Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/M6iMKwqyUiKAFKqmlRiZyy0Xh_A.roa
File: M6iMKwqyUiKAFKqmlRiZyy0Xh_A.roa (raw, json)
Hash identifier: 8VDKKGE/Dwklv6D0OxNf1C/wMcD2M9n/IxJ/FMmwWSw=
Subject key identifier: 33:A8:8C:2B:0A:B2:52:22:80:14:AA:A6:95:18:99:CB:2D:17:87:F0
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 01857139BBAB341CB403C98711087C0FFD87
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/M6iMKwqyUiKAFKqmlRiZyy0Xh_A.roa
Signing time: Mon 02 Jan 2023 06:44:47 +0000
ROA not before: Mon 02 Jan 2023 06:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60995
IP address blocks: 45.13.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:bb:ab:34:1c:b4:03:c9:87:11:08:7c:0f:fd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jan 2 06:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33a88c2b0ab252228014aaa6951899cb2d1787f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ee:89:99:21:20:67:9a:3d:12:41:c2:0e:8d:
81:c6:1f:48:3e:cb:7b:c7:fc:d0:e2:bc:6e:46:30:
ba:90:67:6f:5d:b7:52:e0:5e:25:56:83:5b:51:5c:
69:95:8f:0b:a7:ab:be:4a:44:3d:04:51:ab:c3:78:
c9:2e:e6:d7:d7:e2:92:cf:1c:4d:2f:9c:af:34:d4:
65:40:ca:da:c1:c8:ee:9f:e8:75:b6:f5:10:69:45:
37:4b:1a:6a:97:27:6a:65:ea:3c:da:8a:03:a1:dd:
f6:76:bf:56:80:8d:dc:e6:8a:50:b2:ae:7b:30:30:
6a:02:83:d1:3a:1a:80:ae:86:10:60:33:2b:52:62:
1b:08:87:2b:42:17:83:1f:c7:b2:78:35:b3:92:fc:
e1:52:d0:28:68:5d:53:e0:d2:80:3f:ef:2d:61:e4:
71:a5:a3:e2:37:82:65:88:b8:d8:78:73:5d:9f:8b:
29:2f:4a:e2:79:22:42:3f:fa:a4:2f:dc:68:9f:73:
dc:5d:95:24:28:c8:c6:be:09:e2:ac:1f:05:c4:f8:
c3:59:be:bb:b0:53:08:6a:eb:d3:c1:ae:dd:d0:12:
a7:2e:46:81:ab:ed:78:34:0c:de:f1:c0:d3:3a:05:
cb:c5:f2:55:36:af:c9:8a:6a:98:b2:da:0a:9f:14:
51:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A8:8C:2B:0A:B2:52:22:80:14:AA:A6:95:18:99:CB:2D:17:87:F0
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/M6iMKwqyUiKAFKqmlRiZyy0Xh_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.136.0/24
Signature Algorithm: sha256WithRSAEncryption
27:91:58:3d:7a:1a:ba:f6:76:64:f8:c6:b9:9e:3a:b6:1b:a5:
3f:29:92:89:fa:20:f1:92:d7:cd:94:a1:36:53:56:c2:13:73:
f1:ef:18:94:18:2b:d2:95:4c:d6:82:34:1c:91:4a:24:1e:89:
41:04:56:bf:13:44:8b:ae:bd:21:bc:39:23:22:33:5c:63:77:
56:74:db:e2:bb:85:d5:ce:20:d7:57:bf:3f:94:6f:c9:60:1f:
83:b5:46:d2:6a:ab:8e:53:2e:99:93:17:8c:52:93:21:3c:11:
46:16:1b:33:ae:91:b6:4e:22:43:02:f5:b1:63:23:af:e9:a9:
f4:eb:c9:dd:c1:15:1d:1d:84:da:61:58:df:69:a7:08:af:1d:
b5:c8:df:3c:23:cc:65:80:71:de:1f:41:88:6b:2b:23:38:2e:
38:44:30:bb:87:69:2d:db:17:93:e0:d4:4f:e9:53:28:85:87:
96:b5:60:3d:39:eb:97:83:67:d4:ac:0e:69:3c:82:38:ea:b0:
79:47:8f:2e:b3:83:3c:cf:ff:cf:ae:97:ab:1b:b9:72:fb:0c:
cb:95:d7:30:87:c0:55:c0:cd:76:3a:4b:a8:94:f6:08:b1:3d:
72:4f:7c:52:44:3d:53:77:4b:ab:7c:95:7b:33:9c:62:ab:70:
48:a8:52:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org