Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/5ZSxRDxoD8lUG1fC8S_tOx9OFd4.roa
File: 5ZSxRDxoD8lUG1fC8S_tOx9OFd4.roa (raw, json)
Hash identifier: 5PY5NhhKTva3g6aNYt/HNjB8PMElb7gJ0VPVqEXeWF4=
Subject key identifier: E5:94:B1:44:3C:68:0F:C9:54:1B:57:C2:F1:2F:ED:3B:1F:4E:15:DE
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 018AB608619A853D747AD08585C966547711
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/5ZSxRDxoD8lUG1fC8S_tOx9OFd4.roa
Signing time: Thu 21 Sep 2023 04:38:37 +0000
ROA not before: Thu 21 Sep 2023 04:38:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3249
IP address blocks: 45.139.107.0/24 maxlen: 24
2a13:cec0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 21 Sep 2023 05:18:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:08:61:9a:85:3d:74:7a:d0:85:85:c9:66:54:77:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: Sep 21 04:38:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e594b1443c680fc9541b57c2f12fed3b1f4e15de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:83:28:cc:ef:85:27:35:55:42:71:46:ba:8a:
8e:d3:b2:e2:44:b6:2f:f5:52:c6:e2:31:9b:0b:4c:
a3:ef:c8:83:64:82:ab:dc:1b:f5:60:5b:ef:a4:44:
6a:9c:9b:50:ca:a7:65:d0:19:1e:cd:30:4f:e6:6b:
e7:04:8b:50:a2:7d:5e:70:e3:0f:86:d8:c9:97:6c:
13:a2:dc:e5:08:13:70:76:98:e1:cc:a1:73:99:2d:
bb:0d:09:1d:8b:ce:a5:46:a9:33:4f:03:04:5d:a3:
18:13:75:de:b2:ab:5a:fd:25:a9:a0:cd:dd:ef:4e:
c2:b8:99:db:d1:2c:7f:d0:aa:94:56:05:2c:6f:94:
0e:e9:50:3d:4c:a3:0c:52:bf:3e:8e:37:ad:c6:fb:
ce:0a:ea:e5:8d:61:d0:49:f0:d2:26:31:ee:f9:06:
0f:c2:f9:42:2b:6b:50:20:a9:0a:74:bd:a9:3c:ec:
41:9c:d5:b4:48:fa:37:fe:d1:76:b8:9b:f6:4d:a8:
e6:7f:45:5a:31:3e:31:87:d2:15:af:74:66:9a:80:
b4:32:5c:59:81:4f:00:6f:6b:29:21:73:a1:55:88:
13:6e:83:0c:1b:85:1e:59:92:64:ee:cd:69:98:68:
fc:50:75:a9:2e:46:9c:f1:04:97:22:ff:17:70:19:
53:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:94:B1:44:3C:68:0F:C9:54:1B:57:C2:F1:2F:ED:3B:1F:4E:15:DE
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/5ZSxRDxoD8lUG1fC8S_tOx9OFd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.107.0/24
IPv6:
2a13:cec0::/29
Signature Algorithm: sha256WithRSAEncryption
81:b1:46:60:6b:02:97:9a:a7:52:bb:d0:ca:30:cf:24:25:dc:
01:6a:a0:f0:61:84:7c:8f:08:fc:93:41:43:b9:64:c4:97:00:
9f:49:a7:4e:1c:88:ec:fc:4a:65:83:6c:4b:1f:dc:f5:46:a2:
6d:bf:76:e6:bf:22:67:67:84:a2:37:d1:44:aa:34:02:7b:3b:
13:2f:fd:23:77:95:bf:34:a6:5e:9d:3b:45:37:59:23:d6:66:
73:c3:dd:85:8a:1e:af:75:e4:6c:d1:b5:71:32:05:d0:94:4a:
10:0d:1b:c6:de:3e:29:98:d0:64:3f:0d:56:eb:cb:da:b6:e2:
d4:f0:b4:9a:4a:b4:3f:4a:86:7e:5f:d4:e3:3c:b3:52:09:79:
3e:15:e8:44:ab:89:a5:da:78:30:67:fa:58:12:dd:42:e8:78:
9e:80:f2:56:9d:64:63:60:b2:1e:ec:94:dc:a9:a0:8b:30:10:
58:59:b0:10:c1:0e:cd:35:d4:54:f5:aa:66:3b:37:b5:30:e3:
a6:60:0f:6f:28:a3:b1:46:a2:71:98:ef:4e:11:a4:a7:75:e8:
d4:a8:76:30:9d:78:5d:60:bf:29:08:6d:42:a0:7e:f0:a6:37:
44:c0:c5:db:6d:62:66:d4:1b:1b:4a:f3:d3:ed:b7:f1:76:77:
72:2e:fa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:58 2024 by rpki-client on console-ams.rpki-client.org