Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/cdXkaG8H8eWEXuLXbim7XxfekVc.roa
File: cdXkaG8H8eWEXuLXbim7XxfekVc.roa (raw, json)
Hash identifier: JH80vi5qvvtqqnZqGVBNEQEmLez+DbkI2OFuYE2IuzA=
Subject key identifier: 71:D5:E4:68:6F:07:F1:E5:84:5E:E2:D7:6E:29:BB:5F:17:DE:91:57
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 01900DC7C5B3903425A804C36F67875150C0
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/cdXkaG8H8eWEXuLXbim7XxfekVc.roa
Signing time: Wed 12 Jun 2024 18:48:34 +0000
ROA not before: Wed 12 Jun 2024 18:48:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 45.3.60.0/22 maxlen: 24
2a0a:da40::/29 maxlen: 29
2a0d:c980::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 15 Jun 2024 12:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0d:c7:c5:b3:90:34:25:a8:04:c3:6f:67:87:51:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Jun 12 18:48:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71d5e4686f07f1e5845ee2d76e29bb5f17de9157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:dd:74:d7:f6:2c:e5:29:cd:2e:37:86:51:
c0:af:63:b9:44:3d:bf:31:09:f5:55:68:00:8a:a5:
8b:28:a2:66:52:5c:9e:dc:93:83:8d:3d:47:85:05:
24:13:42:bf:08:f9:99:30:aa:27:4a:0b:fe:9d:91:
24:11:13:fd:0b:c6:ec:02:2b:ce:66:e8:74:a0:33:
fe:00:86:1a:df:2d:2f:d7:9a:62:4e:a6:50:f1:84:
6f:9b:ea:7d:bf:e1:43:02:ab:cd:c7:88:61:11:81:
32:6a:e6:23:d5:c6:cf:25:d7:31:ab:e5:75:79:68:
93:1e:fa:1d:f6:cd:9a:b0:76:c9:e9:65:9b:03:02:
20:92:f7:58:c9:6c:40:3b:4e:6f:0e:0f:21:9f:39:
e7:d0:47:67:d5:d3:33:0d:72:db:57:bd:d8:09:98:
5e:70:16:eb:55:41:bf:d9:af:73:7d:35:fb:a2:69:
fe:23:20:25:21:05:1d:98:a9:05:21:15:1f:a1:f4:
55:52:f3:1c:42:4f:95:08:6f:ed:0d:79:f3:aa:54:
5b:14:2d:1d:a4:01:a7:98:61:7d:dd:65:c9:c4:5b:
e3:f9:eb:85:1d:a9:f4:b7:bc:4e:a0:e0:9e:35:a9:
82:48:89:82:b6:92:4b:ce:68:5b:d0:72:22:0f:13:
97:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D5:E4:68:6F:07:F1:E5:84:5E:E2:D7:6E:29:BB:5F:17:DE:91:57
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/cdXkaG8H8eWEXuLXbim7XxfekVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.60.0/22
IPv6:
2a0a:da40::/29
2a0d:c980::/29
Signature Algorithm: sha256WithRSAEncryption
7e:38:f1:d0:38:03:f2:74:55:de:9f:25:bc:76:66:83:36:5e:
d6:9a:27:8f:c2:ba:f8:86:67:03:84:a9:37:c7:33:cf:2b:06:
9e:31:ad:af:8f:37:0c:50:fd:72:c6:c5:e7:2a:fd:94:d4:33:
ca:fb:5e:ec:5f:b5:ef:4f:a3:0a:45:88:85:b3:9a:f8:47:65:
80:3f:68:25:3d:79:25:f6:9c:b2:51:8a:9d:27:0e:40:2b:cc:
bd:2c:a0:3f:59:bd:4c:db:34:54:80:e8:26:cf:c6:50:6c:50:
21:45:54:cb:a3:0b:ea:75:23:8a:6d:9e:28:7b:e9:19:20:0a:
6c:c0:d7:d8:94:db:03:11:ea:38:a4:9a:0d:b4:b0:27:ea:d7:
e8:3a:b9:50:70:8c:f5:aa:a0:14:a8:41:5a:9e:7c:e6:42:3f:
5d:7c:b3:fd:40:6d:04:b8:5d:3f:a1:b2:da:81:30:60:9d:86:
f7:c1:63:6b:d2:04:30:10:88:84:81:97:80:6d:96:c5:1f:2d:
a3:e9:07:6c:33:b4:77:e4:82:be:56:d2:53:3c:63:5d:39:0d:
32:45:90:55:ff:66:fa:7f:2e:ef:8e:48:39:f8:d4:8a:ef:1b:
f5:19:3e:f5:46:c9:61:44:48:25:b3:40:1a:4a:84:07:e3:2b:
88:b1:a0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:43:00 2024 by rpki-client on console-fra.rpki-client.org