Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/c3eZFDaVas6MMrVkH7pLwxl-n10.roa
File: c3eZFDaVas6MMrVkH7pLwxl-n10.roa (raw, json)
Hash identifier: ZTJzL/8kxGH27LDQvVG8vVUcw8zRNGYCOFHyu7rZaOo=
Subject key identifier: 73:77:99:14:36:95:6A:CE:8C:32:B5:64:1F:BA:4B:C3:19:7E:9F:5D
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 018CC8017A7BBEF3A6B5C99738A4E97FB272
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/c3eZFDaVas6MMrVkH7pLwxl-n10.roa
Signing time: Tue 02 Jan 2024 02:29:49 +0000
ROA not before: Tue 02 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142594
IP address blocks: 45.148.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Mar 2024 21:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7a:7b:be:f3:a6:b5:c9:97:38:a4:e9:7f:b2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Jan 2 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7377991436956ace8c32b5641fba4bc3197e9f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ce:c1:24:28:c0:37:6f:1c:19:7c:46:8e:a7:
34:37:3f:bb:1f:2f:35:18:8e:c7:ee:b6:9e:82:4c:
ff:a2:13:ab:00:c0:80:a3:f3:22:19:ef:20:b5:99:
29:ca:38:83:49:4f:df:c5:a1:93:85:fc:31:61:c2:
05:72:9b:d0:69:84:43:5e:e7:f3:58:02:7c:6e:1d:
6c:8a:84:42:11:18:04:96:87:f8:fe:de:a8:8f:a6:
5c:e5:c2:4d:83:46:7c:71:e5:74:10:b5:72:96:ee:
d4:2b:f4:e3:62:60:9d:dc:4e:25:b9:b6:69:24:86:
ea:33:3a:95:6c:7b:b1:df:67:c9:48:66:be:32:45:
9e:56:37:cf:ba:d4:2f:e3:98:f7:9a:f7:1e:bc:97:
e6:b3:2d:05:1b:78:74:21:fe:a2:11:9c:4e:be:8c:
41:e0:d5:2a:bd:35:e4:c1:e9:b9:cd:e5:ee:49:99:
7d:d3:6c:2d:ae:3d:99:12:55:6f:67:f7:37:9b:12:
d7:b5:91:9d:e4:3c:09:37:71:a8:a6:b8:7a:95:89:
7a:3a:ee:75:13:18:42:e5:fc:38:d1:8d:66:a4:e7:
f8:bc:0f:4d:0f:e1:d1:8f:4f:73:b0:58:a9:29:e9:
93:78:66:d0:a9:0c:23:6b:fc:9d:b1:39:1f:5e:b4:
91:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:77:99:14:36:95:6A:CE:8C:32:B5:64:1F:BA:4B:C3:19:7E:9F:5D
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/c3eZFDaVas6MMrVkH7pLwxl-n10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.134.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:44:fb:45:55:63:85:79:83:38:9f:e2:7b:f4:86:71:23:0b:
67:4b:62:e8:6a:08:66:c2:71:1b:51:95:ff:fb:1b:bc:ab:92:
5e:ea:21:9f:55:f3:67:dc:0a:30:4b:d1:7a:c4:0a:59:56:df:
7c:be:4f:5c:94:07:63:fe:d2:cc:1b:ff:90:82:45:c2:ec:9d:
94:94:17:a4:32:65:59:56:07:b0:91:6e:f8:83:c1:f3:a6:aa:
53:40:a5:fd:e8:7a:06:44:fb:c2:55:37:d4:6e:4f:b3:50:a9:
ee:9f:61:40:58:13:63:09:54:75:c5:04:30:ac:c8:b5:48:6c:
f5:86:85:53:2c:bf:45:eb:77:87:85:bc:67:65:0b:f3:a0:90:
d1:43:8b:78:c2:96:14:45:cb:a8:6e:75:a8:74:2b:f5:b0:7a:
69:b6:1e:e5:2f:31:15:96:07:62:ec:6e:f3:2f:ed:6b:2e:d1:
78:04:51:e3:77:fd:cb:71:96:f4:39:9b:a6:07:3c:19:be:e9:
0b:8f:39:d0:bb:14:28:14:f0:8b:9c:81:cf:c0:a6:77:ea:d8:
ef:24:f8:42:6b:90:f1:a0:9b:8e:63:39:80:12:45:ea:2c:83:
4a:dc:67:a3:04:a8:3d:4f:a7:60:a9:7b:bc:de:45:90:ad:8c:
3c:04:59:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:08 2024 by rpki-client on console-ams.rpki-client.org