Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/KOvAxFK0cxqBbbfk8Bu_ISOZZCk.roa
File: KOvAxFK0cxqBbbfk8Bu_ISOZZCk.roa (raw, json)
Hash identifier: 5XevshXhFbs4R8wM8quneId8rs141ayT5IuzaKgkpQ4=
Subject key identifier: 28:EB:C0:C4:52:B4:73:1A:81:6D:B7:E4:F0:1B:BF:21:23:99:64:29
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 018A49C6DF9B4B8FD40FD7183776A90BCDDF
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/KOvAxFK0cxqBbbfk8Bu_ISOZZCk.roa
Signing time: Thu 31 Aug 2023 04:08:04 +0000
ROA not before: Thu 31 Aug 2023 04:08:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.153.164.0/24 maxlen: 24
45.140.195.0/24 maxlen: 24
45.140.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 12:36:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:49:c6:df:9b:4b:8f:d4:0f:d7:18:37:76:a9:0b:cd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Aug 31 04:08:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28ebc0c452b4731a816db7e4f01bbf2123996429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:f4:07:dc:8b:66:ce:f7:b2:3d:3e:eb:b0:
bc:7c:5f:9e:e6:91:8b:99:e7:45:10:a9:84:00:ae:
43:a9:eb:6e:68:41:7d:1a:c8:f9:fa:ab:38:c7:9a:
cb:5b:e9:2f:7e:bc:67:d7:fc:11:17:59:9a:0a:b2:
29:86:bf:9f:bc:6e:b2:9b:f3:57:98:8e:4d:9f:6a:
af:f9:5d:b2:47:30:3a:78:e1:f2:c6:db:d3:50:7a:
c3:d0:0e:6f:a1:ad:b2:7b:1a:07:fc:f5:90:24:74:
dd:d6:b0:29:af:4a:d3:e2:01:14:5d:ed:45:87:18:
2e:dc:86:cf:f6:76:0f:ab:58:f6:4c:b9:2c:33:58:
46:da:24:c7:7d:77:15:44:00:87:f8:c2:86:d5:66:
db:7f:e2:b7:d6:19:cb:57:2b:3a:4c:51:e5:e2:7b:
16:33:58:07:e3:da:25:2f:98:03:ea:b4:3b:fb:e4:
0b:46:40:d8:c8:f5:72:40:39:76:68:49:d0:1e:80:
a9:43:ab:70:c3:32:ab:01:97:33:73:f8:81:fc:c6:
f6:84:84:be:6b:b5:af:40:14:8b:d8:83:53:17:ce:
8c:5f:f2:c0:f0:59:79:04:de:82:2f:f2:8d:71:5c:
29:ef:67:dd:36:3c:4f:5f:f0:b3:74:99:95:9b:66:
d4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EB:C0:C4:52:B4:73:1A:81:6D:B7:E4:F0:1B:BF:21:23:99:64:29
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/KOvAxFK0cxqBbbfk8Bu_ISOZZCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.194.0/23
45.153.164.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:27:cd:a9:b9:e3:1a:8c:10:33:06:c4:b2:73:40:2d:e1:2a:
4a:d7:6b:dd:94:45:80:21:aa:54:f6:22:66:84:65:0e:1d:14:
c5:31:6b:8b:fc:87:04:3b:dd:2d:e6:e1:cb:af:ef:5d:b9:ef:
66:5b:eb:5e:1a:04:06:bd:e5:6b:55:aa:f3:4c:35:b5:a4:f7:
22:b8:9c:e9:f2:5e:c1:a9:52:00:a7:d7:43:3a:63:b7:95:b4:
e1:59:54:6a:18:08:8e:ba:d3:a7:09:fe:6c:a3:4d:8a:05:83:
d8:90:66:3b:fe:70:1d:1a:45:98:b1:33:f2:53:33:84:8f:b0:
64:cb:67:55:41:ac:38:fa:f1:7e:1e:98:69:bd:18:87:56:ee:
a1:3a:dd:59:c0:b1:4b:60:9f:13:24:1d:81:82:83:dd:68:36:
65:0e:a1:3b:a5:a3:b9:9d:9b:fa:7f:4d:e0:2b:7d:7c:78:2a:
9a:0f:3c:ff:17:8c:7d:98:10:f0:d3:b8:cd:41:fd:4b:ef:c3:
fb:12:72:0c:0e:28:65:d1:5a:26:3a:f6:46:bf:ae:ae:c1:7b:
03:d8:81:ff:db:7c:2e:a8:0a:a3:dc:e2:ff:df:01:08:4b:3d:
2b:81:44:81:d0:7f:3f:22:99:ee:46:ef:6e:f7:84:07:9d:60:
dc:c2:14:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:56 2024 by rpki-client on console-fra.rpki-client.org