Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/yY9H7W6bniitbjFVgp3k6PJtxaY.roa
File: yY9H7W6bniitbjFVgp3k6PJtxaY.roa (raw, json)
Hash identifier: KJbiESp6Gho+uiHTroMy1iA+VpfzIvZqCTfKVI+oyw0=
Subject key identifier: C9:8F:47:ED:6E:9B:9E:28:AD:6E:31:55:82:9D:E4:E8:F2:6D:C5:A6
Certificate issuer: /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial: 0185707968A5F2851D2D6CB6ADC5B8D52011
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/yY9H7W6bniitbjFVgp3k6PJtxaY.roa
Signing time: Mon 02 Jan 2023 03:14:42 +0000
ROA not before: Mon 02 Jan 2023 03:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43402
IP address blocks: 45.150.12.0/22 maxlen: 24
2a0f:8a00::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:68:a5:f2:85:1d:2d:6c:b6:ad:c5:b8:d5:20:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Validity
Not Before: Jan 2 03:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c98f47ed6e9b9e28ad6e3155829de4e8f26dc5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:47:6a:3d:5f:29:45:46:16:c5:fa:7d:e0:d3:
41:50:65:fe:31:55:14:e2:cf:6f:28:89:a1:10:47:
dc:a8:ca:3d:8a:f4:fa:95:51:13:0d:80:62:af:c5:
a1:b3:dc:e4:87:70:4c:20:02:41:6a:bf:85:57:d9:
c2:d8:80:83:74:17:b2:51:85:cd:c0:ad:cd:13:6c:
2a:75:d0:58:66:61:52:43:fa:88:7b:a7:1a:66:15:
27:8a:c1:d5:ca:5a:ce:10:ad:98:ce:9e:7c:6a:f9:
b1:d0:2c:75:8f:f0:61:05:b6:54:c7:6b:fd:50:1e:
4d:63:99:21:02:5a:3e:d6:b8:5a:65:23:17:16:24:
52:48:6e:d3:f4:d7:3d:71:45:c9:e0:eb:b1:5a:30:
45:f6:10:90:fc:b1:09:3e:28:2a:38:c1:1e:7a:cd:
76:00:7c:e1:93:8d:f9:23:af:ff:55:ec:77:4e:91:
6a:81:47:6a:6f:bd:90:72:b7:f0:37:d7:6b:05:e8:
60:bc:a7:8c:10:33:50:84:0a:c4:a5:4b:e7:64:9f:
ab:1b:95:93:55:cd:86:ed:01:f3:31:8d:59:e4:d4:
0d:26:e9:cb:99:12:fe:3d:9b:f8:03:1e:04:28:f4:
c1:ba:7e:ea:62:e2:03:9b:9f:41:94:29:bb:c3:0a:
fc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8F:47:ED:6E:9B:9E:28:AD:6E:31:55:82:9D:E4:E8:F2:6D:C5:A6
X509v3 Authority Key Identifier:
keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/yY9H7W6bniitbjFVgp3k6PJtxaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.12.0/22
IPv6:
2a0f:8a00::/29
Signature Algorithm: sha256WithRSAEncryption
c4:63:0c:c5:15:02:06:8c:9f:2c:5c:9b:0a:36:4d:27:9d:51:
97:a0:b3:82:68:5d:7c:f0:21:58:5d:81:65:48:bb:97:83:a7:
78:57:1f:9f:f3:4a:22:4c:34:6c:4d:fd:cf:5d:18:f5:94:8b:
c5:11:77:31:c4:41:6f:1f:00:b9:7d:eb:a3:31:65:e4:05:85:
e1:89:f2:77:05:04:b0:09:36:d3:ac:97:3b:59:b1:2c:93:39:
00:c1:bd:af:d1:5e:99:7f:9c:e2:9d:63:0a:30:a1:12:bc:02:
be:62:1a:84:0a:82:e3:a5:82:86:d8:49:92:6b:0c:50:26:d4:
4a:38:00:99:0e:1c:b3:3a:64:b7:23:56:3a:a5:ff:4b:5c:27:
df:cf:cc:4e:ae:15:87:95:7d:75:3a:9b:c9:85:d6:80:ec:a7:
b7:d9:6d:94:bf:26:36:a0:b9:31:d4:bb:b9:3a:0b:19:9d:16:
d0:ff:14:60:d8:22:2a:12:be:d3:ee:74:c0:15:9d:f8:ac:6a:
2a:f7:2a:04:65:10:c8:d3:5a:be:51:bc:30:5f:d3:cc:db:94:
e5:91:fb:4b:22:01:42:36:bb:41:5a:ed:49:71:a4:81:f9:3a:
6f:69:ca:c9:ba:2d:8e:2c:96:c7:5d:c3:28:bf:62:65:6f:ce:
7c:80:56:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:51 2024 by rpki-client on console-fra.rpki-client.org