:c8:56:d9:88:32:cd:a2:7e:36:c6:
72:59:44:d7:48:93:83:bf:e9:cf:62:d5:1d:eb:b3:93:fb:ab:
f2:4d:33:df:78:71:f5:9e:fa:a2:7f:e2:f2:dc:4c:b9:47:9f:
f0:98:ce:c0:e9:12:cc:1f:e7:af:8d:24:07:3f:94:e8:28:36:
c5:0a:0e:17:0b:69:8e:59:5a:0a:c3:ef:ae:d2:cb:fd:7d:d6:
38:66:d8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:17 2024 by rpki-client on console-fra.rpki-client.org