Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/i2eYd5a2RJgcHNtsp8yFi0Uombc.roa
File: i2eYd5a2RJgcHNtsp8yFi0Uombc.roa (raw, json)
Hash identifier: O4PngAVLgWqYpgzNjIBTFsELrnXAARBR91N2WyZNUY8=
Subject key identifier: 8B:67:98:77:96:B6:44:98:1C:1C:DB:6C:A7:CC:85:8B:45:28:99:B7
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C53E2223590F83DF8089760E5364EBE
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/i2eYd5a2RJgcHNtsp8yFi0Uombc.roa
Signing time: Sun 01 Jan 2023 07:55:14 +0000
ROA not before: Sun 01 Jan 2023 07:55:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 45.138.210.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:e2:22:35:90:f8:3d:f8:08:97:60:e5:36:4e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b67987796b644981c1cdb6ca7cc858b452899b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:21:00:b2:97:2a:92:3b:71:ac:f8:92:68:73:
3f:84:b7:ee:d3:76:82:47:ae:61:27:37:94:e1:37:
5a:27:1b:3f:c8:35:02:71:aa:c9:84:93:ee:38:f0:
09:50:29:01:fe:a6:38:84:5b:07:23:30:73:a5:da:
78:9d:95:c0:71:69:21:92:0c:ae:48:20:50:f3:13:
42:cb:da:4f:40:8c:a7:67:c5:7b:c6:f6:08:a7:ab:
05:54:f1:d7:e7:ec:b9:52:bf:35:08:0b:6d:1e:24:
96:93:c5:e3:2e:2a:a8:6c:95:e1:9e:b3:bd:6e:c0:
44:f7:a6:0c:7f:fc:58:22:15:ae:c8:ae:72:eb:33:
79:87:95:24:01:cd:7a:41:de:58:bc:ea:00:f6:75:
cd:7d:01:10:4f:55:6d:81:bc:87:ec:07:69:4d:b6:
e0:e4:e5:a9:42:10:db:80:b3:19:63:a0:21:34:7d:
d6:84:a3:64:ef:06:1f:52:33:d9:e9:a7:1f:47:ab:
7d:95:0e:99:e0:dc:64:8e:cf:8a:b9:1c:41:08:b1:
50:87:ed:d0:cf:87:e1:0c:cf:c4:35:c1:e4:7c:e0:
62:26:d5:e2:79:c7:53:52:a6:45:cd:3c:27:98:3f:
41:77:5f:95:8f:85:ed:62:0a:2a:7d:82:fc:d6:59:
8f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:67:98:77:96:B6:44:98:1C:1C:DB:6C:A7:CC:85:8B:45:28:99:B7
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/i2eYd5a2RJgcHNtsp8yFi0Uombc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
28:3f:d8:ce:a4:0c:63:f0:12:0f:ca:53:bf:5a:fc:c5:ab:f6:
fe:8c:7d:e5:53:27:d6:78:28:4e:a4:cb:bb:53:9d:41:99:8e:
63:6c:63:9c:0a:7e:94:71:65:ee:44:bf:b5:8d:aa:f9:37:f6:
93:c3:34:96:ad:ef:53:5d:2b:25:11:f2:2a:97:16:c1:4c:9e:
c7:ee:7a:db:3e:67:15:8e:30:f1:ca:57:f9:5c:aa:a5:54:76:
6f:5c:52:65:2e:f5:0b:49:4f:1f:9f:8d:e3:d8:e4:09:12:03:
86:b8:c4:e9:7b:c0:54:f9:87:26:ce:58:c8:92:6a:78:1c:43:
ff:de:d3:bb:cc:3b:fe:0c:20:2f:44:76:ec:57:ad:4d:8e:4b:
a5:79:0c:88:14:37:76:7d:f1:ae:17:db:de:4e:ec:a6:4b:3f:
54:84:21:71:9b:d3:07:9b:38:80:b7:18:4c:ac:4e:ba:20:05:
b1:88:38:a3:01:bb:22:9d:ff:c0:70:90:56:a5:78:58:6c:a8:
c7:58:ae:1e:a6:0b:ad:70:30:2a:04:73:da:fd:72:bc:29:01:
c1:41:f7:d9:5f:5e:a6:8f:bb:2f:91:23:d6:39:7e:26:d4:6a:
f0:37:85:31:29:58:71:bc:6b:bb:98:6f:1e:f5:80:af:85:5d:
c4:74:b2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:55 2024 by rpki-client on console-fra.rpki-client.org