Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/V-JzzdGdYxiGow4xLXrCUsnVwOw.roa
File: V-JzzdGdYxiGow4xLXrCUsnVwOw.roa (raw, json)
Hash identifier: R6CbrhrB+znMUsrR+U22TLDS6G6v6S6oYr3ZSN51aGw=
Subject key identifier: 57:E2:73:CD:D1:9D:63:18:86:A3:0E:31:2D:7A:C2:52:C9:D5:C0:EC
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C318EF5E327F9F6B90C5DF4F305C6
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/V-JzzdGdYxiGow4xLXrCUsnVwOw.roa
Signing time: Mon 02 Jan 2023 05:55:02 +0000
ROA not before: Mon 02 Jan 2023 05:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203629
IP address blocks: 45.95.201.0/24 maxlen: 24
2a0c:77c3::/32 maxlen: 32
2a0d:3884::/32 maxlen: 32
2a0d:3880::/32 maxlen: 32
2a0c:77c7::/32 maxlen: 32
2a0d:3883::/32 maxlen: 32
2a0d:3885::/32 maxlen: 32
2a0c:77c0::/32 maxlen: 32
2a0c:77c6::/32 maxlen: 32
2a0d:3882::/32 maxlen: 32
2a0c:77c5::/32 maxlen: 32
2a0c:77c1::/32 maxlen: 32
2a0d:3886::/32 maxlen: 32
2a0c:77c4::/32 maxlen: 32
2a0c:77c2::/32 maxlen: 32
2a0d:3887::/32 maxlen: 32
2a0d:3881::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 27 Feb 2023 12:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:31:8e:f5:e3:27:f9:f6:b9:0c:5d:f4:f3:05:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57e273cdd19d631886a30e312d7ac252c9d5c0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cd:66:2e:60:f5:31:1c:f5:be:a3:d5:72:2f:
b0:02:1f:fb:72:90:a3:8d:a3:2d:05:52:74:89:01:
9e:4d:79:d0:0a:95:fa:e6:cb:84:3e:81:d5:56:54:
1d:b7:f1:e6:d0:6e:f4:f7:a6:7c:8f:50:eb:37:c2:
b7:0f:0f:bc:a7:fb:0a:2d:52:99:a6:57:be:f7:84:
32:5c:ab:ab:76:19:d7:a2:c8:f6:be:2b:6d:e6:30:
6f:1d:9f:eb:d8:42:bc:86:6d:86:39:d0:8e:bd:65:
90:d3:e4:9f:28:25:bb:2d:50:27:f9:e0:7a:b0:f3:
b7:70:0f:ae:7f:30:a9:10:37:92:7e:dc:ec:7a:80:
e6:69:50:98:30:bc:fc:10:4d:e6:f5:ea:0a:db:c1:
2d:98:2f:43:df:ab:a9:53:2c:42:24:47:fd:fe:ac:
ce:eb:bf:5f:5a:bc:96:c0:5b:bd:10:6b:cf:35:bb:
65:84:b2:71:2b:e9:70:da:90:9a:2f:9f:36:28:7f:
04:58:77:f4:ea:cd:1b:fd:78:94:7d:79:64:d3:b0:
8a:c5:07:2c:4f:72:ef:3a:89:8e:65:09:5f:0c:39:
91:13:12:47:b2:13:fd:db:06:c0:25:e8:73:fc:77:
01:04:92:4f:f9:a8:a6:e5:88:7b:8e:f1:47:56:d1:
79:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E2:73:CD:D1:9D:63:18:86:A3:0E:31:2D:7A:C2:52:C9:D5:C0:EC
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/V-JzzdGdYxiGow4xLXrCUsnVwOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.201.0/24
IPv6:
2a0c:77c0::/29
2a0d:3880::/29
Signature Algorithm: sha256WithRSAEncryption
b1:d9:8d:83:bb:6b:20:44:90:a7:50:04:b5:06:81:09:48:f5:
d1:b1:33:32:f4:e4:18:a8:21:c9:bf:8c:ed:11:ee:db:da:5d:
3d:31:9e:d6:90:47:e9:e7:fe:98:89:73:4b:b7:42:7d:86:40:
24:11:d6:0a:62:9f:39:fb:b7:42:33:b1:3c:32:24:33:da:1b:
0a:d4:08:61:db:c8:f2:09:5f:b9:85:88:4b:4f:0c:d8:07:32:
95:e6:1d:f1:6c:00:c3:ea:61:73:15:29:a8:1f:17:d4:b5:31:
8e:9c:f8:d5:12:3a:4e:15:a2:30:71:10:b7:bf:2b:70:1a:73:
e4:94:12:40:28:2a:48:05:c9:52:e5:f8:f5:ba:29:73:36:16:
d6:25:f2:05:5f:34:91:30:5d:8a:c6:07:b2:1f:d3:21:d4:39:
d3:61:58:e6:b0:fb:c3:83:51:32:82:0d:08:1e:bf:97:7d:69:
3d:0b:9d:6c:98:08:d5:c6:2f:67:cf:68:54:06:e2:b2:1f:e5:
63:5d:61:f3:4e:1f:1f:a4:a4:ae:84:13:af:e0:88:a3:66:57:
d2:68:4d:36:0c:d3:69:b9:23:33:1e:bb:7c:6b:34:5c:00:c1:
65:ef:69:47:0f:95:fb:15:ed:37:dc:7f:5d:0f:04:58:b2:a5:
5f:97:f6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org