Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/eKyi2wCyBUINrj0j-BOWKIeb450.roa
File: eKyi2wCyBUINrj0j-BOWKIeb450.roa (raw, json)
Hash identifier: Bc1FMoeD/4yvA0UiPO3SenVi9AeYxsXGBLdZUNy+BEs=
Subject key identifier: 78:AC:A2:DB:00:B2:05:42:0D:AE:3D:23:F8:13:96:28:87:9B:E3:9D
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019270BF34A7E90D25572F2C0E1E0AD8C38F
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/eKyi2wCyBUINrj0j-BOWKIeb450.roa
Signing time: Wed 09 Oct 2024 10:07:12 +0000
ROA not before: Wed 09 Oct 2024 10:07:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 114.69.245.0/24 maxlen: 24
114.69.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 06:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:70:bf:34:a7:e9:0d:25:57:2f:2c:0e:1e:0a:d8:c3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Oct 9 10:07:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78aca2db00b205420dae3d23f8139628879be39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:43:67:21:d8:4a:33:c6:55:21:91:66:78:d6:
6f:27:55:06:0d:46:43:72:35:95:71:c1:4f:bc:be:
66:85:5e:6d:dd:b4:99:ed:54:15:07:3a:4d:aa:9c:
18:e0:f6:92:ff:86:6f:20:e7:01:79:5d:16:df:aa:
66:6c:aa:39:44:52:97:a4:73:0e:44:76:a7:df:87:
ce:c7:d4:8e:7b:5b:f5:1e:a8:11:0b:1f:9b:a7:9c:
34:b7:93:ff:09:ca:95:1c:6d:ad:e6:14:52:6f:62:
c3:ff:24:27:3a:6d:36:30:61:0d:dc:a9:27:e1:5a:
15:28:4d:42:7c:91:9d:5a:83:b9:c8:b5:95:3f:c2:
f2:ec:58:be:18:1b:ff:df:53:61:bf:d5:d8:b7:33:
54:42:af:b9:b8:15:fa:0e:16:48:16:b0:a7:f3:5f:
ba:0b:2d:82:c0:c8:84:00:b4:3c:1e:9e:fc:37:d0:
70:91:e8:f3:1b:1d:e5:b9:68:2e:0f:06:21:f4:7b:
a1:66:33:d9:f7:64:93:0d:a2:74:2d:0b:d6:ee:f8:
3b:82:46:be:37:fd:d5:67:33:cd:b9:ba:67:e4:66:
ed:b6:bd:f8:51:38:60:d5:a4:9a:5f:99:7f:ac:2e:
2f:e2:00:25:64:1c:5e:0a:77:a5:2a:86:7a:2b:88:
74:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AC:A2:DB:00:B2:05:42:0D:AE:3D:23:F8:13:96:28:87:9B:E3:9D
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/eKyi2wCyBUINrj0j-BOWKIeb450.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.69.245.0-114.69.246.255
Signature Algorithm: sha256WithRSAEncryption
37:74:de:1d:0c:8f:1b:09:26:8f:7e:ec:a8:95:2d:6a:10:47:
95:32:b2:fd:16:55:14:3d:c2:11:bc:74:9c:fa:db:7c:77:74:
48:29:03:ca:59:ff:41:a6:f6:d3:1e:ae:3f:15:e1:c1:f2:15:
62:26:63:41:57:b7:d5:1a:c3:69:70:e7:bf:98:26:70:e4:95:
cd:ad:30:81:05:e9:8f:30:2f:ab:c5:7f:a6:09:f4:22:61:32:
0e:e2:b1:c1:14:fa:3c:ee:39:31:08:9d:ea:df:2c:a5:19:fa:
bf:01:da:0f:70:c6:da:a4:89:07:89:23:b2:b0:55:84:aa:6b:
f5:ae:63:6f:e2:01:68:dc:e5:65:06:fb:4b:c1:3d:1e:8a:02:
ea:46:da:00:de:aa:36:ac:0f:d5:6c:24:df:10:d2:25:37:8e:
40:1c:32:df:a7:d6:b6:9b:c9:d6:ca:c9:5d:22:82:2d:94:a5:
70:ec:85:2d:0b:04:1e:4c:fc:64:a5:01:2c:62:56:44:88:e1:
f9:67:52:1f:77:be:72:65:8e:28:10:2d:83:6d:92:44:43:d2:
e3:92:10:e5:a6:0d:b1:56:78:ab:83:33:85:f1:72:77:9b:2c:
6b:cc:59:94:4d:66:cc:c3:1f:22:33:5f:b7:c6:ef:e7:93:a9:
59:08:d8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 07:37:51 2024 by rpki-client on console-ams.rpki-client.org