Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/7oZ21q5lM7EfGaKAleLDjw8YEVE.roa
File: 7oZ21q5lM7EfGaKAleLDjw8YEVE.roa (raw, json)
Hash identifier: iE7ViMhZmG0EwcZxWcxSRHo1omti9FK8nUGnDIfIaDg=
Subject key identifier: EE:86:76:D6:AE:65:33:B1:1F:19:A2:80:95:E2:C3:8F:0F:18:11:51
Certificate issuer: /CN=121a37282dd992d88658160559e048392798c84b
Certificate serial: 018CC5DC37EFFB042AD629368B74CCDA2F4C
Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/7oZ21q5lM7EfGaKAleLDjw8YEVE.roa
Signing time: Mon 01 Jan 2024 16:29:52 +0000
ROA not before: Mon 01 Jan 2024 16:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44092
IP address blocks: 45.13.130.0/24 maxlen: 24
45.13.131.0/24 maxlen: 24
45.13.128.0/24 maxlen: 24
45.13.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 14:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:37:ef:fb:04:2a:d6:29:36:8b:74:cc:da:2f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121a37282dd992d88658160559e048392798c84b
Validity
Not Before: Jan 1 16:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee8676d6ae6533b11f19a28095e2c38f0f181151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:7a:91:3b:07:c0:a1:4a:21:8a:d7:ce:0a:
e8:87:cc:dc:d0:ba:1d:90:09:d1:c1:15:6c:05:35:
6a:8b:e6:20:98:6a:0c:d9:1d:4c:8e:31:ef:72:e1:
c1:77:f8:5d:ed:3a:0a:89:e3:1b:f1:ad:9f:6c:1c:
aa:60:ff:86:45:8b:54:a2:c8:e0:ad:b8:41:d3:d4:
c3:6f:bc:06:59:34:9c:a7:d6:59:74:dc:07:6c:47:
ef:8b:1d:68:7e:ac:2d:84:11:67:0b:04:dc:9a:98:
f9:e4:71:b3:88:21:43:ef:09:5a:81:2c:df:08:68:
bd:1f:8c:a3:1d:0c:33:14:42:2e:e4:d4:eb:35:44:
36:2a:b1:8c:5c:92:be:29:1e:73:78:52:e2:1e:78:
b8:7c:cb:d4:94:f7:ed:a9:da:3f:3e:47:b2:31:1a:
e2:b7:49:2e:f6:5a:74:3a:a7:1e:84:49:02:7a:0d:
05:da:bb:6d:06:78:33:41:b8:31:40:69:20:f3:1e:
12:f1:e5:b8:cd:45:c8:2b:e0:cd:17:93:e1:0b:cf:
1a:fd:3f:df:e2:35:e2:93:44:9a:d2:50:ca:9d:ab:
21:74:99:54:eb:bf:e1:ab:3a:e3:a3:00:69:7a:48:
c5:9c:54:ec:b2:cc:b5:9d:b7:10:9f:cb:ef:48:ff:
fe:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:86:76:D6:AE:65:33:B1:1F:19:A2:80:95:E2:C3:8F:0F:18:11:51
X509v3 Authority Key Identifier:
keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/7oZ21q5lM7EfGaKAleLDjw8YEVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.128.0/22
Signature Algorithm: sha256WithRSAEncryption
24:76:9e:6e:c8:46:b7:3a:62:d5:df:52:c2:36:6c:58:18:f6:
a1:69:ed:cd:6e:8c:c1:cd:4f:6b:51:dd:44:ee:b4:0d:38:f3:
0a:0c:2b:b0:28:60:09:6a:b9:19:de:44:d3:5b:6e:f5:e3:b0:
db:ba:90:17:2a:80:f1:f0:ca:c5:3f:04:2b:cd:20:f1:0d:e8:
62:77:3f:fd:4d:04:75:0b:42:ae:f1:46:01:23:a1:b0:08:9e:
72:8b:8a:1d:cb:82:b7:a1:06:bd:1f:a2:20:cb:73:19:3b:10:
20:67:d4:32:bb:bf:fa:35:15:60:89:5d:b0:02:e6:af:5c:09:
7f:5a:f5:3b:76:8f:e5:10:f7:27:52:06:39:c7:b3:ec:83:32:
d5:42:ae:67:d5:b8:79:37:a0:1d:53:d4:c6:48:02:c4:bb:76:
1f:e2:71:60:d8:16:94:8f:e8:1b:a5:3e:11:bc:e6:9e:4b:7f:
65:66:61:59:bc:c1:e8:78:d4:e4:ba:c8:44:a6:af:64:f3:fc:
54:a6:4c:56:29:4b:0f:f3:f1:ae:1d:51:c4:8d:a9:fd:21:bc:
77:08:77:d9:e1:36:c1:b1:17:6a:3b:35:df:cc:6f:a9:46:80:
91:27:38:98:a3:7e:16:b9:b8:ca:3e:a2:05:d5:1a:3e:25:87:
e4:e5:15:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:40 2024 by rpki-client on console-ams.rpki-client.org