Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/0K5qfrVzBrMnKACbtik1DFwLxRw.roa
File: 0K5qfrVzBrMnKACbtik1DFwLxRw.roa (raw, json)
Hash identifier: l4+dhtz+VnbsbuyiuKgGE4aA7s2Bahrhi+3pE+mkqiE=
Subject key identifier: D0:AE:6A:7E:B5:73:06:B3:27:28:00:9B:B6:29:35:0C:5C:0B:C5:1C
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 018B24FB11A2B95403DCBF0C68C29FD48CBD
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/0K5qfrVzBrMnKACbtik1DFwLxRw.roa
Signing time: Thu 12 Oct 2023 17:41:55 +0000
ROA not before: Thu 12 Oct 2023 17:41:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.140.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Oct 2023 19:17:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:24:fb:11:a2:b9:54:03:dc:bf:0c:68:c2:9f:d4:8c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Oct 12 17:41:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0ae6a7eb57306b32728009bb629350c5c0bc51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:bd:21:e6:05:c9:b7:b8:ef:9b:38:75:c4:
f1:01:0c:b6:93:4d:29:89:54:15:7b:87:c3:68:be:
0b:7a:ef:4f:9a:1d:b7:af:c8:04:75:14:fd:e2:49:
a2:df:47:05:61:1b:30:ac:be:8e:6c:f7:da:29:1b:
ed:ed:84:19:23:91:b9:e7:08:4f:cf:c4:84:e4:8a:
ba:6f:85:72:49:57:e9:0c:29:34:85:07:f1:7f:42:
82:a5:4c:e3:75:56:a6:6c:d7:25:fb:09:06:6d:94:
e0:ec:e7:45:ce:a3:35:31:e0:b9:97:3b:95:1f:cb:
d6:4d:a9:01:f3:f8:35:27:42:cd:4f:2c:ef:05:4a:
d8:05:06:f7:a8:86:52:17:6d:b8:cb:52:0c:8a:da:
f0:3b:2b:79:76:83:b9:ff:ed:53:c6:15:8b:15:1d:
a5:bb:cc:22:ac:b9:d9:72:66:d4:8a:da:ea:77:b1:
d4:69:bd:f1:15:4c:20:54:ee:24:5a:8a:73:2b:31:
41:45:f1:83:99:5d:04:e5:77:47:76:d2:29:12:f8:
8e:7b:6d:90:ec:d8:e1:9f:63:5b:e8:05:ff:e5:6d:
2a:a0:52:cb:74:b8:56:f2:b5:6e:ba:71:ef:c8:a0:
f8:b2:db:82:bc:17:57:83:74:be:66:4f:70:04:ec:
cf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AE:6A:7E:B5:73:06:B3:27:28:00:9B:B6:29:35:0C:5C:0B:C5:1C
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/0K5qfrVzBrMnKACbtik1DFwLxRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.195.0/24
Signature Algorithm: sha256WithRSAEncryption
15:a1:91:81:76:81:a4:50:8b:c8:07:6b:25:4e:2a:9d:9c:3a:
e0:b9:26:9c:d6:f3:fc:b7:9a:03:b1:6c:61:8a:d6:3b:1b:11:
f6:7a:db:a3:6e:da:ae:6e:77:dd:08:d8:a6:ae:e4:0e:62:95:
03:0b:2b:d2:8a:58:a9:39:81:6a:df:96:01:2e:4b:4b:52:09:
61:4e:36:f3:cb:79:60:b8:2d:a9:73:58:24:19:fe:ff:8b:a2:
36:43:52:61:2e:97:26:a1:26:08:7e:8c:9f:a8:84:bb:7c:9c:
46:b5:9f:c9:51:c5:83:89:e3:21:f0:cc:71:96:7d:a4:7a:3b:
42:39:93:1b:73:9e:66:04:1e:0c:d5:38:72:3c:4b:e9:22:f6:
90:ad:35:ea:55:17:8a:92:06:97:aa:24:55:a6:a8:44:d0:fe:
f5:5c:41:98:38:86:1c:e2:4b:60:99:31:c5:e0:23:b0:a0:32:
30:70:e9:67:fe:5d:8e:aa:30:43:ef:8b:84:59:8c:a6:b2:56:
98:69:72:46:22:cc:71:b0:ff:0d:f5:14:26:31:f1:6a:ce:f5:
0e:2c:33:c7:a9:76:8a:56:c1:6e:5d:84:11:ad:92:ee:f7:64:
44:1e:4c:2a:b4:6b:9f:f9:2e:fa:81:3b:54:a0:3a:ba:23:da:
57:5d:b8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:56 2024 by rpki-client on console-fra.rpki-client.org