Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xioxh54ZFWeiBIQFvmD0hN44gx4.roa
File: xioxh54ZFWeiBIQFvmD0hN44gx4.roa (raw, json)
Hash identifier: g3yBekV4QxucWu89Jyvjotqn78oxM+zdXoP0Pr9imqc=
Subject key identifier: C6:2A:31:87:9E:19:15:67:A2:04:84:05:BE:60:F4:84:DE:38:83:1E
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0186CC0219560ED1F7C96A47AF9565D47E4D
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xioxh54ZFWeiBIQFvmD0hN44gx4.roa
Signing time: Fri 10 Mar 2023 14:52:14 +0000
ROA not before: Fri 10 Mar 2023 14:52:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49729
IP address blocks: 84.54.6.0/24 maxlen: 24
45.132.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:02:19:56:0e:d1:f7:c9:6a:47:af:95:65:d4:7e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 10 14:52:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c62a31879e191567a2048405be60f484de38831e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:e6:7a:74:67:50:1c:14:d7:62:f3:9d:b0:
8a:8d:7b:99:d1:7e:ed:3a:e3:57:f3:cb:bc:04:c6:
0d:c1:0d:f1:72:0c:bf:2f:41:cc:4f:94:b8:a0:f3:
8b:ef:6c:01:93:a7:10:c9:89:23:79:9a:f0:86:d1:
f1:51:35:9f:b8:92:37:79:2a:75:c6:e6:b3:59:1d:
45:d5:47:7d:ab:1f:96:1a:08:a1:d7:59:5b:f7:a2:
ad:d9:28:9b:8b:68:1f:20:64:7e:0b:9a:a3:d8:a3:
3c:14:0e:cd:ee:25:b7:5b:08:37:bb:67:ee:27:ec:
d8:44:fd:5e:f6:72:65:9f:64:24:7a:d6:10:4d:b6:
f2:87:ff:6a:5d:9d:1c:a3:50:fc:7a:66:b3:70:52:
b4:76:81:f7:32:02:86:84:ce:86:08:c5:09:5f:f8:
f2:16:04:75:40:0e:ac:21:d3:80:8a:74:38:bc:a4:
bd:2d:07:ba:f2:a2:b9:79:9c:c5:6b:08:7e:c4:ca:
16:6b:f0:eb:7c:d5:4d:d6:c9:ef:4b:9a:15:b3:90:
0b:ea:b0:75:1c:7e:ee:f5:94:a8:f0:35:dc:ac:63:
18:29:77:e5:e5:8d:e7:51:f1:ce:de:c2:b1:22:af:
42:99:7a:23:15:20:f5:7e:e1:c7:8a:bb:67:1f:71:
25:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2A:31:87:9E:19:15:67:A2:04:84:05:BE:60:F4:84:DE:38:83:1E
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/xioxh54ZFWeiBIQFvmD0hN44gx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.205.0/24
84.54.6.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d1:68:84:81:d1:46:62:dd:28:13:6d:f5:73:0c:9b:c7:d4:
ce:2f:9b:80:24:6b:03:9d:7c:b8:12:29:5b:f8:c6:ab:e5:75:
28:b2:4e:92:8b:79:4f:7b:d0:8b:55:cd:fe:69:44:14:8b:e5:
ab:df:70:1a:08:0c:e6:bb:28:88:36:87:bf:0d:72:75:79:d1:
6a:ac:be:51:ed:c4:65:90:b2:c5:a1:da:99:0b:28:20:74:bf:
f2:6a:d9:ee:89:35:01:c5:e0:75:fb:ad:89:d1:98:1e:aa:42:
78:7f:28:a8:71:e5:ce:68:75:10:0c:ef:23:2e:af:74:a9:f5:
a3:7e:bb:ff:df:ef:2d:0c:68:e0:9b:54:f1:a4:7b:79:d9:32:
a2:75:f4:83:d1:1e:5a:bb:6b:42:ac:62:c6:0e:cc:17:77:c3:
d3:1b:98:04:38:59:bb:42:26:09:5d:f9:09:63:1c:d0:7f:7b:
4b:6c:79:fd:cc:96:61:c9:91:16:c3:96:b5:ca:c0:8f:fe:bc:
bd:83:d1:cf:7d:4d:d3:d3:06:bf:a9:ed:e3:7f:62:74:55:3b:
2d:28:ce:c5:88:af:c0:0e:bc:e7:dc:70:dc:19:54:9f:ff:41:
de:e8:3e:63:6e:55:03:df:b6:ab:5b:77:b5:ae:a0:da:ed:7b:
6f:fe:e4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:39 2024 by rpki-client on console-ams.rpki-client.org