Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tEh64loPrz_v3cdr3yBOpld4fsc.roa
File: tEh64loPrz_v3cdr3yBOpld4fsc.roa (raw, json)
Hash identifier: rum7PN/n2iIvrWlLYBGvPPqVqRvT1Bbosu/t08Smw5Y=
Subject key identifier: B4:48:7A:E2:5A:0F:AF:3F:EF:DD:C7:6B:DF:20:4E:A6:57:78:7E:C7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F62DE278533DC5E92154DBE6983A611A7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tEh64loPrz_v3cdr3yBOpld4fsc.roa
Signing time: Fri 10 May 2024 14:17:57 +0000
ROA not before: Fri 10 May 2024 14:17:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 07:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:de:27:85:33:dc:5e:92:15:4d:be:69:83:a6:11:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 10 14:17:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4487ae25a0faf3fefddc76bdf204ea657787ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:55:8d:7c:48:8c:b5:2d:8a:25:e9:77:17:
bb:28:ff:c8:44:61:77:76:31:26:f4:5f:00:e1:72:
14:67:8c:9a:fa:2d:f4:7d:9e:89:87:c9:eb:21:86:
d3:e1:da:40:9b:94:eb:16:df:4a:78:b7:46:04:6a:
c6:51:29:cb:06:c7:47:ea:92:f5:a0:78:df:2e:ed:
72:e9:24:20:70:86:e7:89:8b:c6:61:be:4d:10:38:
fb:3f:b9:e4:0d:5d:0b:67:cf:aa:4c:11:b3:61:a8:
e2:3a:9b:47:6a:eb:4c:05:00:ce:1d:ec:02:f3:0f:
ae:2b:12:ff:83:98:f2:ff:d8:95:50:47:cf:b4:0b:
d6:d2:fd:e9:3c:a3:80:f7:46:a0:eb:67:88:8b:ce:
29:c3:1b:db:b7:f0:7d:f8:d5:56:94:14:e0:a9:91:
62:d9:1f:9e:cd:59:4e:ca:9d:53:0a:4f:bb:3c:80:
62:45:8f:fd:27:b8:0c:03:8b:6a:a0:76:78:0c:1c:
be:13:32:14:7c:d8:d3:b7:c4:a2:34:fc:60:92:24:
89:85:22:f7:fd:fc:76:6a:f6:df:b5:c2:d8:60:5a:
b1:05:f7:7d:0e:8a:31:7e:d5:22:c0:cc:e5:06:76:
b5:72:1f:dc:9a:e5:6d:15:61:4f:cb:03:09:0b:03:
7b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:48:7A:E2:5A:0F:AF:3F:EF:DD:C7:6B:DF:20:4E:A6:57:78:7E:C7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tEh64loPrz_v3cdr3yBOpld4fsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.90.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:42:5c:fb:d1:c1:9d:61:35:ea:76:6d:cb:d8:98:55:dc:21:
49:c6:2c:a6:79:42:12:42:6a:c8:66:fb:5d:22:c6:ba:57:d3:
02:c4:2a:4b:49:28:11:38:19:d7:51:f5:cb:1e:d6:ef:0e:b1:
7c:a5:8e:28:fc:07:84:11:af:83:47:cb:e5:b3:aa:3c:91:b9:
ec:55:f8:1a:54:e9:e6:e0:c0:43:58:a2:da:0f:db:14:02:92:
cf:fe:0e:29:59:d9:bf:4d:cd:03:df:a6:93:a0:d1:aa:92:89:
03:e0:e2:a4:27:4c:01:22:08:b8:af:db:7f:10:bd:a6:a0:a3:
13:cf:a8:b6:a1:d5:f9:14:ea:7a:a6:05:62:51:db:73:87:dc:
a0:0b:f1:42:ab:4d:b2:a5:b6:2a:ff:ab:fa:8e:5c:66:f3:52:
3b:ec:5d:b5:7f:ed:a7:85:0b:93:9e:56:28:aa:6e:ff:9f:37:
35:6a:4e:7c:42:ef:df:76:cb:cb:1c:f0:db:5d:11:b6:32:4f:
68:fc:fa:0e:98:b9:37:b1:75:12:11:1a:85:85:3a:af:c6:2a:
dd:33:90:47:61:9c:bc:74:a7:7e:a9:0c:29:c6:48:a4:0d:fc:
a0:67:a2:91:6a:8f:4c:a4:42:14:d1:25:70:5d:db:34:03:72:
b2:c2:67:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 11:40:20 2024 by rpki-client on console-ams.rpki-client.org