Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/byzgaIlZt2QoTiDbXEX49rTo8Z8.roa
File: byzgaIlZt2QoTiDbXEX49rTo8Z8.roa (raw, json)
Hash identifier: DOu1YELyBGYAr3Cq0yIeDZJHnM4oH3p/N8k0O/tbT0c=
Subject key identifier: 6F:2C:E0:68:89:59:B7:64:28:4E:20:DB:5C:45:F8:F6:B4:E8:F1:9F
Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial: 018901A1F0BBB45FDC92CCB7D6586474B889
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/byzgaIlZt2QoTiDbXEX49rTo8Z8.roa
Signing time: Wed 28 Jun 2023 10:52:17 +0000
ROA not before: Wed 28 Jun 2023 10:52:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400529
IP address blocks: 45.134.10.0/24 maxlen: 24
45.134.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:01:a1:f0:bb:b4:5f:dc:92:cc:b7:d6:58:64:74:b8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
Validity
Not Before: Jun 28 10:52:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f2ce0688959b764284e20db5c45f8f6b4e8f19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:64:1d:ee:46:9b:66:b0:78:d9:f1:03:b2:
4b:46:90:bf:f1:91:4b:1f:cf:45:c7:97:27:8f:a2:
16:6f:f8:92:7a:6b:39:df:b2:98:bf:38:82:c5:fc:
d8:5c:2b:b6:cc:21:38:d3:ab:65:2b:87:a7:72:19:
dd:d3:a1:a7:42:91:40:f5:c4:30:8c:1f:21:04:c4:
96:c7:2d:af:66:da:16:e9:27:70:e5:78:77:55:b8:
a7:24:68:f9:0a:6f:48:3c:fa:75:3e:4d:8e:b7:de:
d5:b0:87:47:67:c9:4d:69:8d:af:e0:8e:39:0c:5a:
1e:98:40:9b:5f:e8:35:ec:64:40:21:30:5d:d4:fb:
cf:d5:e8:ca:0c:00:e5:ae:50:7a:57:fb:91:3a:c1:
7c:db:84:34:de:89:32:23:01:9a:aa:68:e8:d4:01:
36:34:7f:5f:f0:f2:4f:61:d9:58:6d:52:c0:f3:5f:
c2:72:c7:2e:e7:d4:96:21:f8:2b:e5:e3:8e:0f:36:
8f:26:9c:1b:92:ce:04:b7:14:40:da:75:85:fb:21:
36:7e:83:8e:43:8f:dd:7a:08:d8:40:e5:7c:36:b8:
77:f2:e9:40:8a:56:f9:20:5d:13:4b:12:0e:0d:51:
a3:a4:2b:f6:30:72:91:ac:c9:7d:ba:fc:66:6b:c5:
d7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2C:E0:68:89:59:B7:64:28:4E:20:DB:5C:45:F8:F6:B4:E8:F1:9F
X509v3 Authority Key Identifier:
keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/byzgaIlZt2QoTiDbXEX49rTo8Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.10.0/23
Signature Algorithm: sha256WithRSAEncryption
76:d2:88:2a:56:77:e5:e0:9c:9a:90:92:39:b3:52:a9:5a:e1:
5c:dc:31:a2:61:54:50:41:e3:df:65:67:e8:fe:c3:d5:84:0c:
52:43:d9:f7:d2:c0:d6:ef:55:e6:f3:d5:d4:ad:3e:8a:47:38:
cb:fa:8c:9f:9b:6b:2e:e7:d0:36:5a:6c:69:7a:30:32:b0:10:
09:6f:cd:29:34:98:c7:8e:12:62:76:bb:c2:f3:91:d1:65:f1:
b1:a2:65:41:12:af:fd:07:ed:cb:f3:d5:04:48:50:66:51:5c:
43:91:ce:ca:db:e5:06:62:25:dd:db:02:ec:c4:9e:46:23:d0:
e1:95:96:cb:0e:55:b4:f4:32:03:08:80:42:53:e3:b6:52:88:
a4:ae:58:7e:91:5c:33:5d:4b:8e:86:12:96:42:73:37:b5:8f:
28:d1:42:23:4f:d6:d2:c4:93:7f:bd:0d:16:5d:23:1a:1c:6d:
64:7d:9e:a7:2c:6d:65:26:ce:96:11:fe:03:92:b6:ad:40:de:
db:4a:d3:11:53:4c:35:ff:97:a0:3d:65:11:2a:8d:0e:86:4a:
ea:af:a8:2f:80:b8:70:69:0e:45:9c:24:0d:65:4a:1b:78:d4:
c5:8d:c6:8b:92:a3:cb:c0:0d:5c:92:46:06:be:51:9b:e7:ba:
3e:ac:ff:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:18 2024 by rpki-client on console-ams.rpki-client.org