Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/vq00VWVHSeJT0C9ropc-tsgc2_Q.roa
File: vq00VWVHSeJT0C9ropc-tsgc2_Q.roa (raw, json)
Hash identifier: 2rgkMIYf0BnzAQETQZrTdgBWeQxrEIDZtuIVwZxYZqI=
Subject key identifier: BE:AD:34:55:65:47:49:E2:53:D0:2F:6B:A2:97:3E:B6:C8:1C:DB:F4
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FA10EB2CA4AF4A026B280BD5778FF
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/vq00VWVHSeJT0C9ropc-tsgc2_Q.roa
Signing time: Tue 02 Jan 2024 04:30:08 +0000
ROA not before: Tue 02 Jan 2024 04:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8038
IP address blocks: 45.95.240.0/24 maxlen: 24
45.130.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 16:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:a1:0e:b2:ca:4a:f4:a0:26:b2:80:bd:57:78:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bead3455654749e253d02f6ba2973eb6c81cdbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c9:94:9c:e0:de:28:67:b7:44:1f:54:a3:d5:
92:13:6c:3f:74:ae:92:cb:04:b0:6c:ab:67:94:77:
9d:35:54:6e:bb:1b:a9:c8:18:66:d3:dc:8b:b4:f1:
23:39:74:bf:84:f1:64:fd:ed:60:4c:b7:e1:69:f2:
25:cf:b6:c1:21:a7:cf:20:12:f5:21:db:be:2a:b3:
81:e5:51:9e:a4:c7:16:96:6f:d5:2c:cb:27:44:ca:
11:bb:dd:f8:eb:11:64:2a:28:5c:9b:89:09:63:7f:
48:a0:48:cb:22:37:9a:36:c2:7d:b5:e0:97:18:0c:
49:d7:c6:61:27:e2:f4:79:ac:5a:a4:8b:2d:40:40:
b4:fd:fa:f8:dd:9c:0a:6d:12:15:90:1a:1c:57:39:
7b:07:82:5d:35:a3:0c:61:f3:87:99:27:4d:39:b3:
b9:b8:86:8d:04:b5:b5:2b:fc:67:d2:fc:6e:f2:e2:
48:f3:11:9d:01:ad:df:c4:44:6e:a3:03:91:4a:b6:
3f:80:2e:aa:3a:83:8c:c6:63:7a:28:2d:0f:ad:a4:
ca:66:01:4f:65:62:56:60:05:8e:44:56:f6:f5:96:
f3:fd:a6:61:9b:15:3f:44:d1:52:63:37:87:3b:b1:
70:62:4b:05:1a:7c:9d:33:b3:c6:95:fe:a4:74:9b:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AD:34:55:65:47:49:E2:53:D0:2F:6B:A2:97:3E:B6:C8:1C:DB:F4
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/vq00VWVHSeJT0C9ropc-tsgc2_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.240.0/24
45.130.142.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:8a:21:0a:b0:f6:dc:ea:4b:be:f3:04:62:99:09:b6:82:81:
84:91:66:67:49:9a:8f:3c:d7:2a:f1:62:25:44:33:23:34:ff:
27:04:08:17:fe:70:80:28:db:49:1a:69:3c:cc:6b:59:a8:78:
a5:df:81:2a:c7:08:a5:3e:20:1b:12:14:77:98:a7:df:99:b2:
5a:15:8f:16:c3:dc:f8:0c:fa:f6:38:c6:d9:2e:ed:89:2f:01:
05:bb:27:74:42:83:ca:9a:b4:64:61:bd:8d:6c:b0:22:4e:a8:
e2:9a:97:78:1b:d2:67:6a:3d:76:b6:45:67:c9:47:4f:fe:0a:
39:ad:51:b4:57:04:fd:4d:03:77:bc:53:79:ef:26:4e:73:2d:
1d:25:91:ed:f2:10:8a:3d:c6:d9:92:cd:4e:a9:ec:af:d5:fc:
61:60:09:83:4d:b5:c7:b3:e1:47:29:3b:1e:b6:84:8e:b5:91:
90:cc:38:84:7c:bf:3b:40:06:72:a5:58:30:3a:02:c8:39:a8:
96:50:c9:8d:1d:e6:ac:be:1e:2f:d0:44:2d:36:88:6e:5f:11:
32:7c:a8:cf:bf:ad:dc:a2:1f:1f:5b:58:56:21:83:bf:2d:1c:
d6:b7:3c:0a:47:30:54:cb:ac:97:9c:2c:a8:29:ff:18:81:ca:
54:2c:96:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 20:33:56 2024 by rpki-client on console-fra.rpki-client.org