Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/CS_ryji_30viXnzjKECsqK3gJKo.roa
File: CS_ryji_30viXnzjKECsqK3gJKo.roa (raw, json)
Hash identifier: qGtWmmQDQof/wCvRhSkR6dRb6Uhnh40cWMU/UCLrMXw=
Subject key identifier: 09:2F:EB:CA:38:BF:DF:4B:E2:5E:7C:E3:28:40:AC:A8:AD:E0:24:AA
Certificate issuer: /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial: 018570676771334E0C0D58C0ADFD321FFBAC
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/CS_ryji_30viXnzjKECsqK3gJKo.roa
Signing time: Mon 02 Jan 2023 02:55:02 +0000
ROA not before: Mon 02 Jan 2023 02:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202120
IP address blocks: 45.135.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:67:71:33:4e:0c:0d:58:c0:ad:fd:32:1f:fb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
Validity
Not Before: Jan 2 02:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=092febca38bfdf4be25e7ce32840aca8ade024aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:18:a5:0e:48:34:58:47:52:27:bf:00:b0:dc:
a3:81:9d:11:89:0e:ae:b2:fc:43:66:3b:d1:66:fa:
af:99:21:f9:2c:ea:f5:07:d4:c9:a2:dc:8d:95:dc:
af:1f:5f:4f:5f:3f:65:38:6b:61:b5:b6:e0:c0:7c:
c1:57:13:02:96:4f:ee:5b:0d:39:65:cc:ef:52:08:
14:89:23:1a:a9:0f:7d:28:6b:fc:3d:4f:7c:ac:df:
9f:ba:b1:d3:71:2d:3a:ed:c1:92:77:f3:76:4d:fa:
33:ec:a9:17:07:dd:d8:db:bb:81:a6:62:37:7d:26:
83:47:3d:e5:42:50:2a:a1:48:77:d8:59:7d:19:94:
a8:9f:be:e9:78:c5:e1:14:74:c6:55:a5:e2:6e:ab:
ff:41:f9:25:83:53:2a:9c:07:a0:12:cf:24:41:a3:
d9:30:15:eb:6c:0a:26:5f:5a:00:a8:0b:d3:a2:14:
4e:92:40:79:e4:f7:10:b8:a8:ab:74:03:a0:da:6f:
2b:0b:f3:1a:03:70:40:c7:09:0b:cb:8c:1f:17:63:
06:1d:c8:07:77:69:a1:d2:2a:12:37:36:1e:f8:b6:
c8:91:79:92:39:29:52:3f:44:b2:83:f8:b6:aa:94:
2e:35:3e:a9:64:e4:f4:1d:51:5b:f7:cc:67:10:cc:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2F:EB:CA:38:BF:DF:4B:E2:5E:7C:E3:28:40:AC:A8:AD:E0:24:AA
X509v3 Authority Key Identifier:
keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/CS_ryji_30viXnzjKECsqK3gJKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.210.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ba:3c:3a:a0:15:9e:17:96:b6:5e:5e:cd:1b:c9:17:de:f5:
72:2a:ae:d3:7c:b1:ce:47:e6:4c:0b:55:7a:fb:1a:d5:84:4c:
d7:35:66:c9:45:1b:8c:30:d0:be:fc:f5:f2:7e:5c:c6:12:5a:
2f:61:bb:14:9e:83:3c:5c:bb:b0:b4:a2:ac:47:b9:31:33:ca:
15:65:0e:8a:8f:50:7d:0e:32:57:f6:c4:7f:27:52:b6:3c:87:
29:97:43:b6:c4:f6:5b:45:cf:6a:bd:fd:ce:aa:50:6e:6e:b4:
33:a1:39:ed:55:00:c8:a1:90:ca:0c:dc:fe:b1:01:2b:5a:8d:
df:b2:04:32:a6:e7:65:45:40:3f:1b:97:29:07:2b:bd:59:49:
f7:01:8c:34:a1:30:97:fe:42:56:8a:0b:18:ab:39:10:c0:8c:
1a:08:a0:17:be:52:ea:d8:e7:f6:ee:db:47:95:6f:37:74:48:
4a:2c:1b:ad:fe:88:0a:fb:53:d4:cd:04:14:6b:14:fd:66:ae:
2f:aa:b4:e8:bc:a9:91:70:8a:27:94:b3:2b:63:58:c2:03:a6:
4c:41:6b:59:17:26:f0:93:49:70:ed:1c:f2:5c:07:4c:77:d2:
71:b2:e7:48:e7:30:96:36:7a:0e:28:a0:c4:84:09:97:3d:42:
c8:ae:ef:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:41 2024 by rpki-client on console-ams.rpki-client.org