Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/Dl1iP4qM2-L8ovxx9fwJYoTd0xo.roa
File: Dl1iP4qM2-L8ovxx9fwJYoTd0xo.roa (raw, json)
Hash identifier: pz7lDBSGRpLTe49kGKKRhrUJZfS70GR6pq3354AcPHs=
Subject key identifier: 0E:5D:62:3F:8A:8C:DB:E2:FC:A2:FC:71:F5:FC:09:62:84:DD:D3:1A
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01856FB11E41F9FE942D4D913472900C5006
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/Dl1iP4qM2-L8ovxx9fwJYoTd0xo.roa
Signing time: Sun 01 Jan 2023 23:35:56 +0000
ROA not before: Sun 01 Jan 2023 23:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63956
IP address blocks: 45.137.244.0/24 maxlen: 24
45.137.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:1e:41:f9:fe:94:2d:4d:91:34:72:90:0c:50:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 1 23:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e5d623f8a8cdbe2fca2fc71f5fc096284ddd31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:12:96:d8:6e:b9:70:12:57:9e:b0:a7:73:8b:
c3:1b:fb:de:1e:8f:11:70:26:3e:d2:5a:b9:85:f4:
e5:3f:83:06:0a:68:b6:4d:2c:17:92:7b:51:81:a1:
a3:7b:77:60:56:06:25:06:f8:58:60:c4:56:51:9c:
ee:92:e4:d3:28:b6:2c:aa:f0:8f:95:ac:7d:09:d6:
8e:cd:73:f5:f6:e5:7b:ae:aa:55:70:50:04:46:98:
03:bf:56:55:ec:c4:7c:a4:da:8f:6b:53:a3:db:0f:
63:18:fa:8f:40:63:e4:d3:b4:7a:9b:73:87:96:d3:
e9:6e:eb:ce:eb:26:60:20:59:a2:65:d5:80:41:c7:
a9:05:70:fc:5e:dd:49:08:19:09:ea:8c:d0:6c:82:
46:01:7d:70:79:90:c5:99:ee:10:ab:e4:73:20:01:
00:a1:d6:49:bb:27:94:c1:fc:59:e7:31:d9:58:c7:
a0:74:61:a2:75:a8:29:b4:d9:3f:18:97:6b:17:f6:
5c:75:fd:ab:4a:0a:77:21:65:ae:0c:33:40:f2:1b:
01:23:15:69:52:f6:86:3d:32:b9:68:cc:27:eb:e8:
9f:c2:02:8d:af:2d:15:5e:de:cf:1b:ce:98:23:09:
87:a7:92:3f:ff:ba:68:7d:a3:0d:8e:62:d8:7f:80:
75:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5D:62:3F:8A:8C:DB:E2:FC:A2:FC:71:F5:FC:09:62:84:DD:D3:1A
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/Dl1iP4qM2-L8ovxx9fwJYoTd0xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.244.0/23
Signature Algorithm: sha256WithRSAEncryption
26:e0:5c:7a:18:7a:66:84:d4:13:77:22:21:41:53:20:4c:dc:
08:5a:2d:55:b2:1c:3c:6c:1a:07:7d:96:db:78:3f:5a:70:2f:
86:f3:09:47:35:55:b8:82:d1:1d:cf:f4:c7:bc:7f:5c:b0:cd:
63:af:8f:93:5a:7d:c6:6c:54:1d:a7:db:ba:49:db:fe:c6:cc:
f0:2a:39:6c:5b:a3:27:44:e3:ad:82:34:a4:83:14:24:4a:93:
34:cd:da:50:f3:2d:29:75:c5:3f:5b:ad:24:22:f1:d0:56:13:
3e:d5:ff:d6:0a:c4:ea:b8:b8:f8:5e:c5:e1:41:98:de:3b:27:
ec:e1:0f:13:bc:ed:f4:5f:f9:66:0e:a6:32:86:f3:cd:e7:31:
f1:ed:c7:05:fe:dc:6a:41:03:78:1b:3d:d4:cd:c8:6b:f4:49:
3a:48:6a:65:7b:28:c0:de:e6:fb:8c:cb:67:ce:87:49:ea:a6:
2e:b8:ec:e4:89:97:8b:62:b5:57:f0:ac:6a:2f:ed:1f:94:f5:
2b:61:d1:67:e5:5f:cc:02:20:2e:73:e6:20:54:87:e2:c7:f1:
e5:ba:b9:32:75:c2:d9:71:b3:80:2e:8c:d9:35:fd:ae:6d:61:
75:6c:82:8c:dd:9d:86:44:24:b8:e8:56:2a:5d:89:44:e6:dc:
bf:64:48:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:48 2024 by rpki-client on console-fra.rpki-client.org