Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Dn6RSl5PwQj-i0MizQtGlfCj-D0.roa
File: Dn6RSl5PwQj-i0MizQtGlfCj-D0.roa (raw, json)
Hash identifier: Bq42dHKBj9ckZCIjb+/+k5FlEUxpJKSQuMGj7I1KVzQ=
Subject key identifier: 0E:7E:91:4A:5E:4F:C1:08:FE:8B:43:22:CD:0B:46:95:F0:A3:F8:3D
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 018CE7DDE621F11227E23FB150406E9A69A4
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Dn6RSl5PwQj-i0MizQtGlfCj-D0.roa
Signing time: Mon 08 Jan 2024 06:58:48 +0000
ROA not before: Mon 08 Jan 2024 06:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.158.62.0/23 maxlen: 24
45.158.60.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 07:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e7:dd:e6:21:f1:12:27:e2:3f:b1:50:40:6e:9a:69:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Jan 8 06:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e7e914a5e4fc108fe8b4322cd0b4695f0a3f83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:35:1d:77:7a:3c:4e:8a:b8:79:d6:5f:7a:
27:80:37:86:8d:c6:0a:da:bd:71:1f:9e:5a:23:bc:
89:e2:3c:10:7d:f2:15:5d:7b:4f:44:dd:21:a9:91:
6d:3c:b2:12:d0:36:01:9c:89:76:56:88:9e:f6:43:
d2:a6:54:05:85:0f:e5:43:c7:60:92:ba:40:51:4e:
7e:8b:e1:be:97:e0:69:3d:af:28:2a:17:2a:4f:f6:
24:bb:82:60:ed:6c:cd:5a:fa:8c:d8:cd:27:12:6d:
35:3c:3d:8b:b5:07:40:45:6e:a0:ab:65:a9:28:ac:
60:7a:3d:52:3c:b4:fb:8f:99:c8:e7:00:52:30:2d:
67:6b:3e:13:df:d0:e5:49:c6:d6:d2:a0:f4:f2:b9:
03:6a:45:5b:a6:e2:65:0d:82:e0:7d:dc:cb:92:57:
8a:e4:44:55:3d:40:39:7e:59:45:68:3b:21:a1:a3:
eb:55:b6:8f:67:53:cf:6d:79:3b:15:12:66:d1:a9:
a6:1e:af:e4:a9:41:4b:f2:c7:dd:cf:db:3b:73:2c:
ec:51:56:a2:27:0e:f4:f0:3a:3f:59:2c:9d:99:03:
c9:46:c2:d7:ff:0c:55:eb:96:19:5d:0b:61:9b:97:
11:3e:a1:54:9e:4d:2f:c1:43:6f:df:8e:5b:2f:18:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7E:91:4A:5E:4F:C1:08:FE:8B:43:22:CD:0B:46:95:F0:A3:F8:3D
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Dn6RSl5PwQj-i0MizQtGlfCj-D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.60.0/22
Signature Algorithm: sha256WithRSAEncryption
44:26:3e:4b:89:24:90:ca:cb:6d:6b:bb:bd:ca:21:bf:7e:31:
54:9b:f2:90:a6:6e:2c:ff:b2:0c:36:bb:95:6d:92:2c:59:2f:
dd:db:7c:ce:82:37:c1:85:be:4e:45:8d:f0:6e:f4:15:0a:c3:
87:54:78:86:33:a2:96:75:da:11:3e:5b:3a:18:d5:c1:d9:14:
f3:9e:08:4d:64:b5:db:41:b6:a4:01:f6:16:83:79:be:8e:3d:
4a:b4:75:7f:73:80:9a:96:4d:6f:ea:9b:1a:b9:91:d4:a3:68:
f5:8b:94:51:14:f9:d6:ba:34:41:fe:a6:1a:64:6e:e0:6a:c0:
9d:1b:2e:91:d7:08:f9:43:90:23:db:b0:35:19:37:06:68:f2:
3d:c8:3c:83:ca:2d:f5:7a:21:c7:79:c6:33:30:81:19:e9:29:
7a:35:f2:81:42:04:8f:f2:af:0d:a1:36:f7:1f:e4:ba:bc:18:
48:f1:23:5d:dc:a0:15:f6:24:51:3b:f1:77:40:69:cb:d4:95:
5f:fe:55:b9:a3:74:79:17:52:a5:c2:6f:84:80:77:99:3c:76:
50:f7:37:69:27:5e:72:0d:87:e0:1a:4d:39:61:c1:a7:ee:9e:
7c:49:37:a3:dc:ed:7e:28:78:0c:7a:1a:8a:e2:bd:6b:7d:a7:
6e:9d:00:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 11:45:10 2024 by rpki-client on console-ams.rpki-client.org