Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/azBRXrIy_zsB_cmbqa0A7Ahk824.roa
File: azBRXrIy_zsB_cmbqa0A7Ahk824.roa (raw, json)
Hash identifier: AXkSon8FVMIaarC/NKWpB3aZ3ZqP8i3OXgrZoRD6NTM=
Subject key identifier: 6B:30:51:5E:B2:32:FF:3B:01:FD:C9:9B:A9:AD:00:EC:08:64:F3:6E
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 01857054CDA9586D1A16575526D050D9329C
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/azBRXrIy_zsB_cmbqa0A7Ahk824.roa
Signing time: Mon 02 Jan 2023 02:34:43 +0000
ROA not before: Mon 02 Jan 2023 02:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61102
IP address blocks: 45.150.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:54:cd:a9:58:6d:1a:16:57:55:26:d0:50:d9:32:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 2 02:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b30515eb232ff3b01fdc99ba9ad00ec0864f36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:13:b8:b4:02:45:4e:79:d2:12:27:d0:87:c8:
0a:6c:36:58:32:d4:45:0d:ca:d7:bb:58:03:2e:43:
3d:d8:03:e8:b8:c1:c8:4b:1b:1b:26:ec:bf:a5:46:
c8:68:8a:75:67:42:6f:e3:9d:32:dc:99:77:41:c8:
28:df:10:2f:b3:8c:97:eb:cb:73:fe:33:e1:60:9c:
cb:69:1c:2e:89:9d:75:cd:f3:d2:0c:c6:62:06:41:
08:5e:87:0b:e2:e3:21:15:cd:cb:da:c1:8c:f3:04:
3b:8b:e4:da:fb:67:e1:77:68:b2:76:53:2f:a4:4d:
82:dc:44:b1:21:db:b0:02:11:e1:84:c9:72:f0:70:
fd:df:37:89:cf:3c:74:4a:7a:6d:17:3c:41:48:08:
a7:0a:d2:8b:74:71:06:d8:7e:c1:d3:56:fb:75:45:
52:71:fa:60:08:cc:45:a4:47:f8:e2:e7:4e:8b:bc:
45:6c:14:19:bb:21:1e:46:07:62:88:99:2b:eb:03:
33:bc:79:75:77:b1:a1:e4:25:87:ff:6e:7c:48:5c:
66:e6:1b:94:3b:67:9a:38:d9:a0:0b:51:7a:18:f7:
8f:76:c4:01:c2:ff:e8:b1:a3:d0:ed:e0:ab:e1:45:
ae:41:0e:ab:ff:f0:5d:04:b7:e6:5a:27:02:a9:ab:
24:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:30:51:5E:B2:32:FF:3B:01:FD:C9:9B:A9:AD:00:EC:08:64:F3:6E
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/azBRXrIy_zsB_cmbqa0A7Ahk824.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.108.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:77:fd:69:e4:fe:b8:57:0b:f9:6a:ff:ba:87:5c:94:f3:7e:
b5:63:65:3d:1c:27:06:36:ce:42:b5:aa:bc:96:18:be:fb:f5:
e2:5b:88:37:8a:eb:51:70:15:da:46:f4:7a:58:6a:4b:d4:b6:
f0:4c:f7:7a:0d:ef:d9:52:f0:bb:8b:06:75:30:cd:ad:d4:76:
83:47:65:af:86:e2:8f:bc:13:a9:d2:d6:03:82:4c:12:cf:6c:
c2:17:70:8c:13:68:78:74:c4:05:ec:c5:d6:49:5a:8e:f4:7b:
bf:04:12:82:41:10:c6:56:75:e8:e9:ce:c0:3d:08:d1:dd:e1:
bc:bf:71:02:48:ab:fb:1d:8f:1b:2f:7f:4d:f3:be:c4:03:ea:
ba:d1:c4:ed:e4:cb:ee:01:39:ba:37:a8:ee:db:84:aa:35:b8:
81:7f:44:4f:91:f4:19:96:b2:2a:56:59:db:d8:63:11:47:98:
b3:61:41:07:1b:f5:93:bc:9d:f2:d5:47:70:73:19:29:2f:a5:
07:6e:06:10:c7:e6:a6:62:1c:aa:65:fd:0b:3f:ea:8d:9d:d6:
86:86:7a:68:f0:b7:84:61:c0:94:ba:79:10:d2:1b:d0:0a:0a:
4a:67:d1:a9:89:59:5a:7f:26:c1:f2:e8:99:7a:2d:b9:8b:fe:
41:6a:e5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org