Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/KllMgga0pjpMxhrkVUvvDjnfri0.roa
File: KllMgga0pjpMxhrkVUvvDjnfri0.roa (raw, json)
Hash identifier: ToT36DunGBVUdxcTAPOcLBo+Wj25U5p/hzqiZc7pdlM=
Subject key identifier: 2A:59:4C:82:06:B4:A6:3A:4C:C6:1A:E4:55:4B:EF:0E:39:DF:AE:2D
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 0191515215E3EFDDEA54649071A10654072B
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/KllMgga0pjpMxhrkVUvvDjnfri0.roa
Signing time: Wed 14 Aug 2024 14:36:59 +0000
ROA not before: Wed 14 Aug 2024 14:36:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.129.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Aug 2024 14:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:51:52:15:e3:ef:dd:ea:54:64:90:71:a1:06:54:07:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Aug 14 14:36:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a594c8206b4a63a4cc61ae4554bef0e39dfae2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5d:c4:0a:82:e3:28:ac:8a:7e:03:80:98:34:
36:bd:8d:11:56:f3:15:46:6a:7a:4f:75:93:8f:ce:
7e:0a:89:09:76:c5:28:a9:38:d6:5c:c2:56:68:2f:
40:e2:ad:61:9d:f5:d9:75:01:4d:9d:88:99:ad:c6:
86:37:a4:e9:62:26:0d:3e:91:a9:5a:89:8c:fe:4d:
f7:22:3c:4a:59:a5:01:04:cb:3a:53:4b:5e:91:9f:
b8:e3:e0:61:9f:5d:52:c0:2b:e2:51:e4:41:07:1d:
61:a1:43:32:95:5e:c4:42:a9:1d:0d:58:b8:53:16:
d3:42:ac:5a:c0:46:c2:1d:42:c7:58:fa:a7:7a:e3:
81:de:cb:3b:8a:0a:70:1d:f3:1d:11:01:43:a2:d2:
7f:7f:65:4b:3f:51:38:62:47:eb:4c:ed:c8:86:85:
c4:ca:13:c8:15:44:c7:0d:0a:3c:4c:76:b3:3b:5d:
ce:b6:f6:a8:f2:2f:ab:0c:29:5e:8d:01:14:ee:9a:
03:2a:4e:72:c9:e3:22:53:74:20:6f:f0:ae:9e:38:
a7:72:92:5a:c4:f2:b3:ad:e2:d3:ed:9f:83:25:67:
a8:9e:da:18:01:92:b7:2f:1e:6a:79:1c:95:0c:0e:
6f:6b:a5:07:35:d8:c9:d9:7d:56:e2:3f:9b:7e:2e:
43:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:59:4C:82:06:B4:A6:3A:4C:C6:1A:E4:55:4B:EF:0E:39:DF:AE:2D
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/KllMgga0pjpMxhrkVUvvDjnfri0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.92.0/24
Signature Algorithm: sha256WithRSAEncryption
64:bb:af:56:93:aa:63:92:0c:54:d0:9c:90:c3:f5:84:24:f7:
db:20:ab:b7:c7:c5:3b:db:45:f7:51:c8:e5:8d:3c:9f:fe:f9:
cb:56:bd:fb:29:0e:3c:8b:1b:8c:94:fc:e5:16:c0:cc:4d:cc:
0c:b9:7d:aa:47:f0:b7:49:f0:1f:f3:8e:e4:87:56:e3:3c:75:
58:c2:54:ca:c5:6c:81:a5:3f:ff:42:ea:3c:87:4c:a8:34:10:
98:08:ec:b0:8e:e2:31:81:db:d2:16:2e:70:0a:7b:95:da:d7:
19:16:c2:7c:9b:6b:71:75:44:62:00:f7:53:9d:a2:46:5b:e1:
40:21:71:0e:d1:22:c3:9f:71:b6:31:5a:44:1c:0a:95:6e:df:
24:a0:5e:8e:f7:68:f5:53:8f:58:71:e2:00:dd:83:24:5c:d6:
82:4a:ff:48:b7:ff:64:84:7b:2a:be:7e:27:3b:c7:96:3f:16:
a5:69:72:52:01:4f:8b:86:d6:6f:47:df:2b:87:f4:0f:79:8d:
da:74:d2:62:54:f8:2a:e2:83:f1:49:39:36:84:42:7e:15:4e:
81:11:61:2e:23:dd:3f:23:0b:5a:b9:06:87:77:41:bb:8e:d4:
e5:37:e8:41:a0:c9:04:27:cc:66:ed:ec:d8:56:1e:04:2c:d7:
6a:86:7f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 17:49:37 2024 by rpki-client on console-fra.rpki-client.org