Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/isDYC97LCwvHN-ZIz3TlrEbLch0.roa
File: isDYC97LCwvHN-ZIz3TlrEbLch0.roa (raw, json)
Hash identifier: sE99/Qn1GcJ3q9X38hxMLUmwOSiL1nIJY/TlKkwtxOQ=
Subject key identifier: 8A:C0:D8:0B:DE:CB:0B:0B:C7:37:E6:48:CF:74:E5:AC:46:CB:72:1D
Certificate issuer: /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial: 018BF7ECEDEF83B78D78E4D84143EC28806C
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/isDYC97LCwvHN-ZIz3TlrEbLch0.roa
Signing time: Wed 22 Nov 2023 16:46:21 +0000
ROA not before: Wed 22 Nov 2023 16:46:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21221
IP address blocks: 45.135.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f7:ec:ed:ef:83:b7:8d:78:e4:d8:41:43:ec:28:80:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
Validity
Not Before: Nov 22 16:46:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ac0d80bdecb0b0bc737e648cf74e5ac46cb721d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f6:2e:70:f3:9a:2b:99:3c:ca:64:59:be:36:
68:60:cc:d0:19:f4:34:07:1a:35:4c:5e:3a:33:ec:
61:3f:e2:aa:19:69:1a:e4:ba:f6:88:e0:c9:66:5a:
9e:10:49:35:aa:92:70:e4:d5:b2:a1:b4:68:ed:be:
ba:9f:9b:73:77:56:ed:16:f9:d6:74:ab:ef:36:a2:
c5:4a:02:de:7d:cb:33:50:98:e6:15:8e:90:4b:68:
9c:7d:92:02:c6:bf:2c:e3:7c:c2:d9:12:86:c8:b2:
45:7e:9c:8d:81:76:3f:a4:04:43:15:63:53:fe:9b:
eb:41:49:5b:30:3e:37:93:94:bc:13:80:6e:6f:b7:
ff:3b:03:68:9a:e7:3e:8b:26:d2:9e:b0:da:13:24:
57:09:95:69:86:ee:37:a0:57:77:ea:57:5e:49:f5:
80:8e:71:cf:7f:2d:94:3e:01:e2:9b:5c:9d:15:66:
39:3d:6e:63:a3:d1:90:a7:b1:2e:4a:0d:29:91:ab:
28:35:c3:11:1f:49:7e:ee:4a:17:ca:d3:70:29:91:
db:97:4b:87:1c:1a:fd:72:28:f5:37:35:0a:81:0f:
ca:26:16:16:19:53:93:69:47:65:87:4c:41:59:95:
23:f4:f1:92:21:1a:4e:28:29:b2:ae:b6:0f:d6:89:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C0:D8:0B:DE:CB:0B:0B:C7:37:E6:48:CF:74:E5:AC:46:CB:72:1D
X509v3 Authority Key Identifier:
keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/isDYC97LCwvHN-ZIz3TlrEbLch0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.210.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1b:ee:d8:ee:39:8d:34:cc:3a:15:65:a1:70:1f:86:f8:79:
7e:95:f5:e5:d3:e0:68:d6:be:bb:95:7e:43:47:f9:0b:64:93:
29:2d:73:81:77:bf:c6:c8:70:0f:75:34:39:2d:ad:7f:53:b6:
20:ad:96:85:83:45:c6:65:f1:d3:61:28:92:e1:7b:95:57:7e:
05:16:48:28:54:3d:74:19:19:f4:4c:dc:28:86:17:87:5c:62:
f5:be:6b:f8:13:28:b3:4c:db:1b:51:55:4b:e0:24:89:a9:3f:
15:bf:16:fb:9b:d1:4b:2a:4d:b5:a5:36:98:d3:f6:fd:5e:f2:
3b:24:81:32:db:66:38:ce:77:1f:93:67:31:95:a5:a3:57:e7:
28:c1:50:66:8e:7c:65:ec:6f:1a:57:02:9d:c6:c4:11:24:b3:
55:d5:8a:af:7d:61:3f:19:99:c6:e5:1e:ca:2f:87:f2:a9:d1:
8d:d1:50:e6:34:a7:35:3b:03:d2:e9:51:62:30:f2:5f:c2:41:
92:0b:4d:46:6a:b1:f1:0a:21:ee:9c:8e:a5:bc:34:84:7f:60:
67:1f:4a:a9:dd:94:6c:2a:69:61:11:df:5b:65:00:95:9d:77:
e1:c3:55:24:4e:5f:37:06:a7:41:fc:47:7c:22:20:67:02:29:
cc:2c:84:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:41 2024 by rpki-client on console-ams.rpki-client.org