Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aE669KUGavBeIMlNQ1tDGgSYTgY.roa
File: aE669KUGavBeIMlNQ1tDGgSYTgY.roa (raw, json)
Hash identifier: 0113GUvYRZb1N7L1IAaMRJXJKvi53dOFhlCsAP+fPRk=
Subject key identifier: 68:4E:BA:F4:A5:06:6A:F0:5E:20:C9:4D:43:5B:43:1A:04:98:4E:06
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E850E37E6D95D020ED4DE9A55A8DB747F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aE669KUGavBeIMlNQ1tDGgSYTgY.roa
Signing time: Thu 28 Mar 2024 12:34:45 +0000
ROA not before: Thu 28 Mar 2024 12:34:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14445
IP address blocks: 45.81.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 02:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:85:0e:37:e6:d9:5d:02:0e:d4:de:9a:55:a8:db:74:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 28 12:34:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=684ebaf4a5066af05e20c94d435b431a04984e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fe:66:63:fb:3b:13:2d:a7:ca:5b:03:1f:f7:
32:bd:2c:df:df:ae:ca:1e:0d:ad:ca:33:ea:f3:af:
c9:b2:9a:9a:9c:f9:bd:28:91:cd:df:ee:a4:5b:d3:
9c:78:67:e8:51:12:d4:b8:3f:d0:bd:12:55:69:87:
dc:e3:41:b5:0b:28:99:a9:66:1e:d8:a2:de:78:d7:
f6:f8:09:a3:dd:d3:62:ea:62:e9:98:6c:77:2d:0c:
de:08:03:bf:ea:40:06:00:8c:2a:a7:72:90:72:9b:
28:e2:ca:c3:58:db:d5:fe:32:5c:59:7c:f5:1d:3e:
dc:a7:00:45:ff:f8:cf:ed:4c:84:01:a7:cb:c8:5a:
5e:4b:64:0c:ba:66:b2:9a:12:e4:1e:bf:97:19:f0:
41:98:33:8e:c0:ed:f1:ca:61:55:19:cc:1a:ec:43:
f6:a5:fd:8c:f2:30:55:4c:a4:28:bc:81:3a:95:23:
e2:78:1e:c2:79:41:d7:c4:ac:8e:2b:df:b1:3a:fc:
a4:2a:10:d9:f2:76:ba:5f:43:f7:55:f0:d0:49:4f:
7c:e0:be:0c:53:9a:72:69:5a:49:83:6a:20:c9:ce:
5d:ae:25:c4:33:a7:25:3d:fb:9a:02:40:14:d8:59:
71:75:66:63:ca:d7:dc:20:07:3a:fb:50:bd:36:d0:
2c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4E:BA:F4:A5:06:6A:F0:5E:20:C9:4D:43:5B:43:1A:04:98:4E:06
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aE669KUGavBeIMlNQ1tDGgSYTgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.240.0/24
Signature Algorithm: sha256WithRSAEncryption
42:09:08:c3:30:78:32:cb:07:60:a3:16:8c:78:78:39:1b:c3:
29:4f:39:63:8b:be:31:5b:ac:3d:f2:7a:e4:b5:49:8f:f4:45:
9f:84:3c:65:46:12:54:ba:2d:ef:f8:6a:71:f8:b3:92:b2:1b:
df:b5:fd:89:19:f7:0a:1d:46:f8:79:06:ed:52:3f:2e:4d:f2:
be:88:41:9b:36:71:0a:4c:08:30:db:d7:19:e9:7f:00:18:2a:
05:e1:58:bf:82:ee:49:f0:d4:ca:fb:f4:95:fa:06:4e:48:78:
55:78:9a:f8:52:63:9b:f3:23:12:69:24:ce:53:1a:49:17:cd:
51:44:48:ae:d3:f9:72:ed:db:31:a7:2e:71:70:03:e1:43:82:
82:33:a2:c8:4f:76:e4:17:02:5d:57:7d:8d:ba:67:22:ab:95:
7d:37:24:ad:43:a4:62:32:b7:44:a2:be:8a:c8:db:4f:f4:f2:
ea:5d:53:78:7d:e6:a3:cb:c2:c8:c3:43:ef:1d:7d:0d:60:f6:
2b:11:45:b5:02:e7:23:18:92:46:81:cb:b1:31:1f:06:0a:e1:
58:93:a9:8e:ef:cb:79:17:a7:6f:e8:55:1e:a0:2a:bc:74:4f:
b7:28:1b:cc:c3:f2:1c:f8:91:36:5f:a9:f8:32:14:91:ce:72:
3e:d6:7b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:14 2024 by rpki-client on console-fra.rpki-client.org