Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/VZysNejtoZRjRr4thkMf0jgtLkY.roa
File: VZysNejtoZRjRr4thkMf0jgtLkY.roa (raw, json)
Hash identifier: 4HQPylUjmS49KB0RXWFNHPRBNoprvflMhxdB7vKxArk=
Subject key identifier: 55:9C:AC:35:E8:ED:A1:94:63:46:BE:2D:86:43:1F:D2:38:2D:2E:46
Certificate issuer: /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial: 01856F94B70C149E9CEA85454B01230120DD
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/VZysNejtoZRjRr4thkMf0jgtLkY.roa
Signing time: Sun 01 Jan 2023 23:04:55 +0000
ROA not before: Sun 01 Jan 2023 23:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42708
IP address blocks: 45.86.104.0/24 maxlen: 24
45.86.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:b7:0c:14:9e:9c:ea:85:45:4b:01:23:01:20:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Validity
Not Before: Jan 1 23:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=559cac35e8eda1946346be2d86431fd2382d2e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:ca:70:2a:71:a4:96:ea:26:cd:8a:8a:ef:
7d:d0:3a:7d:51:15:b1:ae:f4:d3:56:4d:80:3c:0f:
3f:56:0e:5b:db:1c:11:2e:a0:9d:62:1b:c1:65:28:
b2:8a:7c:19:44:ca:43:5e:35:e8:1b:f6:ab:14:c8:
4a:dd:0b:b8:74:8e:bb:c1:bb:d2:0a:a4:a6:96:4a:
e9:43:f7:01:b9:28:dd:de:21:8f:be:e2:67:bd:62:
20:9b:90:3c:8e:54:0f:00:c0:09:c5:dd:1f:9a:c4:
53:18:71:d3:b0:22:70:c5:eb:f3:4a:99:22:a0:a0:
94:75:6c:da:08:2c:9e:79:4c:d5:8a:3e:2b:fb:35:
c7:db:e2:cd:20:a7:f7:24:93:26:e9:5c:f2:0c:f6:
f6:df:97:af:63:4b:15:e3:1f:bb:fc:08:25:49:69:
ab:8a:1a:78:e3:35:f6:55:c8:55:4e:3a:a1:db:a4:
21:3c:fb:48:70:16:a4:69:ce:36:1d:d8:8d:a5:e0:
75:c2:7c:91:55:57:82:66:2d:81:bf:37:a9:59:6a:
4e:99:e2:64:0c:6c:55:91:67:63:47:e8:4f:fb:d8:
d3:56:11:21:95:e9:7d:e5:7f:47:13:61:50:e6:d3:
64:48:b6:03:f4:de:5d:2d:78:9c:71:b7:ac:ff:9c:
cd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9C:AC:35:E8:ED:A1:94:63:46:BE:2D:86:43:1F:D2:38:2D:2E:46
X509v3 Authority Key Identifier:
keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/VZysNejtoZRjRr4thkMf0jgtLkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.104.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:95:c9:d3:88:91:bb:0c:54:22:1a:89:59:46:73:03:0e:21:
2b:d5:dc:ff:10:98:28:2c:99:bb:59:d3:25:ce:77:8d:7d:28:
23:61:43:ed:97:89:59:00:fa:e4:46:c2:d5:c8:67:5c:06:64:
7f:4d:a3:98:33:dd:e0:7d:08:90:30:85:43:f5:48:86:ac:c1:
1c:64:f5:bf:79:1c:2c:e4:f2:54:81:45:46:30:d5:a6:ce:f8:
16:cc:df:c2:0f:3d:27:e7:81:67:0a:6e:1e:0e:88:05:cc:fc:
f6:47:17:ea:fa:de:ae:af:32:4b:91:51:dc:f9:80:d6:d0:02:
8a:47:3b:a2:a2:06:5e:0a:48:bc:a8:0b:ac:04:02:34:54:b0:
da:11:64:6c:84:d9:d5:65:bc:31:8b:3c:63:17:99:92:2e:ed:
50:42:fb:b5:d7:4b:1a:62:38:bb:0e:01:1e:02:79:62:b7:ee:
a3:42:d8:2d:f3:cd:30:3f:5f:d9:8c:01:4d:c9:ce:44:90:33:
5c:f2:06:65:7f:19:7a:1a:05:ef:49:b5:da:c5:bd:2d:34:01:
69:75:b6:81:a7:d2:f5:8b:17:61:6b:33:8a:2f:41:d9:3e:44:
9d:78:4a:36:59:44:01:81:c0:5d:fa:19:f9:0b:fa:9f:aa:31:
28:d2:bf:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:51 2024 by rpki-client on console-fra.rpki-client.org