Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/4syLavvEqA2EIvURC9VWujvdeq0.roa
File: 4syLavvEqA2EIvURC9VWujvdeq0.roa (raw, json)
Hash identifier: B4/0g4SUzXrVDapjRkYxEypLttQ5o4YKAo7ClaPdUJ8=
Subject key identifier: E2:CC:8B:6A:FB:C4:A8:0D:84:22:F5:11:0B:D5:56:BA:3B:DD:7A:AD
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 0188B427BDC58082D6123872C47AA931430B
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/4syLavvEqA2EIvURC9VWujvdeq0.roa
Signing time: Tue 13 Jun 2023 09:48:03 +0000
ROA not before: Tue 13 Jun 2023 09:48:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 45.148.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 21:47:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:27:bd:c5:80:82:d6:12:38:72:c4:7a:a9:31:43:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Jun 13 09:48:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2cc8b6afbc4a80d8422f5110bd556ba3bdd7aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fc:49:3a:8d:92:b2:a4:f5:06:0c:0a:2c:59:
5f:7c:df:2f:83:b3:6c:64:52:3a:b2:a4:f7:6e:01:
8a:f2:5d:62:fb:71:d8:a9:2e:fd:21:c6:9c:52:60:
b6:92:b1:72:1f:77:7e:8c:3f:c4:06:df:61:ce:bd:
ee:a2:87:5e:8f:e8:14:65:74:44:9e:c2:69:d0:e8:
9d:59:de:ee:25:71:48:5d:17:cd:36:7b:d6:27:96:
e6:e8:87:ed:7b:31:2c:e2:fe:8a:f6:7a:7d:1c:7e:
be:14:e6:dc:c2:1c:4b:1c:8f:d9:c2:0f:1f:63:4e:
36:cf:ec:ee:4d:8d:ef:22:7d:2a:26:d6:fb:86:2a:
3c:c7:b7:b4:c2:23:62:bd:5f:8e:ac:62:a9:18:09:
7f:0a:62:ae:6b:06:84:c5:fe:19:80:29:d9:42:ab:
4b:fa:12:96:1e:c1:f1:95:ef:aa:49:b1:cf:96:ff:
9b:35:e2:f9:d9:6d:63:f5:86:f6:38:e3:d2:06:0b:
19:5b:c2:50:24:12:87:1e:c2:e4:3c:fb:77:f6:35:
2c:da:60:bc:af:e3:29:96:a5:c6:00:98:a5:f4:e8:
54:fe:c5:4d:c1:69:e3:7c:8d:d7:16:c4:83:d7:4a:
f8:b4:6f:75:b5:9c:01:8e:6b:f9:2f:38:9d:9e:93:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CC:8B:6A:FB:C4:A8:0D:84:22:F5:11:0B:D5:56:BA:3B:DD:7A:AD
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/4syLavvEqA2EIvURC9VWujvdeq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.135.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:5b:76:51:3e:ab:4d:8b:f8:e2:e0:f1:e9:de:86:95:45:32:
b8:5e:b1:b8:7f:91:c5:f3:3b:b0:bd:c5:e7:8b:f1:2c:14:74:
14:26:44:bc:2b:6c:cf:0c:79:2f:af:89:81:eb:13:e1:04:92:
0b:7c:36:e2:54:2a:8b:57:47:14:ac:d5:41:d6:99:2e:3d:c2:
5f:71:5d:83:0c:3b:b8:9e:27:e9:9e:91:13:75:25:bb:83:fb:
60:10:45:c3:3a:db:b7:77:a9:00:5a:19:d6:d8:2d:2a:05:2a:
80:33:c0:af:23:91:bc:6a:88:ed:e5:b2:ca:d2:cd:39:50:e0:
1d:b6:a6:de:96:95:80:52:41:1e:56:0c:9a:28:3a:41:fe:57:
ac:04:3f:6c:30:5d:9f:fc:96:8b:d0:2f:e1:14:ef:38:55:0f:
94:f6:b1:57:b3:ce:4c:fc:4c:2d:ea:36:c5:40:83:dc:44:88:
d0:15:b0:7b:e2:50:53:19:db:66:62:60:00:b0:bd:2b:1d:5f:
5f:8b:b3:31:1b:18:6c:2a:19:41:1b:27:34:a4:cb:03:76:52:
ea:99:51:74:e6:6d:43:2f:2a:86:f8:cb:bb:99:2f:0b:6f:b2:
8d:08:3f:78:5e:90:47:d8:1c:05:b7:04:76:2c:d4:b6:2f:2b:
92:1c:68:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:08 2024 by rpki-client on console-ams.rpki-client.org