Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/8HCTFxlbJCHP9U8GjkQybJSg_DI.roa
File: 8HCTFxlbJCHP9U8GjkQybJSg_DI.roa (raw, json)
Hash identifier: +6MvDTg/QD/KsT0obJZj62/awhw7HtPuBBQ8XPO3RVo=
Subject key identifier: F0:70:93:17:19:5B:24:21:CF:F5:4F:06:8E:44:32:6C:94:A0:FC:32
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01874C8BAB531B90DBC246442DBE22DBFDF9
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/8HCTFxlbJCHP9U8GjkQybJSg_DI.roa
Signing time: Tue 04 Apr 2023 13:53:54 +0000
ROA not before: Tue 04 Apr 2023 13:53:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 45.133.156.0/23 maxlen: 24
45.133.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 May 2023 09:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4c:8b:ab:53:1b:90:db:c2:46:44:2d:be:22:db:fd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Apr 4 13:53:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0709317195b2421cff54f068e44326c94a0fc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:66:2d:d4:1e:9f:fd:c6:5c:34:e3:bf:28:
32:b2:07:df:1e:2b:6e:d8:c9:0f:3d:a9:9c:dd:2c:
af:5a:e3:4b:51:b0:d5:cc:35:b4:a8:94:06:e6:52:
b9:ea:60:97:c1:f4:dd:85:5f:50:6a:54:a5:55:52:
e9:52:52:fc:d8:63:08:ca:90:0e:ac:11:0a:6f:9d:
b2:37:05:d6:08:77:99:9a:96:51:fa:fb:f3:65:a3:
f8:42:c8:ab:e5:4f:73:35:b6:e2:19:e6:5b:b0:c3:
f3:fb:22:e7:60:31:a9:65:36:b0:b6:1e:25:32:77:
e2:d1:e5:ad:61:a0:2a:e5:1e:a6:00:0f:33:c9:c8:
24:36:ea:64:07:07:3a:70:86:73:4f:15:2f:19:43:
e0:d9:00:de:6a:d3:7b:e0:db:7b:db:7d:55:a2:e0:
b3:7e:50:12:ed:9d:56:49:eb:c1:a3:88:f9:bc:0d:
be:fc:da:53:ed:d6:80:72:13:b0:7b:5a:88:12:c1:
2e:92:ea:d0:83:68:bb:62:40:fc:e8:c2:b6:19:1d:
ac:4d:9b:6f:6b:5a:88:ea:8e:a1:2f:c5:21:0a:9f:
c1:1f:97:50:eb:75:f7:24:4f:87:88:93:92:3c:7d:
64:19:7a:b8:d2:1c:a6:b1:d9:eb:59:5a:95:ba:b2:
a7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:70:93:17:19:5B:24:21:CF:F5:4F:06:8E:44:32:6C:94:A0:FC:32
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/8HCTFxlbJCHP9U8GjkQybJSg_DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.156.0/23
Signature Algorithm: sha256WithRSAEncryption
af:6d:c4:4f:84:52:e6:07:e9:6b:62:e8:fc:9c:f9:f0:71:00:
81:ba:a9:4b:d9:07:df:4c:64:8d:a8:78:18:f9:d8:10:34:a6:
a0:f7:34:76:30:e1:c9:7a:69:56:d9:b2:1f:cc:07:d7:97:86:
6d:00:07:09:af:3e:cc:a2:69:aa:bc:fd:09:e3:a2:2c:33:aa:
35:1f:33:77:6c:1f:ad:36:79:c0:9d:df:51:5a:6d:fb:f7:b5:
75:e5:d1:d6:46:bd:54:5d:a9:59:5a:fc:6c:5a:a6:c0:e0:86:
34:6f:85:d0:c0:db:2a:40:01:ca:62:e4:33:17:8d:1d:63:f7:
e8:a2:e0:c2:06:04:90:98:c2:24:bf:3d:43:c5:21:33:a2:ba:
54:45:e6:f9:d0:d6:6d:00:69:0a:21:d2:84:7c:ba:ae:77:2a:
d1:2f:f0:43:ff:e3:65:6a:fa:65:8d:9a:a2:c7:be:c3:b8:c4:
b7:bc:b8:17:62:b1:63:81:fa:87:27:b3:12:99:88:85:cf:61:
88:36:6a:c0:63:a3:d6:3f:38:17:f1:bb:0a:12:ac:83:21:d9:
cd:35:6c:47:4b:11:dd:11:f8:a9:6f:67:c9:e3:76:eb:8b:a6:
fd:68:8a:22:6b:70:8f:1f:7e:0e:d1:f5:f1:23:5e:32:86:26:
4e:5d:53:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org