Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xJq9HEKbyQyrE9fQF5tgccEGzJQ.roa
File: xJq9HEKbyQyrE9fQF5tgccEGzJQ.roa (raw, json)
Hash identifier: ESvzxMatuZtWiYSbDGu/OsTaj06FiVA0GhL41UWKJvQ=
Subject key identifier: C4:9A:BD:1C:42:9B:C9:0C:AB:13:D7:D0:17:9B:60:71:C1:06:CC:94
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C53EE03C7EFCD3C79B6909216729571
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xJq9HEKbyQyrE9fQF5tgccEGzJQ.roa
Signing time: Sun 01 Jan 2023 07:55:17 +0000
ROA not before: Sun 01 Jan 2023 07:55:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 45.12.161.0/24 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:ee:03:c7:ef:cd:3c:79:b6:90:92:16:72:95:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c49abd1c429bc90cab13d7d0179b6071c106cc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:93:9c:ca:70:4f:06:20:fd:51:33:2e:72:
e6:fd:c4:27:04:83:a8:36:dc:b9:30:ac:5a:95:5d:
b2:d7:77:8d:38:75:af:65:c1:37:fb:01:24:55:bf:
2b:4b:8f:b9:71:12:47:f8:ce:ea:50:d0:d1:16:ea:
fb:15:f8:92:e5:7a:dd:f0:ba:37:0b:50:ba:15:b1:
df:cb:cd:f1:bd:31:99:23:44:1c:36:b8:8d:03:8e:
68:62:96:24:69:91:5e:d8:a9:87:47:6a:e0:5d:12:
d7:84:9a:8a:b3:65:52:34:e0:db:55:48:17:4c:d4:
37:f4:f6:f3:11:88:b0:4f:96:60:3a:9f:81:af:2f:
6e:41:87:4d:64:aa:58:9e:9a:35:af:88:98:16:9e:
32:80:39:5a:19:49:0d:6a:94:29:29:28:d0:66:21:
d1:8a:b1:3c:04:be:27:d3:2b:9c:9d:23:0d:9f:8a:
04:89:95:a5:07:8a:0b:ef:53:2e:a7:ff:44:cf:68:
40:1d:bd:6f:ea:c7:47:33:b6:fe:81:08:ea:d4:50:
39:8f:0a:0b:81:6a:a9:a2:15:82:86:23:70:f7:33:
dd:9a:24:31:e4:06:ae:ab:b1:77:14:32:ec:5d:b6:
e4:c4:2c:3f:0f:c7:17:f5:7a:b9:6e:85:9f:c0:2a:
21:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9A:BD:1C:42:9B:C9:0C:AB:13:D7:D0:17:9B:60:71:C1:06:CC:94
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xJq9HEKbyQyrE9fQF5tgccEGzJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.161.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:df:18:ef:6b:0b:6f:61:17:30:c5:f1:bf:35:85:d5:6e:74:
8a:95:70:0d:67:82:eb:2b:dd:58:f9:ba:5a:35:d5:b8:22:19:
92:6f:5a:ba:95:4b:39:df:df:9c:ea:ec:47:2e:29:4b:80:df:
c3:61:c7:a9:f8:a8:83:65:67:40:9e:c0:fa:f3:04:f0:f6:be:
b7:84:4c:72:c2:e4:55:ae:2c:7b:eb:3c:e3:ca:18:69:a9:86:
96:6f:a4:e1:a5:8e:09:25:14:b5:16:1d:83:da:3e:99:56:27:
eb:18:e6:d1:fe:09:fb:94:1e:dc:b3:59:be:42:ed:62:87:7c:
52:3d:62:c6:90:65:4c:de:26:eb:59:3d:b3:f3:36:68:d7:e0:
2e:96:df:4a:bd:26:44:c4:c5:28:1c:13:30:22:2d:e4:eb:89:
b6:cf:ac:bb:a6:bb:f2:dd:e4:37:40:01:f1:f9:b0:34:1c:dc:
02:d6:be:30:3e:79:5e:e2:a5:96:b9:08:c0:b8:62:ac:64:a7:
f8:83:66:2f:9a:b3:e4:fa:b8:97:23:35:2a:5a:7e:35:30:0c:
65:dc:77:28:90:5b:99:13:de:02:f6:cb:2c:ec:91:5c:7b:83:
84:28:1c:ee:a4:43:73:69:1f:71:60:a2:71:8f:5c:c4:e1:46:
db:94:d9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:33 2024 by rpki-client on console-ams.rpki-client.org