Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/rTVIGvlFBRgLNUMTfOqtMKJbDE0.roa
File: rTVIGvlFBRgLNUMTfOqtMKJbDE0.roa (raw, json)
Hash identifier: 8AVa/KHvUso0gJ8powbl8OerUSNCMNXUeGLeBpXMGSc=
Subject key identifier: AD:35:48:1A:F9:45:05:18:0B:35:43:13:7C:EA:AD:30:A2:5B:0C:4D
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 0189567E1B364A84700189E27DB233274005
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/rTVIGvlFBRgLNUMTfOqtMKJbDE0.roa
Signing time: Fri 14 Jul 2023 22:20:52 +0000
ROA not before: Fri 14 Jul 2023 22:20:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 45.148.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:56:7e:1b:36:4a:84:70:01:89:e2:7d:b2:33:27:40:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Jul 14 22:20:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad35481af94505180b3543137ceaad30a25b0c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b7:6c:34:8b:e2:ef:26:29:ec:9f:b2:ee:4b:
c5:4d:38:8a:1b:6a:e9:63:9f:aa:11:ed:36:e2:e6:
41:61:34:bd:11:00:44:a3:0d:22:f0:82:ae:51:e8:
f6:ea:92:ca:b7:45:ed:4b:81:cc:c2:56:e3:e6:45:
65:5e:9d:65:74:19:cf:26:38:18:53:41:6f:3b:93:
93:c6:e5:58:8e:1e:44:52:86:4d:f9:46:c2:7c:ef:
73:bf:31:a5:73:30:17:08:a0:bc:b9:dc:ab:e4:be:
74:56:ed:1c:55:35:27:e3:d7:79:f1:0b:ec:32:63:
85:b2:b7:ff:d6:e9:70:ff:91:2d:3c:bb:45:ec:eb:
32:c1:79:ae:70:b1:01:9f:51:ab:c0:e7:73:d0:b9:
5b:60:02:e4:ad:84:b3:54:16:82:df:28:79:a8:8c:
9c:83:dd:2d:89:51:ac:51:52:6e:85:f6:4b:38:40:
e3:5d:fb:ec:2e:c0:e8:d6:00:6e:d7:86:74:66:d5:
bf:16:d4:e8:61:19:ca:a1:eb:2c:66:67:5c:7d:e4:
f6:8b:72:94:f1:20:22:28:00:9c:63:1a:28:91:78:
c2:20:c2:74:87:10:35:ee:04:6d:9a:32:34:40:5e:
54:25:09:c9:4d:52:01:6f:93:d2:be:db:6c:36:d6:
a9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:35:48:1A:F9:45:05:18:0B:35:43:13:7C:EA:AD:30:A2:5B:0C:4D
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/rTVIGvlFBRgLNUMTfOqtMKJbDE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.135.0/24
Signature Algorithm: sha256WithRSAEncryption
66:7c:eb:bd:f0:47:a7:49:4f:c4:3d:19:f4:92:a0:1f:25:41:
bb:34:fc:e0:ae:23:5c:1b:85:5b:f7:ac:07:e6:ba:69:c8:dc:
02:d8:8e:24:07:a8:8c:3d:b3:a1:0d:1d:d2:44:9e:4e:62:6a:
47:c3:c9:69:f8:57:e7:93:15:da:ee:a4:38:77:d0:23:18:97:
cb:de:5a:9a:ee:b8:df:d2:0b:b9:ea:47:e8:3d:9a:17:f0:19:
c1:34:26:fa:f5:1d:19:ca:da:7d:be:7d:bb:bd:c2:45:11:24:
23:82:f8:6c:ff:96:b5:67:32:5c:28:5b:27:5c:ed:86:22:bf:
be:99:e5:06:f0:2c:0d:f7:b2:66:17:d7:da:17:31:a7:08:27:
05:2f:39:9a:c1:6c:6a:b1:eb:d8:e9:26:a0:3a:0e:94:5d:ca:
dc:0a:39:e7:01:a8:b3:35:6d:5f:39:60:2e:d6:f6:0a:7d:9a:
2f:7d:73:fa:35:97:5e:06:c8:b0:ec:6f:6d:f0:80:e1:b4:66:
03:02:20:67:66:a5:73:9b:99:ce:e8:44:3f:e3:98:35:86:ff:
ce:0f:c5:52:a3:90:84:03:7b:6f:62:53:8c:77:12:96:fd:e3:
e9:ac:ca:23:dc:36:f4:bc:e1:a5:54:36:75:95:5b:f5:de:ab:
b2:6c:76:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:51 2024 by rpki-client on console-fra.rpki-client.org