Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/RoEwN9rbUVjboopQIaj1RJ9rhWc.roa
File: RoEwN9rbUVjboopQIaj1RJ9rhWc.roa (raw, json)
Hash identifier: dEFBMio2Wsza6dcXpFX6TCVnAseV0cTHLl7Z5FNc8Os=
Subject key identifier: 46:81:30:37:DA:DB:51:58:DB:A2:8A:50:21:A8:F5:44:9F:6B:85:67
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018B5C0CAB0C0CABF69C9FAA97E88880AA08
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/RoEwN9rbUVjboopQIaj1RJ9rhWc.roa
Signing time: Mon 23 Oct 2023 10:20:15 +0000
ROA not before: Mon 23 Oct 2023 10:20:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 45.135.235.0/24 maxlen: 24
45.133.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:0c:ab:0c:0c:ab:f6:9c:9f:aa:97:e8:88:80:aa:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 23 10:20:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46813037dadb5158dba28a5021a8f5449f6b8567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:62:cf:0b:af:b9:16:19:7b:69:ff:f1:b5:17:
36:75:1a:5d:e7:a8:1a:d5:90:c0:58:a9:f1:ad:95:
ac:62:92:0f:2f:dd:df:dd:1b:8e:b7:a8:58:25:b6:
d1:07:d7:0a:58:e5:bb:0d:86:49:36:49:77:b8:b9:
62:d7:dc:d5:79:8e:35:ca:8c:c1:a5:bb:16:f7:24:
35:a0:16:b5:12:28:be:ec:7a:62:96:8d:6d:0f:c3:
2f:84:f3:2e:9a:16:d2:98:43:25:70:37:0d:c1:b7:
a0:3d:92:81:9f:e2:ce:58:51:51:27:3d:4e:e4:5c:
6b:b8:c5:fb:85:03:eb:0d:5c:2f:7e:12:d8:08:ac:
1a:ea:49:67:4f:97:44:7e:69:7c:23:63:ba:a4:64:
cf:53:8f:84:b8:36:ab:1b:eb:2d:db:a1:6b:5b:35:
ff:c2:2c:a2:1a:af:5e:52:2b:c3:85:68:60:cb:eb:
94:39:67:12:89:1e:52:fa:a7:f2:b0:94:b2:f3:a2:
c7:0a:14:69:b8:29:c3:4d:e0:12:0d:66:44:b6:f1:
d8:e2:88:c2:a7:73:27:32:47:96:86:59:2a:91:92:
7c:02:a7:3a:cd:09:9a:15:3a:9d:6b:37:06:7f:08:
3e:de:61:44:ca:f6:73:81:5e:cc:2c:44:b9:24:2a:
5f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:81:30:37:DA:DB:51:58:DB:A2:8A:50:21:A8:F5:44:9F:6B:85:67
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/RoEwN9rbUVjboopQIaj1RJ9rhWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.234.0/24
45.135.235.0/24
Signature Algorithm: sha256WithRSAEncryption
27:35:cc:9d:35:9c:b5:a3:71:65:df:a8:be:8e:ed:af:b5:21:
52:5a:dc:5a:06:2e:9d:1f:2a:e9:4f:7e:8b:3d:72:7b:6d:2c:
07:65:0b:92:9a:21:65:f6:8b:b9:34:26:23:37:75:bf:69:55:
52:29:6f:12:db:fa:7a:32:7a:c7:ad:9e:e7:2b:31:c2:7f:a1:
02:13:bf:4b:2f:e2:8e:a8:34:79:b2:d3:8c:92:9e:3c:67:44:
68:fb:b9:38:f0:93:ea:1a:7e:44:cf:ba:e9:7f:f6:7f:b2:cc:
9e:3e:20:6c:20:dc:ff:56:85:3d:ff:19:e2:72:3c:19:c2:6c:
eb:6d:a8:c7:58:e9:e2:83:ce:11:8e:c5:b1:44:8f:11:47:1e:
3c:78:9d:59:f5:b1:e8:3f:3b:2c:e5:00:4f:bf:b9:de:6a:04:
72:b8:39:01:0f:35:08:fa:dd:7c:97:a4:dc:74:c1:ad:b4:f2:
ba:5c:7a:0c:92:0b:72:3f:a8:15:3d:88:a1:1e:69:fe:e6:93:
af:5f:d0:e2:75:0a:9c:cb:7d:1f:e5:25:a3:29:ff:73:57:fb:
15:25:2e:a9:d6:c7:67:a6:a0:8d:d1:0e:97:8b:d6:4e:1f:01:
27:02:c4:df:8a:a0:28:46:27:42:9b:6b:24:12:33:f0:77:f7:
9b:09:8d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:41 2024 by rpki-client on console-ams.rpki-client.org