Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/6n5QUymlmi28JdodeSDlxq4GCuU.roa
File: 6n5QUymlmi28JdodeSDlxq4GCuU.roa (raw, json)
Hash identifier: 953suOc6AEBgISsuDAdcokvbFdrtvdpWGn8YvV5uAyw=
Subject key identifier: EA:7E:50:53:29:A5:9A:2D:BC:25:DA:1D:79:20:E5:C6:AE:06:0A:E5
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C204CD0AB5E0AAF83C9B8D39F7009
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/6n5QUymlmi28JdodeSDlxq4GCuU.roa
Signing time: Mon 02 Jan 2023 05:54:58 +0000
ROA not before: Mon 02 Jan 2023 05:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49444
IP address blocks: 45.86.44.0/24 maxlen: 24
45.86.46.0/24 maxlen: 24
45.86.47.0/24 maxlen: 24
45.86.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:20:4c:d0:ab:5e:0a:af:83:c9:b8:d3:9f:70:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea7e505329a59a2dbc25da1d7920e5c6ae060ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:bf:96:b5:47:ad:9a:71:27:ff:2b:c7:80:
c9:36:93:0a:ed:ca:72:2a:d5:07:cd:33:21:0f:0f:
1a:ce:c3:28:9a:f1:cb:fc:3c:4e:37:58:f1:cc:dc:
2f:b1:8c:c9:d5:e2:02:f6:39:7d:d6:d4:55:b7:7c:
6a:4e:13:6e:1f:ad:ef:a1:01:5a:c1:27:1c:84:13:
a6:c9:87:e2:76:99:1d:88:c7:14:5a:59:b0:2c:91:
ba:d6:bb:28:62:cb:75:a6:12:f0:01:4e:35:05:9e:
5d:2b:6f:d6:9a:67:99:53:23:4f:f1:1f:45:0d:bc:
e0:ac:52:d3:13:fe:2b:96:93:c3:04:c2:5c:09:0e:
7b:75:78:7e:51:22:3b:dd:03:ea:34:4c:0f:db:4d:
d9:78:7d:2c:fc:9f:05:3d:a4:c5:6b:9a:7c:6d:c1:
33:f6:87:81:b2:b5:34:85:7f:12:92:ab:e1:c3:a5:
3f:ee:37:1d:d7:ff:58:30:dd:70:5b:33:af:3e:6e:
b3:f4:3c:b7:cd:ab:f5:f4:d6:00:80:59:64:7e:59:
da:11:d2:03:76:86:99:24:9b:23:29:e6:24:17:bd:
ad:db:13:f0:af:2f:a0:7d:2f:ff:e2:f5:03:59:f6:
14:8c:6b:55:ae:77:a4:0c:91:ae:da:29:52:39:6a:
74:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7E:50:53:29:A5:9A:2D:BC:25:DA:1D:79:20:E5:C6:AE:06:0A:E5
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/6n5QUymlmi28JdodeSDlxq4GCuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.44.0/22
Signature Algorithm: sha256WithRSAEncryption
12:01:d9:e4:c3:7a:90:7d:ee:04:86:ae:1e:b0:16:b7:0d:26:
df:f6:67:96:bf:53:c9:9b:24:72:1c:a4:82:91:37:c8:54:17:
11:c6:f2:e0:c8:00:df:54:ef:2e:58:b8:b9:57:7b:2b:64:38:
04:46:77:ff:f6:18:b2:d3:27:3e:83:73:5e:a1:43:24:8c:f1:
6f:c3:18:6a:d0:9b:8f:5c:ff:3f:cb:c5:67:c1:39:ee:f5:ba:
c4:64:09:28:25:40:44:c7:26:1b:5e:1b:30:5a:8a:4c:65:ea:
5d:09:5c:84:89:58:a1:1f:ec:32:a3:ed:e5:8d:f0:33:0c:dc:
e8:9b:22:41:81:77:f0:e6:b0:e4:77:81:15:ba:44:e3:1e:b3:
05:0b:4f:19:f1:cd:cd:ba:f9:6f:9c:0a:28:43:f5:56:f2:61:
bd:d8:a5:79:c1:ca:b3:3b:b5:af:b6:8d:66:37:4d:ba:38:8e:
58:3c:18:7d:67:61:96:c9:d3:83:93:1b:27:03:2e:48:4a:4a:
b8:fd:18:74:e5:54:56:7d:30:10:d3:77:31:d9:2c:1a:71:ed:
4e:1e:21:c4:cc:eb:1d:c4:4b:71:b6:92:b5:4d:7b:be:17:68:
ee:18:c1:3d:d1:39:0f:8e:d9:36:02:b5:49:62:09:a9:d4:e0:
30:ff:ea:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org