Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/4-dzoayQO2EhX3Z2-rOL9Rf54ck.roa
File: 4-dzoayQO2EhX3Z2-rOL9Rf54ck.roa (raw, json)
Hash identifier: IxIwqiRLLpGHczHK25ca5PWxZjgy8KPO3V/be9EL0rI=
Subject key identifier: E3:E7:73:A1:AC:90:3B:61:21:5F:76:76:FA:B3:8B:F5:17:F9:E1:C9
Certificate issuer: /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Certificate serial: 018570307921BB8BBD72EB36B6EE8C096D2D
Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/4-dzoayQO2EhX3Z2-rOL9Rf54ck.roa
Signing time: Mon 02 Jan 2023 01:55:02 +0000
ROA not before: Mon 02 Jan 2023 01:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208627
IP address blocks: 45.91.126.0/24 maxlen: 24
2a0e:f42::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:79:21:bb:8b:bd:72:eb:36:b6:ee:8c:09:6d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Validity
Not Before: Jan 2 01:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3e773a1ac903b61215f7676fab38bf517f9e1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7a:92:45:22:99:77:ea:c7:9e:a7:f1:0d:8f:
a2:8c:d6:5c:c6:03:a2:8c:06:bd:a7:77:73:f9:89:
eb:5c:3e:66:c1:4d:0e:c8:5a:a5:7c:21:2c:36:3a:
09:7e:76:69:48:04:82:00:da:07:0a:be:9f:dd:f8:
ff:38:b2:55:c5:ec:57:3a:a4:1b:00:c1:7d:a2:62:
29:80:ee:3b:14:6f:2c:fc:33:cc:c6:d6:9f:89:c8:
c5:27:71:54:42:9a:20:c4:80:94:9e:98:e1:aa:35:
ca:ee:7b:0f:94:78:57:c2:37:45:3a:c1:25:43:32:
a0:51:8c:5d:4e:22:99:e7:53:f7:d4:cb:b0:54:50:
c5:d6:fb:30:76:0f:22:4c:27:ce:3d:59:3e:17:48:
d1:28:15:6e:b7:f1:71:65:88:86:85:84:3c:25:74:
42:a0:e7:c0:92:12:a1:22:e6:6d:d3:8e:6f:9e:ea:
9a:89:34:e2:ce:f4:a4:b7:60:e3:9d:1e:fe:65:69:
6b:1b:58:15:2b:73:9f:dc:63:c4:77:47:aa:49:ba:
3c:9c:20:18:ae:4a:4b:01:9e:99:5f:8c:9b:3b:e5:
3f:3c:83:cb:89:e2:35:94:33:60:4d:36:ac:65:f2:
07:0b:81:81:a4:6f:6c:12:b9:48:a4:ef:ff:31:09:
80:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E7:73:A1:AC:90:3B:61:21:5F:76:76:FA:B3:8B:F5:17:F9:E1:C9
X509v3 Authority Key Identifier:
keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/4-dzoayQO2EhX3Z2-rOL9Rf54ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.126.0/24
IPv6:
2a0e:f42::/32
Signature Algorithm: sha256WithRSAEncryption
16:45:2b:39:b3:fc:77:5c:65:3f:f8:9f:76:d6:db:87:54:5f:
f0:84:84:49:fc:c4:a5:e0:86:85:f3:ff:e6:46:a2:30:0c:bb:
f1:a2:53:cd:8b:d1:b4:99:20:86:bb:17:2a:f7:b0:ef:5e:be:
85:b3:97:93:3d:e7:4a:8c:55:ce:c5:aa:11:3f:99:88:f3:97:
e9:4a:17:06:d3:83:36:d6:98:3e:46:59:a8:51:f4:62:f4:cd:
f9:7e:b5:40:96:59:95:37:46:29:7e:31:e0:34:6a:4c:ff:9c:
59:d9:4d:4f:1d:7f:f0:f9:48:5b:1b:84:37:33:07:5c:f3:e4:
01:b0:cf:06:ba:c1:b1:65:55:0d:87:1f:f7:4e:f4:5e:96:1f:
a8:ee:ec:7e:35:1b:da:4a:d2:a4:04:c5:0e:bc:ec:62:17:1b:
93:64:fc:37:b9:3f:4f:ec:f4:32:df:00:c8:9f:31:89:a8:b4:
e8:a1:bb:2e:b0:f1:2c:9b:b2:7c:5a:d2:ff:6e:f3:d7:31:5e:
8b:5d:4c:19:46:5d:13:7b:89:1c:0a:87:81:aa:fa:9d:86:28:
9c:4c:ed:55:30:d0:e3:e9:af:d2:21:b2:ff:00:4a:89:d8:8b:
b0:f8:0e:6b:17:df:3c:70:32:b0:0b:0c:71:5c:f5:bf:f6:43:
26:59:d7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:33 2024 by rpki-client on console-fra.rpki-client.org