Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/kXTgWsPRf5JX7Y1WAANeKDOr3AA.roa
File: kXTgWsPRf5JX7Y1WAANeKDOr3AA.roa (raw, json)
Hash identifier: xKZKSELhzO6MGkvu3aVrL7e+uxQ2ctqFKp4htEGqvqQ=
Subject key identifier: 91:74:E0:5A:C3:D1:7F:92:57:ED:8D:56:00:03:5E:28:33:AB:DC:00
Certificate issuer: /CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Certificate serial: 01857295DE8BCB3C93D31E2302665D09C46E
Authority key identifier: 4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/kXTgWsPRf5JX7Y1WAANeKDOr3AA.roa
Signing time: Mon 02 Jan 2023 13:05:02 +0000
ROA not before: Mon 02 Jan 2023 13:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60893
IP address blocks: 45.150.104.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:de:8b:cb:3c:93:d3:1e:23:02:66:5d:09:c4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Validity
Not Before: Jan 2 13:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9174e05ac3d17f9257ed8d5600035e2833abdc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2e:31:38:38:b6:5a:01:ed:2a:43:35:ea:aa:
3a:ae:6f:ee:00:03:54:fd:b8:eb:7f:91:89:60:50:
62:ea:07:f3:c1:02:be:ba:6f:a9:fd:e9:cb:45:e0:
89:83:9e:b4:1a:7d:08:1c:c7:2a:67:a4:25:df:d7:
22:4c:ab:e6:63:74:f7:68:3b:08:16:a3:cb:51:45:
84:9f:44:af:ba:2b:10:47:99:09:e3:85:6c:d5:52:
b2:3b:a9:73:8c:cf:99:d3:18:19:b4:db:be:5f:63:
cf:c4:6e:91:54:01:2e:fc:8b:03:a6:9a:2e:4d:56:
a6:b4:9d:5d:db:59:3a:fc:55:7b:27:7b:2c:9c:34:
9c:f0:9a:ab:3b:4a:44:57:f0:d1:b0:53:23:58:6f:
1c:a1:67:41:89:05:02:09:f2:5e:a1:ab:8d:e7:20:
d2:d2:a1:11:dd:9d:61:53:ec:79:a9:0e:b5:bd:d0:
78:0a:51:5e:af:ca:48:3b:2a:21:6c:29:b0:20:b3:
c5:af:9d:90:0f:2f:d2:10:98:ca:26:3d:27:d3:89:
02:a4:e1:10:9e:7b:aa:9e:12:45:86:d1:f7:b5:0c:
45:7a:8f:1f:d4:6d:b3:b2:f0:a7:f0:ae:71:a5:e8:
5a:6a:fb:a8:d6:9e:6d:ed:d5:88:6d:52:44:2e:93:
f2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:74:E0:5A:C3:D1:7F:92:57:ED:8D:56:00:03:5E:28:33:AB:DC:00
X509v3 Authority Key Identifier:
keyid:4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/kXTgWsPRf5JX7Y1WAANeKDOr3AA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.104.0/22
Signature Algorithm: sha256WithRSAEncryption
96:ca:bc:d0:db:9a:1b:f0:23:fe:45:1b:41:6b:e1:0a:cb:7b:
54:c9:37:b2:1a:8f:7f:e8:08:bc:09:e0:94:34:33:89:41:13:
7c:ef:8d:21:6f:de:22:58:36:ac:9d:f2:f6:47:ae:2a:90:aa:
77:87:cf:9a:ee:69:53:51:a4:d9:02:1b:d0:75:38:b5:ef:bd:
8e:06:32:0d:aa:8b:65:13:d2:df:df:19:b0:86:f2:5b:81:d3:
0d:7d:2c:31:28:c1:cf:91:c5:01:36:b0:d7:68:41:c1:20:99:
2f:9a:37:60:1a:ee:79:77:75:84:cb:aa:f5:29:0c:74:f0:6d:
58:bc:2c:63:09:7c:34:e1:b7:65:cf:a0:77:16:1f:3c:ad:66:
5e:ed:16:a0:ee:94:01:64:0d:a1:61:43:82:36:58:67:2f:26:
f2:1a:99:11:24:ca:75:f0:66:72:7f:57:1a:f8:e5:ca:d9:10:
7d:78:da:c6:5d:f6:10:d5:d8:ae:53:13:46:6e:ef:36:5b:8d:
df:e9:26:b3:27:2a:21:e0:39:b1:17:17:6d:9a:de:05:1a:a9:
f6:eb:99:14:4a:41:da:7c:34:58:38:a9:78:b6:bf:54:1b:9f:
ba:69:03:10:c3:2b:50:e0:80:36:bd:1f:e7:16:97:19:72:73:
7d:ec:4e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:01 2024 by rpki-client on console-ams.rpki-client.org