Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/5n3mYWL1sVx5GeVIe04YXbbpYLU.roa
File: 5n3mYWL1sVx5GeVIe04YXbbpYLU.roa (raw, json)
Hash identifier: J8qrOQNSaJCPUrrvCRpG8SeAlcPAyoE5dEM/+O08HRI=
Subject key identifier: E6:7D:E6:61:62:F5:B1:5C:79:19:E5:48:7B:4E:18:5D:B6:E9:60:B5
Certificate issuer: /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial: 018571FA2CEED2B75443F2504BCA953D9380
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/5n3mYWL1sVx5GeVIe04YXbbpYLU.roa
Signing time: Mon 02 Jan 2023 10:14:59 +0000
ROA not before: Mon 02 Jan 2023 10:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 145.46.161.0/24 maxlen: 24
145.46.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:2c:ee:d2:b7:54:43:f2:50:4b:ca:95:3d:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
Validity
Not Before: Jan 2 10:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e67de66162f5b15c7919e5487b4e185db6e960b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:56:29:c5:c0:93:c4:06:f5:1f:ef:89:de:bf:
56:61:aa:7e:8e:b4:25:8d:f3:a6:3d:82:b7:df:8b:
47:73:6f:86:d7:0e:0b:a7:ac:08:85:0c:e7:7a:c2:
5a:88:75:ca:18:27:36:44:8c:06:e2:dd:b3:dd:c1:
c8:71:1f:73:5a:37:22:32:20:67:d1:66:f9:3e:04:
ac:77:4e:b2:12:85:74:2b:e1:1d:7f:42:3a:50:18:
8d:d5:fd:8f:da:be:bc:e2:5b:1e:13:c7:56:57:e4:
9a:9f:3d:47:9b:19:15:b8:ca:4d:34:ac:3c:77:27:
be:3f:8a:05:09:47:ea:c4:2b:7e:22:f5:95:e0:6e:
7b:83:de:4a:ae:b5:31:7e:41:a5:9e:ea:3b:c8:c1:
9b:13:7a:49:07:21:00:39:52:36:d8:4e:ae:6d:3d:
b7:85:2e:9b:2b:31:f3:45:13:a2:31:ea:21:0a:92:
ec:dd:b2:b3:65:73:40:7f:8e:39:f9:02:3d:63:6b:
b5:06:6d:0b:b3:8e:ad:1c:d4:1d:1f:28:06:e8:3b:
4c:53:8b:f8:43:60:f1:03:21:4f:9f:b9:7e:1a:47:
4a:38:d9:f4:bd:be:fd:68:32:18:48:8f:4e:84:b5:
dc:3c:9e:e2:c1:8f:94:be:85:25:97:2e:b4:47:3f:
6a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7D:E6:61:62:F5:B1:5C:79:19:E5:48:7B:4E:18:5D:B6:E9:60:B5
X509v3 Authority Key Identifier:
keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/5n3mYWL1sVx5GeVIe04YXbbpYLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.46.160.0/23
Signature Algorithm: sha256WithRSAEncryption
19:ce:6e:01:35:cc:46:13:7b:aa:65:94:5c:98:3c:46:7f:db:
22:0d:9e:a9:39:fc:81:04:43:03:7a:7f:09:e4:da:9b:7b:b6:
23:4f:93:d7:79:d8:a8:9b:1f:47:66:5e:c4:07:f2:f8:af:f9:
e1:2a:7b:be:06:55:55:ad:88:32:e7:5d:1d:d3:fd:e6:7c:28:
37:60:79:c7:d6:69:b3:d8:da:c4:d4:27:72:b4:47:44:aa:7b:
92:b6:65:27:af:69:22:8e:4f:0d:0d:49:34:5d:7a:34:2d:34:
34:16:93:17:4d:51:e4:6c:40:d6:32:50:8d:fe:a9:50:78:3e:
e3:84:74:24:ac:24:a0:48:15:e3:e0:4b:bc:75:cb:8a:03:fd:
e4:6e:da:9b:70:b0:bc:53:35:19:dc:62:46:d7:f5:f7:95:53:
3e:11:7a:c6:48:81:89:a4:b5:a5:81:41:45:d7:68:d9:f5:68:
16:91:63:8f:37:34:a4:ac:dc:7a:34:a3:e5:44:b1:52:ce:b6:
bd:26:2d:ed:df:dc:5c:e8:58:2e:f0:60:fa:ac:1c:e8:0a:88:
14:9f:52:2e:35:a5:8f:d5:ff:92:a5:b4:4e:ed:a7:27:8f:fa:
ce:ce:14:89:26:2d:f0:4e:f1:a4:d6:47:cc:34:5a:7c:7a:56:
bf:a6:67:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:20 2024 by rpki-client on console-ams.rpki-client.org