Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/v-L2n9_IVh8r3IqFd1o1k6Xv640.roa
File: v-L2n9_IVh8r3IqFd1o1k6Xv640.roa (raw, json)
Hash identifier: byRK9SKHY0hCwHOj/HfqSE8SjFlTOXMmVFrT440xHww=
Subject key identifier: BF:E2:F6:9F:DF:C8:56:1F:2B:DC:8A:85:77:5A:35:93:A5:EF:EB:8D
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01861652C9E90CF3590FDDB6BDE56787E1F5
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/v-L2n9_IVh8r3IqFd1o1k6Xv640.roa
Signing time: Fri 03 Feb 2023 08:09:29 +0000
ROA not before: Fri 03 Feb 2023 08:09:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8311
IP address blocks: 45.155.240.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 20:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:16:52:c9:e9:0c:f3:59:0f:dd:b6:bd:e5:67:87:e1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Feb 3 08:09:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfe2f69fdfc8561f2bdc8a85775a3593a5efeb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c1:d9:0c:1e:a3:7e:3f:76:1b:d0:6a:4a:68:
4b:ce:dd:74:51:c6:b3:96:1b:a9:ee:bb:fb:12:83:
71:ca:12:d4:9b:44:6f:49:b1:eb:f7:2d:66:e7:a6:
6a:b3:82:11:e0:89:5d:cf:e6:52:d8:5b:1c:da:fd:
0e:a5:9d:0e:5b:13:8a:dd:ce:26:27:90:ea:da:c3:
db:02:7a:4b:5d:62:af:59:78:2a:65:dc:b2:a3:39:
8e:4c:18:02:6a:d1:d1:a1:fc:7a:04:ba:17:98:11:
6a:eb:87:de:d1:8b:5a:12:64:1d:86:96:58:a3:85:
6d:f6:ad:08:a7:51:d3:d8:2d:05:83:8d:75:57:65:
48:42:7d:0c:05:e9:54:e6:19:b8:7b:ae:69:29:72:
db:5a:cd:ad:5d:71:9f:a1:2d:d1:68:d5:d9:ef:f0:
b5:68:08:69:11:e8:d3:68:9f:bb:d4:0e:8d:b0:56:
8e:c2:74:19:14:c2:b1:a8:a6:51:ef:f1:db:9b:c5:
f3:77:87:4b:8f:a9:87:bd:17:d0:15:14:9d:f8:c7:
59:6c:a2:eb:7d:44:6b:1f:92:a1:7e:2e:16:85:bc:
00:1e:7c:2c:f0:76:e1:59:67:f8:48:a1:9c:5c:38:
9a:41:3a:f2:50:e9:7a:91:8f:45:79:d2:6a:c9:75:
bd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E2:F6:9F:DF:C8:56:1F:2B:DC:8A:85:77:5A:35:93:A5:EF:EB:8D
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/v-L2n9_IVh8r3IqFd1o1k6Xv640.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0/22
Signature Algorithm: sha256WithRSAEncryption
19:20:e3:fa:b9:c1:98:50:71:43:4c:b1:46:d3:bb:06:eb:ad:
27:8e:59:45:13:8a:51:05:19:a7:35:02:11:d5:9b:e6:1e:54:
6a:9f:cb:20:09:c7:88:3c:8a:34:ea:03:8d:07:1e:18:1c:a0:
b5:b0:3f:24:48:c9:6e:08:c1:11:8c:e5:4d:2f:ad:bf:56:9d:
70:13:c6:ec:1c:79:e6:22:a7:56:ef:e7:c7:75:0c:16:95:35:
18:a7:1f:15:58:22:93:92:b3:f2:9e:45:95:bf:6f:0e:61:e1:
3d:ab:35:e7:d9:78:28:3e:12:89:ae:c4:f4:3d:5f:0a:85:10:
9a:c9:e4:15:25:8e:d0:b8:71:f8:b4:cb:70:9f:2b:be:cc:cb:
84:e7:86:f5:49:e6:2e:78:e3:3d:14:99:c7:3d:1c:27:47:84:
4f:8b:81:54:4e:24:3f:06:f2:fd:cf:6c:e9:22:7b:40:4c:34:
27:51:42:66:dd:f9:80:13:9d:8a:7b:84:8d:be:3f:83:cd:fc:
8b:04:76:1d:4e:c8:bf:4d:cf:ab:16:bd:58:5f:07:73:3f:ff:
23:90:9b:79:36:56:bb:19:76:3c:99:40:18:5e:03:ef:c0:2b:
98:3a:0c:00:44:d0:c4:a8:23:6c:a5:04:36:18:d0:ae:70:57:
64:17:70:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:40 2024 by rpki-client on console-ams.rpki-client.org