Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/m6CZGMynbPgeIys6cvJZIwfHvbE.roa
File: m6CZGMynbPgeIys6cvJZIwfHvbE.roa (raw, json)
Hash identifier: IFE7feE65xj+3OZQVvmDoiel3+TOSe3g4+vvLq9zEqw=
Subject key identifier: 9B:A0:99:18:CC:A7:6C:F8:1E:23:2B:3A:72:F2:59:23:07:C7:BD:B1
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 018A8338CCA21C98A76671200C661ACF63BF
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/m6CZGMynbPgeIys6cvJZIwfHvbE.roa
Signing time: Mon 11 Sep 2023 07:50:52 +0000
ROA not before: Mon 11 Sep 2023 07:50:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197968
IP address blocks: 45.135.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:38:cc:a2:1c:98:a7:66:71:20:0c:66:1a:cf:63:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Sep 11 07:50:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ba09918cca76cf81e232b3a72f2592307c7bdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:33:b5:75:cc:df:cc:2c:68:9f:e5:1f:5a:
34:07:e9:33:c4:7e:56:a9:84:19:43:04:a4:43:08:
17:c6:41:c8:4c:d9:23:d9:de:4e:25:02:85:bd:f5:
e5:22:e1:b4:81:c2:7f:9b:3d:c1:01:52:4e:19:20:
04:9c:ed:c2:56:e2:91:06:8e:d6:92:be:1a:b6:d1:
81:c0:cd:1e:1c:26:b2:9e:ef:f0:04:e4:cb:18:03:
02:8b:c4:eb:24:d2:65:7d:21:a5:19:e8:23:c1:a9:
7c:1d:0a:24:bc:2a:79:4e:22:69:20:45:c0:1c:69:
ab:79:68:09:fc:ad:5a:02:9b:1e:ba:27:5b:c0:78:
49:80:07:43:c5:07:9d:7b:35:58:92:97:b5:cc:5e:
55:df:21:89:d7:5c:58:73:7c:6c:dd:13:0b:54:cb:
ab:52:4e:70:73:69:38:91:88:aa:93:a5:a8:b4:8d:
a1:44:13:88:7e:dc:00:48:35:7c:98:24:07:70:8f:
8f:e9:86:3d:c9:e7:1d:a1:5f:13:b6:8c:72:2e:17:
0d:ab:59:cf:18:85:6d:28:05:b5:b3:10:cc:df:3d:
47:36:57:ba:de:be:1f:71:ea:ac:8f:11:11:d7:e0:
e3:b7:bd:3d:0e:c3:6c:be:e2:09:a7:8d:ae:f2:b3:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A0:99:18:CC:A7:6C:F8:1E:23:2B:3A:72:F2:59:23:07:C7:BD:B1
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/m6CZGMynbPgeIys6cvJZIwfHvbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:4c:3e:ce:40:90:59:f8:ca:b2:81:7d:d0:5c:24:d3:56:cb:
88:9b:98:7d:73:c9:7a:6d:ce:93:64:34:37:b5:6d:d4:ea:27:
7e:63:eb:20:49:b9:21:cf:76:8d:3c:90:7c:d1:ee:6b:6a:b3:
ca:f9:65:2b:04:b2:00:76:ae:e8:89:70:6c:4c:8c:3d:7b:83:
c8:1c:59:f6:58:b6:4d:aa:12:5f:82:96:e2:5c:ff:cb:8c:eb:
d2:a4:74:ad:f9:65:17:f5:e8:f9:cd:40:37:36:80:56:b6:fc:
bd:53:b9:75:7e:c1:52:f6:22:8e:73:3f:26:6e:ae:12:bd:a4:
60:0e:6a:7d:09:53:28:28:36:91:1c:09:14:9f:2f:3a:4b:15:
00:6a:07:a6:24:57:37:45:49:7d:d9:b0:11:ce:83:ef:5f:3a:
59:2d:89:16:cd:48:d3:d9:93:a3:a1:9c:ca:d7:88:27:de:4c:
d8:06:d9:01:e4:21:cf:cd:58:d6:12:c0:fd:cf:70:17:a5:89:
c2:c9:24:a7:af:09:16:ce:99:a0:9c:d6:46:a1:2a:80:f1:67:
1d:36:bc:78:9a:2a:39:fd:67:e7:2a:d4:ea:27:52:67:8e:17:
a0:1e:6d:d9:0f:0d:8f:29:42:3a:eb:a1:ca:63:15:12:d1:20:
25:5b:3a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:35 2024 by rpki-client on console-ams.rpki-client.org