Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/JHD7gReYe4EHMVsC9iflNFvnLFU.roa
File: JHD7gReYe4EHMVsC9iflNFvnLFU.roa (raw, json)
Hash identifier: vyAulz5r7UD03lzGH+v+yqSfS0iGEuGNSIvES5zNzgE=
Subject key identifier: 24:70:FB:81:17:98:7B:81:07:31:5B:02:F6:27:E5:34:5B:E7:2C:55
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 01856D0AD9BDCD3D6E977744389D456A8E3D
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/JHD7gReYe4EHMVsC9iflNFvnLFU.roa
Signing time: Sun 01 Jan 2023 11:15:05 +0000
ROA not before: Sun 01 Jan 2023 11:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34549
IP address blocks: 45.156.44.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 07 Sep 2023 07:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:d9:bd:cd:3d:6e:97:77:44:38:9d:45:6a:8e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Jan 1 11:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2470fb8117987b8107315b02f627e5345be72c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:bb:29:ee:01:2a:cc:e3:d1:21:9b:12:ed:
5c:bf:b0:b1:74:b2:c3:9d:32:17:ab:a1:a6:72:93:
4e:fc:a1:a8:b0:2b:bc:cd:98:90:8a:c6:cb:7f:c9:
43:a5:b0:6a:f7:44:2b:07:4b:f1:d8:e5:fc:4b:0b:
91:1c:10:95:32:8f:20:af:8e:93:f5:68:67:2f:a5:
5c:f1:6c:e6:08:2d:f4:86:e4:16:0b:a9:7d:88:59:
82:c2:3d:bd:a4:52:c4:69:0f:bc:8a:c7:d6:03:ec:
d4:29:28:a6:99:72:59:00:20:1e:4e:b8:9b:59:e0:
d6:ba:88:2d:56:e1:02:87:15:98:55:cb:5f:55:81:
67:85:0e:a0:7f:94:dd:c0:0d:12:9a:4f:0d:ac:a9:
29:89:46:98:49:f3:74:3a:b2:4b:72:ea:76:b4:95:
e7:08:61:b6:e8:32:4c:60:56:4c:49:44:06:e6:ca:
6a:27:e1:c2:6e:1e:04:7d:dc:6c:e9:05:f5:78:f9:
6a:9f:96:4b:df:d7:95:70:b6:1b:be:69:85:f0:14:
4f:b5:36:81:96:34:cc:dd:f9:54:8d:f5:30:8b:e6:
0e:b0:02:d3:8f:70:1b:0e:ba:cb:3e:7e:e0:01:b4:
c2:54:7f:34:86:f0:a4:58:ab:35:70:3b:26:7a:2c:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:70:FB:81:17:98:7B:81:07:31:5B:02:F6:27:E5:34:5B:E7:2C:55
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/JHD7gReYe4EHMVsC9iflNFvnLFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.44.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:4a:79:19:1a:20:f9:58:5e:66:8c:12:0e:2c:fc:11:07:0c:
a9:cd:62:ad:98:15:fe:44:6e:17:f4:74:c0:c4:62:38:49:d4:
a9:27:a1:92:0a:dd:06:f9:c7:52:57:89:ee:e2:55:df:56:a5:
4c:c9:12:27:a6:c2:0a:1d:c0:e4:3b:14:26:0d:03:ce:92:93:
29:25:1b:73:5e:c9:b5:d8:fd:21:71:f5:ef:d8:79:19:88:e1:
af:32:7e:27:22:dc:14:09:a2:fd:15:e5:cd:56:48:2e:81:f5:
80:61:c4:50:d0:8e:66:a0:ff:24:4b:0a:d2:df:f9:08:57:9a:
9a:79:3b:80:8a:07:1f:b0:47:41:bb:06:3c:9c:b0:66:4f:ff:
98:da:37:e2:57:5a:5e:a4:9b:9e:7d:82:1a:cb:03:66:63:ae:
d6:ca:72:e9:af:d7:fb:63:25:a7:f5:2f:db:51:dd:11:82:a1:
0f:4c:17:fa:6c:b2:6a:58:51:f7:2d:bb:08:1b:66:13:8a:5a:
91:f6:b8:9e:8a:dc:63:62:0e:12:3c:f5:fe:81:e7:3a:d1:10:
50:66:62:a9:a5:a9:47:54:e0:10:4e:27:a8:d3:96:bc:7e:8a:
45:ef:4a:b6:92:82:74:f5:a0:8b:6c:f4:45:47:c9:a6:d9:88:
28:50:6d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:18 2024 by rpki-client on console-ams.rpki-client.org