Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/CvLi8Ah6P9G-k-R7ac-wlqVP-sY.roa
File: CvLi8Ah6P9G-k-R7ac-wlqVP-sY.roa (raw, json)
Hash identifier: rV2Zx9xvSAxdWLAezwHdffVhZ75q9ymoJYbTfE/aEjs=
Subject key identifier: 0A:F2:E2:F0:08:7A:3F:D1:BE:93:E4:7B:69:CF:B0:96:A5:4F:FA:C6
Certificate issuer: /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Certificate serial: 01856B2E951F2D1E28C549B8A426B33CE589
Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/CvLi8Ah6P9G-k-R7ac-wlqVP-sY.roa
Signing time: Sun 01 Jan 2023 02:34:52 +0000
ROA not before: Sun 01 Jan 2023 02:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61072
IP address blocks: 45.154.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:2e:95:1f:2d:1e:28:c5:49:b8:a4:26:b3:3c:e5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Validity
Not Before: Jan 1 02:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0af2e2f0087a3fd1be93e47b69cfb096a54ffac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:84:dc:3d:23:a4:15:aa:0b:10:8f:a5:45:81:
be:8d:31:3b:d1:2f:36:f3:6f:e2:e4:16:9f:0e:6a:
82:11:f7:4a:95:9f:c2:f1:3e:1c:2a:ac:5c:59:ba:
c2:c3:d6:0c:f2:c4:0a:cb:87:91:58:fc:16:94:c1:
16:d6:2a:f1:31:18:40:26:ed:71:54:19:54:93:47:
b6:ad:b2:9d:09:bd:58:01:ef:2d:d3:77:08:eb:21:
88:c8:de:6e:1f:84:70:8d:78:d6:e1:df:be:83:72:
8e:5c:7f:02:61:ad:b0:93:8b:38:95:02:9b:0d:39:
69:43:9c:66:4c:8a:a1:02:1b:3c:06:9b:d8:ff:f7:
38:d1:0d:d8:30:e9:9d:fc:41:16:18:88:26:10:63:
79:df:a8:7a:7f:ad:ac:18:59:3a:9d:f3:e5:82:2f:
ae:a6:4d:d8:22:8f:8b:71:88:ed:e2:0b:54:08:18:
1e:6a:92:9f:43:33:2c:18:b7:b9:55:56:5d:b0:c0:
b1:3a:9c:8f:00:07:4c:9f:2c:d0:d7:fb:09:9b:35:
76:b2:3f:98:35:74:e9:0f:df:01:4b:cd:e0:7d:71:
85:2f:ee:bc:a2:fd:72:52:75:a5:34:6e:70:95:09:
4f:e6:92:66:e8:97:2d:28:09:e8:53:90:44:c1:16:
95:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F2:E2:F0:08:7A:3F:D1:BE:93:E4:7B:69:CF:B0:96:A5:4F:FA:C6
X509v3 Authority Key Identifier:
keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/CvLi8Ah6P9G-k-R7ac-wlqVP-sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.252.0/24
Signature Algorithm: sha256WithRSAEncryption
86:27:28:3c:76:97:93:8c:3f:cc:a1:99:fd:a4:7e:02:b1:61:
69:27:38:d5:ca:29:3d:c0:b3:2c:b0:ce:af:f7:a1:9f:d4:02:
6c:d7:88:9a:e7:a2:aa:9e:5b:e2:ec:2d:c3:14:bc:be:28:19:
f8:5b:49:d4:41:c9:5f:bf:21:c9:77:f4:a0:87:f8:b9:24:46:
8e:2e:0c:5d:99:85:96:78:39:ee:bd:e6:b4:14:ac:42:22:99:
fa:e3:17:49:8d:e0:10:20:48:7c:01:f8:7e:5c:32:50:55:d3:
80:a3:2d:16:dd:3b:44:8f:3f:95:4b:84:04:9a:f0:18:62:bc:
a5:77:cd:8b:42:f9:ed:a6:50:ae:07:3e:ba:d7:2d:96:57:c4:
0a:1c:de:1f:ef:26:00:54:70:bf:31:b5:97:0d:20:72:48:52:
a9:d3:87:10:ba:8d:f0:b6:fd:d9:c0:02:d6:8a:49:7c:44:13:
16:22:61:5a:65:9c:07:d6:49:d6:7f:f5:ea:dd:96:53:de:ab:
8a:56:28:dd:19:11:e4:a7:8f:ef:88:86:98:79:59:76:7f:d7:
d8:10:86:ec:67:f7:cb:f0:53:96:75:1d:d8:16:83:9f:fe:3e:
ee:6f:73:8e:d4:e8:10:3d:e1:7b:2a:40:75:28:44:2a:5c:9a:
c2:9c:b1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:53:23 2024 by rpki-client on console-fra.rpki-client.org