Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Fq1-Bp1ZYvb3lXx-CqBwx34Kk-0.roa
File: Fq1-Bp1ZYvb3lXx-CqBwx34Kk-0.roa (raw, json)
Hash identifier: IL2AaU9MTC25ZJKmqhgzv9s6M7KbeRNQHIrqrm/Hvzs=
Subject key identifier: 16:AD:7E:06:9D:59:62:F6:F7:95:7C:7E:0A:A0:70:C7:7E:0A:93:ED
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C2858934E2C171644C39A79452040
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Fq1-Bp1ZYvb3lXx-CqBwx34Kk-0.roa
Signing time: Mon 02 Jan 2023 05:55:00 +0000
ROA not before: Mon 02 Jan 2023 05:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62282
IP address blocks: 193.34.233.0/24 maxlen: 24
45.137.106.0/24 maxlen: 24
2a0f:7b80::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:28:58:93:4e:2c:17:16:44:c3:9a:79:45:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16ad7e069d5962f6f7957c7e0aa070c77e0a93ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:f5:7a:7c:9a:79:04:69:40:24:f2:82:96:
77:47:bb:25:33:a7:36:b9:f8:63:00:49:4e:7f:94:
57:81:90:bc:ca:49:ad:ca:eb:8b:c2:9a:81:86:0e:
26:58:36:03:85:59:b8:cb:e7:39:17:f3:9b:1c:19:
ad:fc:5c:42:14:8d:a9:ef:81:2e:1f:10:15:8c:69:
2d:4f:b8:3a:1c:54:7f:cc:65:75:9e:b7:3a:aa:60:
82:2c:29:39:c5:e0:80:89:e9:8e:c3:96:25:4f:c6:
60:06:36:fc:19:17:59:5a:ce:b4:fa:ce:b8:78:61:
c3:ff:c5:1c:f9:9d:c6:69:29:72:b2:e2:a8:36:cb:
7f:9d:c5:ba:3d:e1:41:e9:8b:ed:0b:d6:7f:1b:6f:
93:65:25:46:5b:62:e6:21:03:fb:37:51:2b:cc:06:
41:62:7d:af:91:d4:98:97:ea:b3:34:56:aa:e5:c9:
37:dd:69:d1:3b:22:55:b5:47:49:d8:79:07:c5:77:
b0:47:1d:29:73:f2:f3:e8:b5:d3:88:32:4a:87:58:
e4:2b:bb:28:f3:f9:01:91:6e:e8:7b:3c:55:33:05:
c4:9f:82:9d:ec:d2:3d:5e:48:58:5e:a2:94:86:4f:
b4:18:0b:30:60:73:f0:78:1b:41:de:d0:98:80:1f:
a4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AD:7E:06:9D:59:62:F6:F7:95:7C:7E:0A:A0:70:C7:7E:0A:93:ED
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Fq1-Bp1ZYvb3lXx-CqBwx34Kk-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.106.0/24
193.34.233.0/24
IPv6:
2a0f:7b80::/48
Signature Algorithm: sha256WithRSAEncryption
1f:94:65:f1:3c:60:4b:3b:d1:7a:cd:c6:3d:bb:9c:66:2b:36:
e7:b2:f2:7d:24:85:9e:e3:31:45:4e:63:55:14:00:d2:19:3c:
fc:30:5a:57:0b:4f:cb:f7:76:28:09:c2:eb:2f:84:3b:bc:01:
15:0a:38:6d:ab:52:db:1b:e7:3a:22:01:da:3a:4c:91:02:3f:
6d:ba:55:63:cc:79:9d:b3:3c:89:34:50:8b:7e:99:b7:f9:a0:
dd:82:22:aa:e8:1e:15:7d:49:2b:4c:2e:b8:64:37:6e:4e:11:
7c:d9:33:dd:f8:f8:78:1e:0a:90:7b:d7:a9:4e:a1:0e:f3:ca:
07:18:ba:53:5b:1b:50:b3:c5:db:dc:05:7c:49:83:bf:77:0e:
89:23:22:3a:cb:d4:c6:89:3a:a1:29:f0:cf:6f:e6:52:23:ad:
96:08:a8:c7:59:d8:33:6a:fc:e0:8a:ec:b3:9b:27:bd:40:80:
a4:2d:4e:94:ae:26:29:e5:e5:28:1e:37:c0:08:f8:28:8f:21:
31:a1:50:c5:a7:08:10:cd:70:7a:23:12:94:5a:97:da:82:f5:
b3:1b:0b:40:73:87:38:62:3b:68:00:56:4b:36:42:19:1a:5b:
87:e9:ec:4c:ae:c4:62:1a:dd:7c:1e:d9:29:b7:5e:f9:51:9b:
02:a8:90:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org