Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/K0_M5DbWXPBGXpRV7W616-IDJ3k.roa
File: K0_M5DbWXPBGXpRV7W616-IDJ3k.roa (raw, json)
Hash identifier: Yo6uOw1QNp9kg5UHuade5J6ghk1G41joelFG5p8DJIM=
Subject key identifier: 2B:4F:CC:E4:36:D6:5C:F0:46:5E:94:55:ED:6E:B5:EB:E2:03:27:79
Certificate issuer: /CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
Certificate serial: 01856F1DC5FA1C39BC459686824A1B3034E2
Authority key identifier: A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/K0_M5DbWXPBGXpRV7W616-IDJ3k.roa
Signing time: Sun 01 Jan 2023 20:55:00 +0000
ROA not before: Sun 01 Jan 2023 20:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208961
IP address blocks: 45.12.85.0/24 maxlen: 24
45.12.84.0/24 maxlen: 24
45.12.86.0/24 maxlen: 24
45.12.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:c5:fa:1c:39:bc:45:96:86:82:4a:1b:30:34:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
Validity
Not Before: Jan 1 20:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b4fcce436d65cf0465e9455ed6eb5ebe2032779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d8:b3:37:47:9f:88:1b:af:fc:56:2a:e5:1d:
79:f0:5a:15:48:b9:b4:92:78:f5:a2:81:3a:18:6a:
e0:c0:c9:dc:7f:c1:ec:ac:85:07:07:51:cf:ca:c7:
23:f6:8f:d9:5e:1e:3d:6a:fd:ad:37:e4:77:e7:11:
bb:67:f6:4c:58:88:89:e7:a0:9d:87:9f:83:25:d0:
e4:f7:fe:1d:07:2b:98:97:f0:e5:ab:b9:29:05:85:
2e:c8:4a:25:3b:c1:c3:c6:4b:41:f2:77:20:d3:d1:
5c:36:11:d1:09:bb:d3:58:bc:19:b6:c2:5e:1b:ab:
77:5f:e1:a7:63:51:c1:32:f0:58:48:39:9e:f3:80:
f7:df:74:1f:cd:7e:7c:1e:34:b0:ae:af:90:7d:f8:
d8:bd:b9:fd:67:20:88:5c:92:96:b4:6a:02:ff:c2:
ff:f5:e7:50:f5:0e:2e:2e:ac:80:2e:a0:cf:1e:0a:
f7:3a:16:42:e6:6e:39:1e:1d:28:c5:6a:a6:1a:fa:
4d:11:95:ce:6f:d3:2d:93:b9:17:14:4d:79:b1:48:
4e:d0:20:d9:ad:2d:d6:72:40:24:40:a8:12:a0:61:
8f:5d:8a:78:0e:68:0d:23:1a:14:82:b9:35:62:45:
a6:0f:eb:93:3d:53:70:50:1d:2f:5b:e1:45:5e:d2:
c1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4F:CC:E4:36:D6:5C:F0:46:5E:94:55:ED:6E:B5:EB:E2:03:27:79
X509v3 Authority Key Identifier:
keyid:A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/K0_M5DbWXPBGXpRV7W616-IDJ3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.84.0/22
Signature Algorithm: sha256WithRSAEncryption
86:83:f4:d6:a6:4d:17:1b:67:b6:e0:d8:20:fb:fa:28:ec:b6:
a0:2e:ae:51:f7:b2:27:7c:f9:03:ce:2b:6f:9d:08:bb:e5:e5:
97:98:3c:ad:f4:a4:3f:6f:55:9b:6f:d8:08:92:b9:d5:c4:38:
2c:96:5e:8d:cb:73:30:1e:c4:02:d8:5b:12:43:d2:26:88:f4:
27:5d:d9:13:a7:ff:12:3e:a1:dd:ca:bd:96:f7:3e:c3:9e:99:
05:80:14:67:e4:9c:dc:38:73:bc:7c:78:c8:40:c7:74:64:a6:
81:76:4b:10:3b:d4:d9:13:8c:7b:a8:a5:e7:c1:c8:97:8d:6f:
c6:c4:0e:8b:47:6a:26:c5:51:16:28:c1:03:55:2c:99:f6:b0:
55:b7:4b:81:5e:36:f2:e8:6a:58:11:c3:ee:d8:27:a0:2c:92:
c7:69:d1:38:58:46:76:bf:66:49:7e:77:0b:f9:95:95:18:ae:
ee:15:cf:f0:6e:0a:5f:fe:c9:90:f3:0b:1d:dd:a8:c3:18:9a:
1d:05:a4:06:60:2f:b5:56:b4:cd:e5:4d:51:20:cb:ec:f6:d9:
3d:0e:26:be:0e:19:30:c4:0c:50:63:99:d8:3c:b3:0d:cd:a4:
74:9c:ec:e7:a5:2d:3f:18:4a:cd:44:0a:c2:e6:53:40:51:19:
67:05:4d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:10 2024 by rpki-client on console-ams.rpki-client.org