Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/vIEX39h4HvVJ1bgp51yByKeItNw.roa
File: vIEX39h4HvVJ1bgp51yByKeItNw.roa (raw, json)
Hash identifier: vpwKr8t2R7YKQg3b3gDeWcw6YQvQfQx/Qo36idb3CZQ=
Subject key identifier: BC:81:17:DF:D8:78:1E:F5:49:D5:B8:29:E7:5C:81:C8:A7:88:B4:DC
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018C1BB4C88081B5598F3B1085E0481FFE03
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/vIEX39h4HvVJ1bgp51yByKeItNw.roa
Signing time: Wed 29 Nov 2023 15:31:21 +0000
ROA not before: Wed 29 Nov 2023 15:31:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215933
IP address blocks: 45.157.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Dec 2023 10:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1b:b4:c8:80:81:b5:59:8f:3b:10:85:e0:48:1f:fe:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Nov 29 15:31:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc8117dfd8781ef549d5b829e75c81c8a788b4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:57:11:2e:aa:a5:24:cf:0b:69:e9:e6:af:31:
18:39:a1:d1:1f:9a:fe:b7:bd:0e:20:6d:e7:3b:42:
69:f6:86:43:dd:d8:8a:47:e1:30:6a:7e:24:50:aa:
57:89:60:c3:7d:82:44:c3:a7:f3:f3:79:81:1c:81:
3c:d3:f1:e7:c3:41:18:6f:3d:6e:a8:57:d2:e0:5e:
f0:89:88:cc:38:41:2f:e6:e1:c8:e9:43:2b:6d:ab:
d3:7a:a7:6c:b4:d2:ff:b8:38:a9:1b:dc:58:53:fa:
b7:8a:9a:7a:2b:95:2e:f9:78:3d:f8:45:ca:1d:76:
6d:df:ad:08:29:04:a5:7d:29:0b:2a:dc:d9:19:8c:
c9:89:8c:fe:ed:a0:ca:9d:af:2c:83:ed:ab:8b:c9:
69:6b:fb:b3:93:b0:40:f0:69:6a:4b:6a:31:be:7c:
5d:39:c9:90:f8:cc:10:07:ce:5a:7d:55:58:09:f9:
3c:91:94:ad:ad:29:b7:25:d1:9a:d8:0e:5a:7e:67:
0a:22:c4:65:67:17:89:03:dd:5b:50:94:c3:ce:88:
50:0f:13:85:9f:85:f5:59:1c:18:64:3f:54:c7:c6:
cc:c7:f5:b9:9d:3d:81:23:10:80:28:be:df:1f:2c:
42:36:fa:56:a5:47:1c:9d:c0:7c:ae:73:5b:b6:1b:
d4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:81:17:DF:D8:78:1E:F5:49:D5:B8:29:E7:5C:81:C8:A7:88:B4:DC
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/vIEX39h4HvVJ1bgp51yByKeItNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.35.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:d2:49:39:d3:e3:64:32:67:db:07:f3:e9:ed:95:02:4f:68:
b7:2f:a0:29:3e:e3:e6:6f:dd:0f:9a:fe:66:e3:4d:dd:b6:ba:
f8:65:34:a4:84:b3:72:4d:9c:5d:5d:74:1a:b7:41:62:1b:cb:
01:c1:5f:79:47:c2:3e:89:72:bd:c8:6a:f3:7b:94:fa:12:41:
d3:09:70:e6:c3:2a:ae:51:17:81:68:80:8d:e7:67:5c:fc:3f:
99:97:82:70:f1:0b:a8:56:74:98:af:65:73:41:4a:cd:bf:3c:
fa:94:dd:4f:02:7d:dd:69:20:8b:fa:45:7f:f7:69:40:df:ff:
c1:45:6a:4d:0a:3b:e1:a8:40:18:9f:6a:f4:df:cf:9e:3d:a6:
5c:e1:74:e0:1b:bd:24:c8:f7:f4:50:6c:fe:ec:8a:a7:8f:cf:
4e:f9:aa:d1:81:90:f7:d5:8e:a6:d8:2f:77:81:38:2c:e7:f4:
72:b4:83:a3:bc:d1:4f:31:82:cd:60:8b:b8:c5:06:b2:3b:50:
73:91:4b:0b:4f:c2:aa:43:46:24:92:d1:31:73:a1:05:2c:9d:
fa:a7:52:a2:20:0f:e4:6f:6a:81:ca:1c:f3:e0:8b:37:1b:a8:
aa:e1:dd:58:d3:e9:02:59:55:21:3d:b6:20:31:e6:bc:ff:47:
35:c0:7e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org