Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/6ZfMaJdGgkMRxed9wz1Md8rtB_I.roa
File: 6ZfMaJdGgkMRxed9wz1Md8rtB_I.roa (raw, json)
Hash identifier: /SpCrlqpYN2MoAdlp45W8yNnFIyo+Sn27q94tP8IT7E=
Subject key identifier: E9:97:CC:68:97:46:82:43:11:C5:E7:7D:C3:3D:4C:77:CA:ED:07:F2
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 0187ECAD7D6E69F40BF74FCCF72E16F0271F
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/6ZfMaJdGgkMRxed9wz1Md8rtB_I.roa
Signing time: Fri 05 May 2023 16:10:05 +0000
ROA not before: Fri 05 May 2023 16:10:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.95.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Oct 2023 15:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ec:ad:7d:6e:69:f4:0b:f7:4f:cc:f7:2e:16:f0:27:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: May 5 16:10:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e997cc689746824311c5e77dc33d4c77caed07f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:79:48:b7:be:94:ee:9c:db:60:2e:6f:58:
b0:d5:e9:90:5a:7d:13:48:91:1c:81:ef:72:07:08:
5d:c9:32:05:2b:2a:0a:d8:34:e2:2c:39:f3:41:d6:
d4:14:65:7a:97:bd:4a:03:c2:b8:ca:7f:c6:3c:93:
80:ec:92:4f:fc:32:f1:d5:dc:54:6b:71:ae:2c:31:
fd:69:74:85:3f:98:22:8e:61:a7:0d:f6:74:18:bf:
6a:37:42:08:c6:ae:98:e4:a9:09:8e:50:8b:ed:b7:
e8:74:fd:30:89:33:d4:8b:de:40:c1:67:e8:ec:63:
dd:79:55:0c:c8:ea:55:dd:07:ab:df:3f:96:ef:88:
bc:b9:f7:2c:29:42:1a:1d:d7:df:03:dd:a7:a0:4b:
6d:97:18:88:c3:85:3b:56:49:31:ee:f3:83:db:bb:
3d:da:44:02:78:40:d6:d9:8a:d1:3e:ca:a7:54:d7:
43:c8:d0:7d:d8:3b:a4:0c:ba:63:66:7d:d5:7b:a3:
3e:d9:c3:09:c4:fa:4b:ce:d6:16:68:9f:43:aa:26:
10:1e:b3:8f:16:f9:f0:cf:e1:67:00:90:20:99:e8:
74:07:79:0d:04:17:4e:f4:8d:37:ca:f3:45:f5:c7:
8b:fd:31:cd:67:b4:89:be:24:f0:c0:e1:8c:3f:e0:
28:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:97:CC:68:97:46:82:43:11:C5:E7:7D:C3:3D:4C:77:CA:ED:07:F2
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/6ZfMaJdGgkMRxed9wz1Md8rtB_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.227.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:da:95:52:a5:3c:d5:bf:f4:45:57:26:e0:38:e6:10:c2:8c:
28:09:cb:22:6d:ac:59:96:d2:b0:60:c0:3d:8c:be:1b:47:c2:
1b:15:49:e0:c2:d3:ae:e7:5b:b8:8e:f3:fe:a2:0c:f7:71:de:
f4:54:2b:65:79:5f:87:9c:09:5a:ac:9f:12:c8:59:39:8e:da:
7d:cf:e5:e3:5f:d0:15:e8:98:7b:8f:97:aa:9b:5b:2e:a3:a0:
24:ef:e4:21:41:77:b4:1f:61:59:36:39:e3:51:c3:d0:95:a6:
33:a4:ea:21:03:48:79:20:d4:85:53:a7:56:6b:1e:83:b2:88:
03:a1:d7:c1:92:b3:36:48:4b:3b:98:59:4f:f7:a1:f8:4a:70:
e7:10:e9:b1:71:bd:82:d2:6e:65:68:a8:2b:37:be:07:eb:74:
a1:d9:61:08:17:d0:c2:d6:4f:fe:28:82:92:a5:0c:c8:6b:35:
f2:43:ef:2b:ff:20:b0:d4:70:43:77:79:db:25:d3:31:88:ed:
eb:7e:6f:8a:15:63:3e:b7:1e:4a:4a:f1:b1:ac:05:e8:2f:23:
91:d7:7b:c4:25:db:46:57:97:cb:cd:d1:a2:85:d5:ee:c6:ed:
1e:fb:dc:02:bd:a0:b5:cb:c0:0c:1c:57:49:21:83:50:24:cc:
ea:a2:63:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:04 2024 by rpki-client on console-fra.rpki-client.org