Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/tXP8FyjH0Fuf0wtqDGVGX2a_79s.roa
File: tXP8FyjH0Fuf0wtqDGVGX2a_79s.roa (raw, json)
Hash identifier: d6YPqHlyu7OsBO1T2DgvhEkK8ReF5IPD7OaoJ7O1oZc=
Subject key identifier: B5:73:FC:17:28:C7:D0:5B:9F:D3:0B:6A:0C:65:46:5F:66:BF:EF:DB
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 01890D968CAC270B470883D3577C797F0E0C
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/tXP8FyjH0Fuf0wtqDGVGX2a_79s.roa
Signing time: Fri 30 Jun 2023 18:35:17 +0000
ROA not before: Fri 30 Jun 2023 18:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.149.62.0/24 maxlen: 24
45.149.62.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 31 Jul 2023 15:11:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0d:96:8c:ac:27:0b:47:08:83:d3:57:7c:79:7f:0e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Jun 30 18:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b573fc1728c7d05b9fd30b6a0c65465f66bfefdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:30:94:3e:82:ce:97:38:85:77:3e:91:e9:
9f:e7:35:e7:e1:4b:9a:9c:7f:6c:58:8c:c8:d3:d6:
90:fb:c9:df:45:b1:bd:71:60:a3:30:0b:0f:38:74:
5b:ab:db:a5:bb:30:b6:05:3a:64:0c:10:36:6f:89:
1b:a2:ee:6c:87:98:d9:a4:ed:2a:b7:f8:6e:73:94:
ac:59:23:45:f6:74:4a:f9:8c:ad:4d:3d:6f:97:a0:
7e:32:92:87:d1:f2:62:94:b4:c9:53:73:dd:6f:68:
3a:d2:a5:c0:02:52:2d:84:b5:e1:30:26:a2:a6:18:
3e:a8:8c:fd:38:e7:0d:c1:36:b4:94:93:6b:27:42:
b6:01:78:df:84:2f:3f:6d:ea:41:fb:58:e4:3e:d3:
34:42:18:e3:44:3c:72:3d:11:64:43:09:c0:56:77:
c5:d9:a2:1f:f9:d4:f5:10:12:9c:a2:98:ab:2a:a2:
38:37:d3:ce:72:14:1c:f5:f5:9e:43:26:66:6f:1e:
d5:a5:24:f1:9e:11:59:bc:0b:75:a8:5b:3c:e5:ba:
c3:25:25:f0:03:b6:a5:29:18:be:ec:f6:d8:4b:24:
a6:b8:3c:63:03:ec:a2:4a:41:7b:14:85:11:b9:b4:
19:ad:5f:b1:45:6c:70:d6:b0:e8:9c:0b:7b:69:81:
84:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:73:FC:17:28:C7:D0:5B:9F:D3:0B:6A:0C:65:46:5F:66:BF:EF:DB
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/tXP8FyjH0Fuf0wtqDGVGX2a_79s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.62.0/23
Signature Algorithm: sha256WithRSAEncryption
75:1d:6f:37:c1:73:6c:fd:d5:b1:81:db:b0:64:c0:bc:13:95:
62:d6:1f:f3:ba:fa:e5:ac:37:b3:86:4f:0f:80:ce:7d:19:94:
8c:d0:df:2d:00:91:91:98:1e:38:3e:07:97:da:1e:ab:18:6e:
a4:ce:0c:84:97:ed:48:f2:e1:08:7e:fc:2d:0e:72:e2:66:e4:
7b:a1:97:72:17:3a:e4:3a:92:e0:f9:c1:29:f7:53:08:b6:e2:
69:c9:f3:58:88:19:c4:df:fb:89:68:cd:97:84:67:e1:a1:d7:
3f:7c:3a:ac:da:68:2f:30:79:60:10:5b:89:6b:ec:17:e8:e9:
e5:c2:f4:36:b5:40:89:1b:57:03:1d:9a:99:31:d6:89:7d:99:
e8:43:84:84:a6:b0:af:d6:f6:7f:c9:c7:cf:48:b0:33:92:c7:
b0:13:c5:4d:14:e9:bb:f4:ac:02:4e:e3:4b:e3:79:5b:01:cf:
a9:46:2b:26:00:cc:9c:f0:2b:a8:60:32:e6:f3:d4:b4:c8:5f:
68:89:05:05:da:20:62:f0:e2:42:51:d4:d3:d0:1d:3a:de:85:
b3:bb:a7:e6:e6:02:ce:85:bf:44:98:9e:e8:b9:b6:d7:45:fc:
aa:8c:78:18:ba:dd:90:93:a7:2e:5a:c6:c3:ab:62:44:18:c4:
c2:c6:c0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:18 2024 by rpki-client on console-ams.rpki-client.org