Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/eUhuwVakwuWVahCdDtNo8QK3gzw.roa
File: eUhuwVakwuWVahCdDtNo8QK3gzw.roa (raw, json)
Hash identifier: 4Rvv9zPE49fwXIYsqAc3+tspQjsxrUkT6sXJ2WDGtVI=
Subject key identifier: 79:48:6E:C1:56:A4:C2:E5:95:6A:10:9D:0E:D3:68:F1:02:B7:83:3C
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01867ACE2C38ABEE9553A5530A81B119EBD0
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/eUhuwVakwuWVahCdDtNo8QK3gzw.roa
Signing time: Wed 22 Feb 2023 20:26:17 +0000
ROA not before: Wed 22 Feb 2023 20:26:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 45.149.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Mar 2023 14:27:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:ce:2c:38:ab:ee:95:53:a5:53:0a:81:b1:19:eb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Feb 22 20:26:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79486ec156a4c2e5956a109d0ed368f102b7833c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c2:a0:b4:37:b3:37:b2:53:b6:e8:63:b0:4e:
78:6f:46:d2:1c:f9:f7:f6:aa:76:ba:77:3c:a7:6e:
b4:05:ea:e6:0a:97:9e:20:6d:b3:61:18:1b:7c:83:
af:90:3b:c8:d7:05:af:e9:f4:36:c3:09:fc:a6:24:
75:0a:c2:05:18:d2:78:64:b2:e0:b6:31:1f:90:b3:
3b:17:eb:28:de:99:69:79:38:32:51:47:4f:03:53:
d0:39:f2:0d:e8:58:64:1e:c5:52:f3:f2:b7:80:7d:
b7:67:29:46:fd:b1:38:c6:f6:9d:73:77:00:04:98:
b7:53:59:15:7a:e5:ba:e0:ae:de:4f:28:d1:77:e4:
fd:c8:82:8a:5c:4e:4f:6f:1f:44:29:bd:6a:c8:68:
5c:ca:f2:d4:a4:21:a8:9d:05:1e:9c:78:4e:b5:8c:
bb:04:06:b3:74:60:0c:d4:6a:39:bb:30:e7:96:c6:
01:d9:6b:37:17:06:85:f9:57:1c:30:38:2f:ae:ea:
41:f2:b5:be:92:93:af:97:16:7f:1c:71:6f:c6:ab:
4e:57:f6:6f:26:71:9b:52:97:58:cf:21:17:d6:73:
3a:2e:37:3d:fe:c6:67:6f:2b:10:1c:a8:8e:4a:3e:
72:db:5c:b1:d3:80:6b:31:44:49:1b:2a:f5:b0:30:
cc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:48:6E:C1:56:A4:C2:E5:95:6A:10:9D:0E:D3:68:F1:02:B7:83:3C
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/eUhuwVakwuWVahCdDtNo8QK3gzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.95.0/24
Signature Algorithm: sha256WithRSAEncryption
41:79:fe:51:e2:91:0a:93:bf:aa:9c:00:3f:49:79:96:cd:f0:
cf:15:71:25:da:f4:34:53:51:7c:de:0c:1e:32:95:a1:6b:2f:
56:bf:24:c6:4a:9c:82:b2:14:7d:6e:bb:d8:14:28:50:78:5a:
35:37:cd:f1:82:df:c9:57:82:68:70:74:3e:b9:d5:e6:8d:89:
31:48:52:e4:23:63:e1:4a:9c:d8:82:0a:71:d8:1c:e4:99:87:
93:c4:d9:8b:83:b8:74:d0:b1:cc:e7:cb:cc:ff:dc:83:59:f8:
f7:07:dd:1c:24:f2:1a:ff:63:1e:93:8f:c7:7a:98:e5:86:6a:
ba:d0:32:06:8c:4a:82:e5:a2:3c:eb:c5:6c:2b:d7:f1:ff:2f:
31:b6:84:b6:54:22:70:21:76:c7:91:d0:7f:54:bd:17:1f:0e:
53:99:8b:0b:51:19:fa:11:70:62:38:85:04:23:1a:e6:7e:69:
d7:d3:7e:7c:2f:09:02:4e:e1:f4:16:22:16:f8:ef:c0:72:8e:
2a:86:84:10:cb:18:41:55:ed:02:f6:d7:bf:41:27:7a:e3:f9:
69:b0:6b:44:98:aa:e4:e2:ea:9a:5d:42:f6:2c:8d:8e:91:52:
28:bf:b3:6c:2d:c2:16:c5:2d:89:14:bf:0b:44:f3:2f:c2:c5:
b6:38:92:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:31 2024 by rpki-client on console-ams.rpki-client.org