Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/jhK-tFv9aDUmqfMIKgtJxSmAQLI.roa
File: jhK-tFv9aDUmqfMIKgtJxSmAQLI.roa (raw, json)
Hash identifier: pJU/yx0mQ5q6kFI8X4xmcIPLdxdSWG4vWY1T2kPvdUA=
Subject key identifier: 8E:12:BE:B4:5B:FD:68:35:26:A9:F3:08:2A:0B:49:C5:29:80:40:B2
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 018DF788CAD212882202FD61F2C56DCC8E3C
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/jhK-tFv9aDUmqfMIKgtJxSmAQLI.roa
Signing time: Fri 01 Mar 2024 01:02:33 +0000
ROA not before: Fri 01 Mar 2024 01:02:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.140.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 19:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f7:88:ca:d2:12:88:22:02:fd:61:f2:c5:6d:cc:8e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Mar 1 01:02:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e12beb45bfd683526a9f3082a0b49c5298040b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:79:50:d3:2e:6b:5e:84:dc:2a:23:2d:40:
91:53:00:9f:f5:de:8f:64:d5:ba:a8:40:36:4e:64:
92:1a:44:38:37:d0:90:e6:50:21:c6:03:48:51:8d:
86:d1:b5:73:9f:6b:1a:0b:95:04:42:d2:94:06:a8:
d3:a7:75:58:06:d7:0e:1c:25:d5:61:52:be:f8:87:
22:b1:fa:77:d5:c6:19:c8:19:2f:86:01:eb:d3:cb:
eb:48:0d:1d:c6:05:f8:81:33:7a:e3:09:c9:c3:9b:
eb:15:60:06:af:a7:d8:f6:a3:ac:f5:1a:d4:38:44:
3a:04:5c:bf:0b:a0:d6:cf:db:6d:b7:b1:30:7f:b2:
cc:a7:98:f3:b2:7f:b2:b3:f8:ec:27:7a:22:35:64:
36:86:e0:d5:48:19:9b:31:c6:86:4b:5e:16:b2:6f:
56:c7:fc:43:7d:c2:96:d1:3f:6f:d6:1b:c5:1b:62:
e0:d0:24:ac:95:f4:6d:a1:b5:a7:e3:ce:f2:d9:84:
c6:ac:a4:e8:34:04:83:24:a4:c7:eb:57:fc:dc:d1:
08:06:50:b4:0f:13:88:aa:f5:e4:9b:a5:7c:8b:4e:
4e:fc:cf:af:1b:c4:c0:68:8a:a9:e8:71:9b:af:07:
d0:30:76:d2:d9:10:1a:e3:e5:b8:c3:4e:42:e9:ba:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:12:BE:B4:5B:FD:68:35:26:A9:F3:08:2A:0B:49:C5:29:80:40:B2
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/jhK-tFv9aDUmqfMIKgtJxSmAQLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.195.0/24
Signature Algorithm: sha256WithRSAEncryption
26:09:15:ce:22:e3:0c:84:30:83:59:33:51:b2:26:f7:c8:6a:
e3:45:37:24:46:19:d0:c5:50:38:69:2a:a7:68:80:41:3c:92:
32:f8:22:a6:1d:26:db:4d:be:98:85:59:fe:cd:2d:50:3e:f6:
00:5f:af:0a:36:0c:5d:6a:67:9e:da:bc:32:73:45:83:a3:d7:
d2:7e:03:0d:58:97:cd:d9:15:df:51:08:27:bd:41:c5:a8:8d:
5d:d7:81:66:48:12:d3:7e:75:1a:f4:28:03:2e:5b:48:6e:d5:
2f:c7:a1:ea:b3:ec:66:77:ac:49:b0:73:14:ff:a2:c1:1d:fc:
62:93:15:28:c0:7d:b2:aa:7e:f5:0f:3e:76:cc:c6:94:01:60:
24:82:a7:4c:51:56:78:27:0e:ff:12:e5:80:99:bc:ee:02:90:
0f:59:18:e9:3e:c6:57:c4:da:5d:d0:6a:99:97:42:70:c8:65:
c7:fc:f2:15:15:b4:fa:f3:23:db:be:07:b3:f9:27:f3:d9:d7:
63:c4:85:11:fd:2a:5a:7c:2c:74:ce:1f:ba:24:32:88:43:1f:
5d:d2:9e:f3:2b:ac:3b:77:e3:a6:21:68:f0:2c:8e:c1:8f:62:
96:51:3e:2d:8a:ea:5b:aa:77:0e:17:91:9a:f5:56:fa:3b:ea:
19:a0:bb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:56 2024 by rpki-client on console-fra.rpki-client.org