Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Ycf4iCstrfJ-N7V0GM5Ubsl5MUo.roa
File: Ycf4iCstrfJ-N7V0GM5Ubsl5MUo.roa (raw, json)
Hash identifier: QJKUDz0SAXKZtS+LbM1+puw97lZKDR6puCXJ17O4wUE=
Subject key identifier: 61:C7:F8:88:2B:2D:AD:F2:7E:37:B5:74:18:CE:54:6E:C9:79:31:4A
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C4178FC63648BEDD5C799A8B4AED6
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Ycf4iCstrfJ-N7V0GM5Ubsl5MUo.roa
Signing time: Mon 02 Jan 2023 05:55:06 +0000
ROA not before: Mon 02 Jan 2023 05:55:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210899
IP address blocks: 45.137.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:41:78:fc:63:64:8b:ed:d5:c7:99:a8:b4:ae:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61c7f8882b2dadf27e37b57418ce546ec979314a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:82:e0:8d:7a:9c:50:0c:0a:03:68:c7:94:
a0:14:f1:cb:c0:14:bd:13:66:4a:1d:72:4b:7b:00:
88:e4:7a:90:72:57:75:f4:03:c5:64:d5:1e:77:47:
bb:88:55:ea:4b:11:ad:05:81:c6:d7:18:96:5b:95:
99:d1:e2:86:c9:a7:80:bc:87:c2:5d:ba:3f:5b:68:
d0:e7:65:f8:85:ed:a7:36:80:18:b3:c8:1c:4c:58:
fc:e7:48:63:0a:bc:9e:ec:94:72:be:c7:86:f4:8a:
0d:ec:ab:a7:45:5c:72:4f:f1:07:49:64:c9:92:55:
48:c1:60:23:b3:f6:e5:48:ff:eb:8f:73:5e:4b:f7:
6b:d7:91:07:90:22:d1:b2:cb:71:af:97:30:2d:2e:
ad:c5:43:ff:bc:41:74:ce:5a:7c:5a:47:1b:41:84:
aa:f9:47:c7:15:14:6a:76:b9:fa:6b:5a:c9:52:3c:
06:60:e5:99:ed:28:29:4b:70:89:96:2e:96:95:7f:
0d:ea:f8:2b:e8:06:22:40:78:3c:ed:5a:3e:46:73:
6a:6d:2c:31:82:9d:d0:c6:f6:b8:a0:47:df:39:9d:
f6:11:d6:d6:e7:2b:a7:19:70:26:c1:ce:ed:0d:6d:
cd:e4:00:47:fe:6d:7b:e0:4b:d3:57:27:e2:34:dd:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C7:F8:88:2B:2D:AD:F2:7E:37:B5:74:18:CE:54:6E:C9:79:31:4A
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Ycf4iCstrfJ-N7V0GM5Ubsl5MUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.105.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:dd:90:26:a9:95:fb:aa:4f:ec:83:04:eb:8c:fe:35:d1:82:
fd:10:a9:d3:ce:b9:5d:89:f2:d9:1a:9d:b1:0b:b0:9c:2a:1b:
cf:07:1e:e2:41:1f:39:61:7b:75:21:20:da:29:9e:5c:27:74:
48:3b:96:fc:25:7b:86:e4:42:17:c5:bd:14:ef:af:70:7a:65:
3a:5d:59:8e:72:1b:0c:fb:2e:29:78:b5:ad:05:a7:c7:6b:e5:
35:4f:64:42:40:5e:f6:bc:ec:8f:fa:9d:55:04:33:f4:22:7e:
0d:aa:88:ce:f9:30:57:21:51:f4:54:a9:8b:af:6f:68:e4:3e:
23:b4:51:10:d1:1e:c9:bb:71:59:bf:8e:60:d0:97:50:1a:d2:
ca:bb:74:07:b7:34:4d:51:8a:ca:c6:be:f6:a4:f6:ba:fe:24:
fa:ce:cd:68:af:ae:89:75:3b:a1:94:69:4e:31:ab:1d:90:c7:
2e:36:e0:77:af:37:97:44:89:82:55:0a:dc:2a:ea:06:2f:9a:
c5:ec:8e:e0:65:58:87:3e:0b:10:4d:9c:12:bd:c2:80:6c:bf:
0f:d4:9b:64:29:d8:aa:23:1b:c7:21:69:40:98:c1:b2:06:0e:
c0:9b:0c:6d:63:b9:fa:8a:8a:4e:9d:64:d5:ae:39:b4:d0:49:
83:df:0c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org