Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/IytB9d_77oftJVVpl0rVUCEkSCg.roa
File: IytB9d_77oftJVVpl0rVUCEkSCg.roa (raw, json)
Hash identifier: QEqrC90NlGBCoSbVKbV9qO/Zmc5FZ8aJPux1dd7ivSU=
Subject key identifier: 23:2B:41:F5:DF:FB:EE:87:ED:25:55:69:97:4A:D5:50:21:24:48:28
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 0185879F9921034DD92C7FFFD4192445030F
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/IytB9d_77oftJVVpl0rVUCEkSCg.roa
Signing time: Fri 06 Jan 2023 15:07:41 +0000
ROA not before: Fri 06 Jan 2023 15:07:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49020
IP address blocks: 45.142.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:87:9f:99:21:03:4d:d9:2c:7f:ff:d4:19:24:45:03:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Jan 6 15:07:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=232b41f5dffbee87ed255569974ad55021244828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4e:45:c9:5a:5c:a2:9c:66:e2:9d:ce:17:62:
89:dd:a4:28:85:df:25:87:0e:59:60:84:4a:69:a8:
56:b8:51:48:a1:dc:f2:4f:c9:08:bc:45:c0:f0:2c:
b3:dc:a9:04:a6:e6:a9:1d:62:62:3f:4e:7e:fb:09:
06:99:4a:2d:49:d9:08:5a:1e:86:90:42:05:85:e8:
62:53:c3:a7:22:b7:63:ba:2d:8a:51:a1:82:52:a3:
98:12:e4:5b:ac:16:ac:8a:3d:40:e7:36:31:22:3a:
93:99:42:51:75:d7:e3:29:1c:e8:85:c4:f2:5c:b3:
ef:68:c7:e3:d2:de:86:80:53:d5:9c:cf:88:39:ca:
a4:b1:8c:f1:d9:55:34:6c:f1:4a:b0:3f:03:80:df:
54:e7:8d:da:db:ea:fa:07:ad:fd:dc:4f:e2:b6:99:
96:ed:dd:f1:32:f9:8f:04:62:78:56:08:70:59:69:
dd:82:c9:f0:1a:d6:da:97:bb:fe:cd:95:32:47:84:
84:02:73:8a:45:e9:9e:e0:3f:b0:ab:40:dd:a0:0c:
97:b2:65:f0:5f:da:5b:1f:19:f6:71:a2:db:25:4b:
a9:a8:70:15:c7:5d:b9:7f:26:8b:e2:2f:53:a2:e2:
ba:73:1b:2b:2d:98:9f:57:87:0d:82:65:40:a7:48:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2B:41:F5:DF:FB:EE:87:ED:25:55:69:97:4A:D5:50:21:24:48:28
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/IytB9d_77oftJVVpl0rVUCEkSCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.138.0/24
Signature Algorithm: sha256WithRSAEncryption
79:57:73:a2:c0:f7:7e:9d:b5:2c:ea:2a:0a:28:89:75:2c:95:
3f:72:b7:0b:8c:32:17:15:5b:33:86:84:ea:1c:2d:cb:ca:11:
df:a9:71:f1:10:56:17:ee:14:2f:bf:c1:9a:92:57:c3:4e:a1:
43:87:3d:c5:66:f9:ba:44:89:ee:3b:e9:8f:46:d8:6f:56:be:
b0:a8:9c:52:cb:23:9a:01:a0:2a:e1:db:06:e8:45:c9:f5:11:
a1:3f:ca:13:17:32:79:05:04:9e:03:7c:9e:98:e8:90:9b:9b:
ce:c0:e9:62:27:6d:58:9e:ca:65:1d:fd:43:69:91:3d:e1:71:
39:2a:b1:21:f4:c2:20:7d:6d:ba:85:7f:cb:41:68:e7:69:11:
7f:2d:4a:01:9f:ce:2d:4a:72:c6:e0:19:95:7b:8d:4f:4c:4b:
5d:32:ba:fb:89:18:07:5f:22:a3:e1:94:0f:74:eb:43:44:6a:
ad:66:79:32:1b:31:60:7c:f2:d4:12:97:85:94:f4:6d:e0:fc:
46:c1:f5:dc:19:4c:b7:47:9c:1c:a4:fb:32:80:5a:3c:52:6f:
d5:8d:0b:13:6e:df:ab:1e:18:95:b5:f8:e4:1a:bc:e4:a1:0d:
d3:66:a0:81:66:f9:63:b5:2c:18:d7:98:1b:ac:b2:9a:65:5b:
1a:fa:d5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:14 2024 by rpki-client on console-fra.rpki-client.org