Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/4oUBJwjH_MGc4U9ZzshopHh_CLA.roa
File: 4oUBJwjH_MGc4U9ZzshopHh_CLA.roa (raw, json)
Hash identifier: P1gs+xFRNuZaxaYKzr20yavnHb2Yjv5jdL3BcbrxMJQ=
Subject key identifier: E2:85:01:27:08:C7:FC:C1:9C:E1:4F:59:CE:C8:68:A4:78:7F:08:B0
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 0188542E1014AC311B641186F7591093383D
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/4oUBJwjH_MGc4U9ZzshopHh_CLA.roa
Signing time: Thu 25 May 2023 18:31:24 +0000
ROA not before: Thu 25 May 2023 18:31:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202656
IP address blocks: 45.82.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:54:2e:10:14:ac:31:1b:64:11:86:f7:59:10:93:38:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: May 25 18:31:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e285012708c7fcc19ce14f59cec868a4787f08b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:77:c8:a3:b8:3f:b4:70:c7:f6:ff:c6:51:5f:
d1:c7:5d:fe:2a:74:7c:cf:45:fd:d2:25:49:d1:d0:
84:8f:ed:c7:db:27:e3:8d:76:1c:e1:c4:09:0b:ab:
cb:e0:98:f1:e5:63:4a:b0:fc:e5:21:90:c9:49:fb:
5d:8e:cd:2c:88:da:96:4d:7d:85:73:3c:94:76:23:
d1:7d:1e:b5:6c:a0:a0:bd:5f:3d:7d:cd:5e:bc:fb:
41:5a:12:d8:47:a9:7a:5e:83:f4:4a:2a:a6:12:d9:
b3:bf:b8:2c:14:61:2d:e6:1d:b1:3f:e8:82:5a:54:
30:fd:81:7d:ab:e4:3a:cd:6a:a7:76:9f:e8:89:0d:
73:32:72:81:2f:2f:8a:3d:ce:f2:76:2b:7c:aa:f9:
bf:d0:eb:ca:ea:26:2e:f2:c3:1f:12:d4:93:0e:da:
de:4b:26:31:a6:46:ff:20:cb:c8:38:ce:4a:61:6c:
5b:05:75:0f:d8:82:c3:f6:54:a2:e6:ef:a4:7d:34:
6c:22:22:96:95:11:bb:9a:c4:08:54:6c:04:c3:50:
22:72:66:2c:96:f7:0d:ac:3f:1c:1f:37:24:30:92:
b5:a2:b1:7f:c0:10:fc:48:3b:4a:76:1b:d7:d4:89:
29:61:c2:40:5d:73:cc:35:07:05:1a:5e:1a:53:5b:
0f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:85:01:27:08:C7:FC:C1:9C:E1:4F:59:CE:C8:68:A4:78:7F:08:B0
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/4oUBJwjH_MGc4U9ZzshopHh_CLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.83.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f2:67:89:ef:d3:d8:06:11:88:4a:a9:aa:68:7e:45:5d:6a:
70:e2:a9:52:16:e7:ac:c7:6b:b2:b0:77:c2:d4:19:5d:6c:81:
33:02:32:14:fe:57:df:a7:d5:fc:b1:ed:60:82:43:96:d9:44:
fb:b6:86:f9:56:73:97:ff:a3:5d:4f:b8:6e:1f:c0:bf:b9:73:
fb:03:a2:2b:6c:fa:b2:ec:b3:56:8c:c2:df:e1:3d:c0:5e:58:
fe:52:c4:98:0a:e1:a1:17:7d:ac:51:d6:73:c0:06:a2:28:cf:
4d:03:85:a8:92:65:c7:21:0c:76:cc:66:01:d5:78:c9:e6:5b:
c2:cb:09:b3:ba:75:4b:bf:0b:c2:cb:a4:a2:82:49:4f:1d:04:
e9:e5:b6:d4:90:70:ef:a8:0b:32:93:74:45:35:36:9c:9d:d9:
b6:ac:19:30:39:ec:90:d0:6e:4d:3e:ab:f1:89:28:73:95:b0:
5c:7d:c0:5a:d4:41:9c:00:94:be:dc:ee:59:c3:e8:2c:c7:b8:
8c:2d:1f:ea:40:a3:06:60:af:71:33:10:f6:b0:95:21:7c:50:
5e:1c:53:19:c8:b8:07:8b:69:aa:d0:ce:65:be:55:c9:56:7f:
13:37:eb:8f:fa:b5:16:01:85:dc:ec:5b:b2:15:b5:d5:9b:57:
1c:d6:8f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:06 2024 by rpki-client on console-fra.rpki-client.org