Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/dV68YWBqsDxvgHzjqaIkBUMTZjw.roa
File: dV68YWBqsDxvgHzjqaIkBUMTZjw.roa (raw, json)
Hash identifier: s8Q3tyFtSW01ATm3NcnJlb20WwkUH+UCpNpBAXEB+Wo=
Subject key identifier: 75:5E:BC:61:60:6A:B0:3C:6F:80:7C:E3:A9:A2:24:05:43:13:66:3C
Certificate issuer: /CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Certificate serial: 018AF46B102908E3687213DA256496EB6FBF
Authority key identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/dV68YWBqsDxvgHzjqaIkBUMTZjw.roa
Signing time: Tue 03 Oct 2023 07:22:51 +0000
ROA not before: Tue 03 Oct 2023 07:22:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197931
IP address blocks: 45.128.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:6b:10:29:08:e3:68:72:13:da:25:64:96:eb:6f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Validity
Not Before: Oct 3 07:22:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=755ebc61606ab03c6f807ce3a9a224054313663c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f8:0c:09:26:04:3f:4f:99:ac:d5:df:b1:28:
e8:1d:d5:78:ea:9c:d7:0e:1b:65:6c:d8:9c:e6:bb:
4b:f3:0a:ae:2c:7f:67:1a:e8:a6:f2:26:80:32:fd:
07:83:7f:39:4a:b6:25:f6:e1:80:a3:70:a5:be:8e:
20:56:22:00:b8:ba:1e:50:30:ec:81:95:66:8a:cf:
e3:3c:ee:9b:32:f1:04:7e:28:8d:4e:a4:8a:ee:10:
8d:fa:12:16:18:af:ef:ed:07:8f:10:97:c6:dc:04:
e2:7b:c8:a0:c3:e4:1d:4f:e7:5b:d3:a7:07:94:97:
6d:21:52:98:a4:e0:1f:c7:fd:dd:46:b0:34:0a:b6:
dc:f0:2b:b4:00:2c:b0:3e:01:10:5b:3b:e0:7a:4e:
3d:24:0c:08:76:83:ff:15:2f:9f:76:2b:15:b8:c3:
51:06:e8:81:5f:77:3a:f1:e0:fa:d3:43:27:e7:00:
b2:5c:e1:b9:89:89:5f:2b:87:98:4e:0d:0d:2b:b5:
7b:4c:b9:cd:0d:53:31:43:78:ac:5f:5d:ca:f3:8a:
36:a1:eb:ba:57:82:76:1e:2c:e5:01:62:8e:4d:a4:
0a:69:1b:9b:aa:62:46:37:5a:9b:4a:1e:98:99:cf:
0c:45:54:c7:5e:9b:26:85:2a:33:04:aa:44:44:8d:
5e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5E:BC:61:60:6A:B0:3C:6F:80:7C:E3:A9:A2:24:05:43:13:66:3C
X509v3 Authority Key Identifier:
keyid:4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/dV68YWBqsDxvgHzjqaIkBUMTZjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.98.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ce:a2:bf:e2:7d:d2:2b:62:c4:b9:d4:e8:f9:f4:a4:a9:69:
1d:25:a4:39:df:e5:ea:47:e9:be:bb:49:11:51:9b:a2:02:7a:
21:5b:c2:d0:80:58:b1:e0:34:6a:97:bf:27:c3:48:ed:fe:9a:
50:28:3b:fa:e2:b4:db:6f:b9:48:19:7c:01:27:4d:47:9a:41:
aa:1c:cd:1d:d4:b9:ae:7d:71:7a:99:a8:e0:63:ab:29:bb:c3:
f5:6c:72:11:32:86:97:9d:c6:42:3c:7b:e9:cd:37:69:3f:59:
46:d3:28:58:4d:99:a7:c3:d1:7b:68:1e:e6:44:80:7e:31:80:
54:fd:f3:c1:a3:87:ac:7f:99:f5:62:b0:53:c8:fe:13:8c:bc:
be:06:91:52:12:c5:de:dd:ad:06:23:e5:5a:4e:69:cb:2b:7b:
37:93:de:23:17:cd:57:94:7e:ed:7e:b5:6e:c7:35:25:13:3f:
5e:7d:b9:48:62:8f:7f:e9:b2:de:e9:6a:15:41:e6:bf:ed:69:
af:d7:19:7f:24:ca:0f:cb:2f:ac:4a:53:71:7f:aa:18:b3:0b:
e9:40:9d:76:e1:a2:34:60:07:1f:fb:9c:99:64:2b:54:9a:4f:
db:1e:30:59:0e:a5:fe:53:4c:0c:32:b1:9d:63:26:48:32:38:
1e:8f:b5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:46 2024 by rpki-client on console-fra.rpki-client.org