Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/XGrn7tf_RisF4J-l0lIMzEY1iT0.roa
File: XGrn7tf_RisF4J-l0lIMzEY1iT0.roa (raw, json)
Hash identifier: l0ltnKvlXmybAp9hwrumBsvYmUdPCSTb4/fcNx7u9Fs=
Subject key identifier: 5C:6A:E7:EE:D7:FF:46:2B:05:E0:9F:A5:D2:52:0C:CC:46:35:89:3D
Certificate issuer: /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial: 01857203469B25DEBD734C6D3D61EDECAF0C
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/XGrn7tf_RisF4J-l0lIMzEY1iT0.roa
Signing time: Mon 02 Jan 2023 10:24:55 +0000
ROA not before: Mon 02 Jan 2023 10:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59592
IP address blocks: 45.146.136.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:46:9b:25:de:bd:73:4c:6d:3d:61:ed:ec:af:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Validity
Not Before: Jan 2 10:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c6ae7eed7ff462b05e09fa5d2520ccc4635893d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d6:32:b6:41:84:79:99:4e:82:c5:95:a9:e5:
80:5f:0b:d4:3d:ca:84:dc:38:df:44:9e:b9:5e:cf:
9a:b6:84:6e:c6:88:11:f2:e2:99:77:86:46:2c:d7:
e2:59:82:e7:19:25:a0:47:32:08:fc:62:29:a6:2c:
ba:df:0a:06:00:9e:df:82:5d:e8:35:6a:1f:7e:13:
b5:aa:1e:e7:96:45:b9:8e:23:0c:84:c6:2a:5d:f8:
4b:d0:fc:54:98:53:63:47:ee:6d:fe:aa:be:11:52:
7e:8c:0f:5a:4d:c4:c9:19:02:14:93:c2:de:5c:b7:
d4:56:c5:60:ee:c0:b7:26:5b:33:5c:fc:5a:57:8a:
c0:a2:73:65:f2:cb:53:50:42:88:68:19:34:ef:c6:
f1:58:6a:da:ef:3f:fe:1e:3a:b0:7f:a1:61:8e:18:
8a:e2:72:01:89:9d:ba:c3:95:b5:ac:4b:06:a3:fa:
2e:c9:b9:9f:25:fe:d4:d1:b6:cd:1a:85:65:b7:0d:
44:a1:7d:70:a6:3c:f4:d0:53:3f:60:a5:a7:b0:8b:
18:9e:af:91:64:6d:38:54:23:b3:83:3d:9d:58:00:
2d:7a:0b:28:e6:78:34:35:01:44:36:0f:9b:14:f8:
b6:54:0c:f9:59:be:da:0d:83:65:6a:f0:12:28:f8:
5c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6A:E7:EE:D7:FF:46:2B:05:E0:9F:A5:D2:52:0C:CC:46:35:89:3D
X509v3 Authority Key Identifier:
keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/XGrn7tf_RisF4J-l0lIMzEY1iT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.136.0/22
Signature Algorithm: sha256WithRSAEncryption
15:a0:ff:bf:15:75:b1:6e:46:f3:09:21:fe:05:da:20:6d:21:
c2:b4:3f:70:8d:e9:44:53:c1:cc:08:fe:e2:c2:82:56:a4:86:
0f:cf:7f:87:95:a1:f1:0d:eb:70:a7:9e:66:c9:88:96:ee:fb:
b3:98:be:77:f8:77:16:d9:06:35:c8:88:68:15:5c:12:a5:da:
f6:d3:3c:53:f7:4f:3e:18:d2:91:e2:36:83:02:6d:39:9e:f6:
a4:16:3d:1f:59:b8:04:7e:30:ca:07:e5:29:61:fe:e2:6c:09:
34:f6:05:58:bd:9a:fb:9c:eb:9c:85:18:c2:35:4d:0a:92:f4:
47:37:50:75:cf:e4:42:14:60:66:e4:08:3b:c4:04:88:3a:57:
9b:76:2b:9b:fd:4a:2e:ea:6f:8a:69:34:5f:fd:fe:e4:6c:a7:
f9:10:17:d4:a3:4d:f7:4d:14:c8:8f:b6:c4:db:57:7c:68:51:
cc:0a:a9:28:6b:00:cf:79:66:51:26:58:f1:4c:80:6d:47:e5:
d7:2a:9b:2a:ca:da:cf:f8:ec:a3:85:6f:62:c4:ad:bc:97:fc:
0f:45:34:4c:13:ad:a0:af:46:25:3b:c8:51:d7:36:65:db:ed:
94:75:31:90:98:62:5e:4d:fc:99:aa:fe:3b:44:bc:ff:32:46:
cd:5d:e0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:54 2024 by rpki-client on console-fra.rpki-client.org