Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/Ku5aKt-QWprXZNbvivJHDs7FbkU.roa
File: Ku5aKt-QWprXZNbvivJHDs7FbkU.roa (raw, json)
Hash identifier: bjgtTOghol9hXcz0Qt+Sv6dpwgNlxjAvPAzliNvOb+o=
Subject key identifier: 2A:EE:5A:2A:DF:90:5A:9A:D7:64:D6:EF:8A:F2:47:0E:CE:C5:6E:45
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 01896499DA6E276F31FF9A4A57B7B8ED17A0
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/Ku5aKt-QWprXZNbvivJHDs7FbkU.roa
Signing time: Mon 17 Jul 2023 16:05:51 +0000
ROA not before: Mon 17 Jul 2023 16:05:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 45.82.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:99:da:6e:27:6f:31:ff:9a:4a:57:b7:b8:ed:17:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Jul 17 16:05:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2aee5a2adf905a9ad764d6ef8af2470ecec56e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5b:3c:0f:46:13:f2:c6:b1:33:fc:8f:ed:f8:
0a:1e:4e:f7:18:32:73:07:04:56:57:17:a4:39:85:
d6:11:94:ab:99:c9:4f:48:4a:5f:9a:95:09:c5:87:
e3:4a:c9:c4:51:28:47:cf:35:c4:54:aa:f7:30:07:
b8:fe:31:bb:bd:f7:59:d0:35:69:fb:e8:72:85:de:
26:2b:6d:97:fb:4b:8e:b9:6c:3e:cd:7d:bc:88:96:
51:fa:3b:74:bc:b1:6c:d8:2a:d8:90:8f:73:60:16:
a4:04:df:84:f0:16:43:5e:03:ad:3e:d9:8c:31:6b:
b1:36:d4:21:eb:a7:a6:9f:e5:54:97:b7:00:59:2f:
ad:e4:4e:35:0c:fa:6f:00:ab:0b:34:ef:d5:51:74:
65:02:19:c0:0d:74:40:0a:84:6a:b2:6e:7f:58:e7:
1b:43:3f:c1:1f:b6:f6:5b:7c:ce:ed:6d:d6:a9:d4:
47:f6:7d:bc:34:1f:e9:33:30:fd:92:8b:ec:22:9e:
79:42:22:8d:5e:d2:98:c3:32:0f:5c:45:a0:6b:c2:
36:f4:dc:d6:a7:66:41:0d:bd:c9:47:c8:1b:77:7f:
4d:94:72:7f:5c:21:99:4d:20:05:16:49:9f:89:06:
58:36:7b:47:69:c2:c5:56:be:4d:d3:b2:1a:bc:cb:
6b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EE:5A:2A:DF:90:5A:9A:D7:64:D6:EF:8A:F2:47:0E:CE:C5:6E:45
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/Ku5aKt-QWprXZNbvivJHDs7FbkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.81.0/24
Signature Algorithm: sha256WithRSAEncryption
29:11:11:ee:11:e2:ab:ae:fd:f1:21:8a:11:65:5c:34:36:c9:
f8:66:36:c8:20:94:0d:6f:19:50:df:fd:0f:b2:62:f2:a9:04:
eb:5c:84:c7:69:64:c9:2e:ba:69:2e:7b:af:e7:f6:81:84:44:
f9:a8:8e:bc:50:2f:77:b6:dd:8b:07:60:4f:11:d8:6c:23:fd:
99:0d:ed:7c:47:97:de:5f:b6:e6:26:a9:9e:29:e8:ec:de:44:
2b:bd:1f:2f:c3:95:bd:30:07:a5:95:57:b8:71:5e:df:f0:29:
af:43:15:23:33:9a:bd:d7:71:e3:ae:4c:aa:f1:99:ee:4c:a3:
17:cb:ef:82:4b:33:3d:4a:13:29:f5:d3:00:c1:08:07:4a:01:
82:a8:b8:4a:ec:f1:e1:92:d0:ae:76:df:8b:fd:0a:e2:ec:93:
16:66:3a:fb:e9:19:64:d6:17:b8:dd:9d:64:62:e3:6b:bf:19:
c8:e2:59:ba:17:54:3a:2c:54:ee:59:f5:1e:b5:ba:04:da:25:
05:45:51:15:98:4c:1a:6b:c9:67:a2:7b:a4:22:28:ca:1a:25:
d4:64:b7:0c:65:92:53:6e:14:b4:59:8e:7d:38:a5:cc:88:c3:
c6:ea:8e:ba:3a:5e:87:e6:2e:a9:95:ef:ec:6d:3a:49:b9:02:
7e:a9:81:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:12 2024 by rpki-client on console-ams.rpki-client.org