Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/nwOZwGq5bAe3-XEACORfOiIPSk0.roa
File: nwOZwGq5bAe3-XEACORfOiIPSk0.roa (raw, json)
Hash identifier: cO5GkYuhoHJXdMUh8oSMlqyD1/MRD3rBlNEvJxbG/tQ=
Subject key identifier: 9F:03:99:C0:6A:B9:6C:07:B7:F9:71:00:08:E4:5F:3A:22:0F:4A:4D
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01882908ABCCF87A5639F46FB50C8A38D82D
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/nwOZwGq5bAe3-XEACORfOiIPSk0.roa
Signing time: Wed 17 May 2023 09:26:54 +0000
ROA not before: Wed 17 May 2023 09:26:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 45.133.156.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:08:ab:cc:f8:7a:56:39:f4:6f:b5:0c:8a:38:d8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: May 17 09:26:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f0399c06ab96c07b7f9710008e45f3a220f4a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:10:7e:1a:05:ea:77:79:2b:98:8c:dd:57:
bc:7b:0e:78:d0:32:df:91:59:ae:66:c9:59:f3:39:
e9:d9:16:32:19:a6:42:0b:1a:b1:78:1d:53:65:81:
b7:ca:ba:7d:b4:3c:29:f7:11:2f:6e:5b:39:c3:60:
34:a6:da:3b:2b:7d:96:8c:72:d9:11:90:61:a5:85:
64:4c:7f:91:8b:63:10:16:49:b4:07:8c:2f:b5:af:
64:5d:23:84:2f:b6:b2:05:80:c8:f6:4d:1b:e3:8f:
f0:9b:6a:40:13:f9:d0:36:f3:54:aa:c7:c6:bb:cc:
57:6f:2e:c3:1a:ce:bc:16:d9:5f:36:10:35:75:cc:
ee:c1:b7:ee:5d:8f:1f:1e:96:4e:72:a7:8b:1f:83:
e8:63:d5:c3:3a:64:c6:de:88:00:2d:c4:8b:24:68:
d6:c5:16:ff:08:70:07:54:50:87:c3:1b:19:3f:4e:
7c:54:42:8f:b5:90:92:26:ee:89:44:fc:38:fb:b1:
9b:ae:08:ee:80:27:0d:2d:91:4b:5d:ab:81:e1:9f:
29:ad:ef:fc:df:d9:93:be:38:be:57:ce:18:dc:39:
ce:8e:dd:98:98:a6:15:46:f8:36:2f:8d:7a:28:b2:
6c:6b:0c:38:0a:12:37:9e:5d:65:f2:cb:00:a8:31:
97:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:03:99:C0:6A:B9:6C:07:B7:F9:71:00:08:E4:5F:3A:22:0F:4A:4D
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/nwOZwGq5bAe3-XEACORfOiIPSk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.156.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:41:a9:4c:2a:a7:fc:f9:1a:77:b4:fc:31:b9:20:5f:7f:66:
b8:42:32:29:6f:30:a4:2c:a1:c7:69:15:a5:db:a9:a1:ae:12:
12:b6:80:f8:9f:99:93:13:ad:2e:22:e9:de:1a:7f:c9:21:21:
6e:56:2c:cd:ad:3c:df:27:bb:eb:11:93:f1:c6:1e:91:91:0b:
17:40:12:07:5b:00:09:de:59:88:fd:af:e3:55:13:94:6d:5b:
7b:df:ac:68:69:f9:4f:e5:31:9b:e5:24:94:73:2a:a2:22:01:
52:1f:9e:fb:8a:5d:bb:dd:73:44:88:79:b8:91:62:17:45:71:
31:c4:00:dc:ab:58:b0:62:f0:7f:cf:9a:a2:af:90:93:23:e1:
a8:90:bf:8e:d8:84:c6:a2:39:03:03:17:be:81:5f:10:c7:12:
ff:ca:79:20:62:ae:f6:05:c5:41:77:42:c9:55:3b:f0:aa:20:
0d:ae:62:95:6d:54:84:1d:cd:b0:b9:51:e3:b6:fa:83:68:ea:
14:f9:2a:c8:54:d7:ac:49:6f:bb:a6:6d:c3:2a:c5:ec:fe:29:
68:9b:df:63:95:ff:b8:d1:b9:29:e8:68:30:e1:5f:de:6d:ee:
63:9c:20:84:62:bb:2f:16:f2:64:5a:b6:e6:f9:0d:43:e1:69:
f8:d2:a1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org