Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ahBHY_aESWRtZfIFIw0OjKmrbzg.roa
File: ahBHY_aESWRtZfIFIw0OjKmrbzg.roa (raw, json)
Hash identifier: 5/uJBZphAQsGTlatMI0WN776wdOQQqnR37brfsV3PAY=
Subject key identifier: 6A:10:47:63:F6:84:49:64:6D:65:F2:05:23:0D:0E:8C:A9:AB:6F:38
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FF1FEF207A4943B3675B71DE2B80591F3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ahBHY_aESWRtZfIFIw0OjKmrbzg.roa
Signing time: Fri 07 Jun 2024 09:19:28 +0000
ROA not before: Fri 07 Jun 2024 09:19:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 12:59:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f1:fe:f2:07:a4:94:3b:36:75:b7:1d:e2:b8:05:91:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 7 09:19:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a104763f68449646d65f205230d0e8ca9ab6f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:fb:f9:03:59:2e:85:48:38:35:09:48:15:
98:42:72:67:7c:7a:2b:c2:56:95:88:2e:58:99:b5:
8b:0e:0e:61:f3:2c:dc:77:2a:ae:6c:bd:d5:30:d7:
bf:8b:48:44:8c:08:92:94:b4:b2:f5:ed:1f:c8:79:
7c:f4:25:71:ea:45:15:40:94:c3:a3:00:3a:a3:8a:
a5:42:06:c8:28:f6:28:13:b4:ca:09:98:bd:b7:4a:
33:d9:91:a3:6b:1f:85:a4:89:95:4a:55:7e:75:2c:
4e:55:c4:64:48:4d:11:c7:5a:15:eb:4e:36:f6:5e:
91:79:09:b7:64:da:6d:88:9f:49:3f:fc:c5:30:45:
25:7f:8f:55:67:e7:85:6f:8c:ec:a6:11:ed:5d:06:
55:24:f0:df:4b:b9:15:8d:be:55:95:4d:fa:45:5c:
dc:99:92:0a:4d:71:d1:5f:3f:79:2b:3c:20:59:2c:
09:b0:30:53:a2:e2:fb:87:e0:b3:58:82:36:cd:a4:
cd:36:a7:66:56:df:e5:e6:51:4e:92:06:4c:00:b9:
fc:5c:cb:0f:b3:1e:76:65:24:da:55:b1:7d:b7:bc:
88:35:c1:01:00:fb:28:da:c9:3a:b5:6d:65:7c:74:
2a:2f:21:cb:d4:45:00:b1:2f:37:e6:38:90:f9:97:
34:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:10:47:63:F6:84:49:64:6D:65:F2:05:23:0D:0E:8C:A9:AB:6F:38
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ahBHY_aESWRtZfIFIw0OjKmrbzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.90.0/23
Signature Algorithm: sha256WithRSAEncryption
82:75:0b:18:1d:ca:60:2e:59:c1:87:16:c2:62:f9:6d:9f:af:
d7:0b:32:02:ce:9b:65:02:35:d0:4e:cf:49:bd:0a:d1:6a:7e:
d1:a2:f7:0e:7a:eb:89:76:f4:42:92:69:c0:af:d9:15:30:ac:
c8:09:36:5b:52:d2:19:0b:7a:77:8c:b7:5e:a0:ea:38:e3:1e:
bb:17:0b:9b:f8:44:ac:1b:f8:28:5a:79:4c:f1:a7:35:39:02:
2d:c6:ad:df:ee:92:33:34:f6:fd:e3:7c:23:87:e4:6c:7e:5d:
91:bd:23:98:d5:33:44:cb:59:cd:be:df:59:ab:0d:a5:1f:87:
6c:63:4b:74:ca:3d:a2:db:d1:82:c4:5e:5e:b0:90:5c:4f:6a:
c1:5c:b5:9e:ff:77:fa:09:9f:7c:58:82:bf:a8:28:fe:5f:3d:
52:fe:50:58:6c:ec:6c:20:1b:9b:7d:90:f7:eb:08:8d:2e:d8:
20:54:54:d0:a8:de:c8:02:b7:63:bd:6f:00:02:f9:86:f7:c8:
11:a6:1d:6a:2d:74:2c:7a:69:18:a8:51:bf:cd:62:a4:d5:c4:
47:42:41:0b:a7:65:5a:5a:7b:2b:e0:78:74:8d:ec:a8:da:c8:
a0:99:f7:c4:55:07:74:f8:20:a5:98:bc:05:1f:1a:55:13:d3:
7d:19:12:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 14:45:57 2024 by rpki-client on console-fra.rpki-client.org