Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/IOsLVPYmZ28sOiXl313E8FG-eqk.roa
File: IOsLVPYmZ28sOiXl313E8FG-eqk.roa (raw, json)
Hash identifier: CBTrJ3ntHAIyumHf86HT+5JYd2q85hVYf6Xvc0m7m18=
Subject key identifier: 20:EB:0B:54:F6:26:67:6F:2C:3A:25:E5:DF:5D:C4:F0:51:BE:7A:A9
Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial: 018A8DB7D6EC08A7A22376BB1A1C74488D47
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/IOsLVPYmZ28sOiXl313E8FG-eqk.roa
Signing time: Wed 13 Sep 2023 08:45:50 +0000
ROA not before: Wed 13 Sep 2023 08:45:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.23.6.0/24 maxlen: 24
45.134.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Oct 2023 07:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:b7:d6:ec:08:a7:a2:23:76:bb:1a:1c:74:48:8d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
Validity
Not Before: Sep 13 08:45:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20eb0b54f626676f2c3a25e5df5dc4f051be7aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:18:c7:1b:01:89:20:eb:38:c0:c4:03:ce:
06:c5:8b:e0:10:9c:ee:bf:cc:2a:19:8a:9b:5e:8d:
97:e9:16:70:13:3d:f2:0b:6b:8a:e4:0d:1d:fc:fe:
64:8a:c5:fb:59:5f:98:c3:2c:86:d9:9b:0c:05:22:
38:2e:e8:23:5d:4c:5e:6d:c5:27:80:c7:ee:ae:5f:
24:93:63:f6:ca:43:44:e7:4d:55:ad:5d:88:19:6d:
d8:84:b0:ed:3f:89:a3:3b:f2:8e:91:eb:1a:d9:be:
5b:a2:e9:7b:8c:cf:1b:81:82:f3:04:07:d0:be:a0:
20:8c:23:6b:1d:e9:a9:78:2c:d6:15:31:f9:4e:89:
76:68:ef:0a:57:0f:b1:7e:32:ff:58:f8:1e:9a:70:
12:15:77:72:c7:a9:78:ce:41:ab:a0:8a:07:9b:5b:
6a:3d:48:a7:e5:06:14:97:70:a3:30:e2:d0:c2:b0:
20:ac:64:e6:f1:35:1d:a3:cb:19:71:26:0b:73:9d:
13:4c:35:e8:df:b0:e9:c4:09:a4:92:b1:f5:75:5f:
5f:68:be:7c:9c:c0:c9:c5:d8:43:87:28:a9:ee:95:
b2:e8:04:b4:47:2f:9c:f6:2f:f7:37:5f:fc:65:8e:
28:d4:63:b5:53:90:27:69:44:8b:aa:0e:d1:f1:82:
0f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EB:0B:54:F6:26:67:6F:2C:3A:25:E5:DF:5D:C4:F0:51:BE:7A:A9
X509v3 Authority Key Identifier:
keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/IOsLVPYmZ28sOiXl313E8FG-eqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.9.0/24
185.23.6.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:40:69:28:f3:2f:f1:63:40:a0:56:bb:ab:b1:43:46:aa:4b:
3c:97:1d:e0:28:f6:31:d1:5c:3a:ab:be:cc:ac:3b:51:35:d5:
ac:00:8e:15:c5:cb:4c:9c:10:75:fc:ad:aa:5c:8f:32:5d:9e:
19:43:a9:25:f5:10:3d:37:28:e8:27:4c:75:07:fd:72:de:7e:
6f:c8:12:4c:e5:2e:c7:74:18:b4:5e:33:0d:f4:41:48:f6:d4:
33:9a:33:a9:b1:ef:76:76:9e:14:6b:e0:4b:b4:1e:da:a6:1f:
df:84:c4:ca:83:54:93:11:73:1b:86:79:ea:dc:30:d6:4d:ff:
e4:3e:1a:23:ab:2e:a6:ce:69:4e:88:58:43:16:11:a9:b2:7b:
a4:6c:90:e6:a2:c1:e6:d2:53:16:36:a1:8e:b4:34:3b:c3:d7:
74:8a:c5:af:44:eb:f1:48:ef:14:40:0f:5e:7b:18:63:c6:98:
81:f5:5b:69:cc:0e:0e:4c:58:8c:da:00:99:e6:98:75:ba:95:
da:54:21:53:88:b7:4a:cf:84:00:21:d8:8b:32:a0:3f:21:e7:
10:fc:8d:4a:1d:87:88:1c:5e:35:79:02:de:43:07:59:6b:cd:
13:8e:bb:22:80:4c:7d:68:5d:82:ed:cc:1f:44:13:b5:75:63:
e5:e2:31:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:18 2024 by rpki-client on console-ams.rpki-client.org