Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/a4RF1NavaCp6cunISx0k9RUNFXI.roa
File: a4RF1NavaCp6cunISx0k9RUNFXI.roa (raw, json)
Hash identifier: qkWCYpXFB8VREiSInhdcIEOqAU+FKR8z0iB4kBLxe5I=
Subject key identifier: 6B:84:45:D4:D6:AF:68:2A:7A:72:E9:C8:4B:1D:24:F5:15:0D:15:72
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0186D59B589F199C6DC57649104C505C7670
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/a4RF1NavaCp6cunISx0k9RUNFXI.roa
Signing time: Sun 12 Mar 2023 11:36:13 +0000
ROA not before: Sun 12 Mar 2023 11:36:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141968
IP address blocks: 45.8.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 10:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d5:9b:58:9f:19:9c:6d:c5:76:49:10:4c:50:5c:76:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 12 11:36:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b8445d4d6af682a7a72e9c84b1d24f5150d1572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:af:f9:cc:29:9f:20:5a:25:8d:71:44:ba:27:
ee:f5:b2:34:2f:fd:3c:c9:56:5c:a1:bf:44:65:ab:
84:e2:6f:96:a4:71:e5:f5:c8:25:25:63:6d:42:e3:
ae:97:2a:93:07:6f:c7:d8:8f:91:27:9b:ac:15:09:
c4:ce:19:05:11:b5:2e:a9:45:96:4f:d1:27:b6:1d:
c3:74:d7:f6:aa:f2:ca:14:86:d7:31:80:21:59:b4:
ab:29:c4:a5:94:2c:9d:6c:9e:18:5b:e7:63:cf:62:
04:72:8b:dd:05:e0:93:de:be:55:f6:a4:76:fe:39:
35:e0:bc:e2:4a:e1:77:2d:d8:cc:73:d8:66:22:22:
aa:14:d0:17:3e:5e:6c:29:a5:cc:30:e8:e1:ec:7d:
45:b0:fd:48:a8:97:3f:cc:4f:a1:ac:f2:8c:4e:28:
03:8e:47:58:9b:f2:e7:06:16:1c:f5:c2:f8:51:4f:
d5:ac:8e:a8:b6:5b:95:24:9c:79:02:48:3c:97:d2:
fe:8e:39:23:fa:59:23:9c:74:b8:f8:07:2e:1c:cc:
29:6a:20:ff:5e:5a:3d:bb:42:19:1a:2d:ee:d1:ae:
3e:86:04:ab:aa:a1:eb:ed:4f:9c:36:b0:da:d2:8d:
1c:93:8b:f7:a0:0e:68:bc:57:c6:a6:53:08:42:72:
94:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:84:45:D4:D6:AF:68:2A:7A:72:E9:C8:4B:1D:24:F5:15:0D:15:72
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/a4RF1NavaCp6cunISx0k9RUNFXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
Signature Algorithm: sha256WithRSAEncryption
39:3f:13:1c:4b:05:1f:a1:d2:97:65:5e:b4:ee:e5:a4:9a:f5:
d1:71:e7:af:81:9c:c9:d5:67:c2:56:92:c3:2a:dd:38:43:8a:
34:e9:a3:30:17:37:00:21:53:c6:fa:64:55:8d:ff:3c:d1:c8:
08:6d:a5:fc:13:9a:9b:d1:05:ce:0f:d0:c9:d9:d5:37:3d:c4:
0b:bc:d0:38:2d:94:c0:88:8b:a0:15:59:c0:b7:25:20:47:f5:
2e:1e:bd:de:36:fb:0d:d6:65:c2:54:73:16:18:dd:03:d7:b0:
98:0b:12:28:4e:71:94:ae:7e:18:c7:8f:ed:53:04:b5:2f:0f:
e6:7a:91:01:4e:51:50:84:36:be:28:95:10:b1:e7:0a:ec:a8:
15:06:d0:55:11:a0:cc:3f:da:25:16:60:d7:75:a0:53:1d:f9:
c7:2e:99:a4:fa:52:78:fe:18:3a:d4:9a:e1:bb:90:43:8d:36:
e8:1e:cd:16:b8:0a:43:cf:cc:a6:5f:9f:a8:e6:a7:e1:16:8a:
62:4c:91:28:e4:46:55:79:d0:b7:7e:e8:26:57:1e:c1:91:6d:
8a:95:1e:27:95:3c:60:d6:9c:0f:b8:fe:64:d1:f1:f0:ff:ad:
19:d5:56:fe:ab:0c:89:94:c8:cb:a0:58:22:a3:c3:1e:07:5c:
82:c7:8c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org