Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/FzrbAj3B77LRJulfLDFps-aU2vU.roa
File: FzrbAj3B77LRJulfLDFps-aU2vU.roa (raw, json)
Hash identifier: yVNEQdey0ml2GEoUs8g28qSzLJrZBiy99HV9QkvwBT0=
Subject key identifier: 17:3A:DB:02:3D:C1:EF:B2:D1:26:E9:5F:2C:31:69:B3:E6:94:DA:F5
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 018CC9BC5EDA8397EE2978F892480DEA0EB7
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/FzrbAj3B77LRJulfLDFps-aU2vU.roa
Signing time: Tue 02 Jan 2024 10:33:34 +0000
ROA not before: Tue 02 Jan 2024 10:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44103
IP address blocks: 45.94.54.0/24 maxlen: 24
45.94.53.0/24 maxlen: 24
45.94.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 10:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:5e:da:83:97:ee:29:78:f8:92:48:0d:ea:0e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 2 10:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=173adb023dc1efb2d126e95f2c3169b3e694daf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:5e:b5:01:df:18:a6:7d:b1:e6:97:87:85:
1d:17:fc:74:6d:af:87:3d:c4:23:69:a8:2b:43:ac:
4d:df:6b:b7:a0:e4:66:e7:c8:28:a9:30:0b:c6:04:
37:1d:0d:40:1c:72:0d:aa:67:ca:9f:34:08:8c:df:
4b:55:47:c3:53:10:b8:ef:ac:75:16:aa:b6:ba:7a:
aa:71:34:ae:9a:7f:8c:a5:42:d5:6b:1d:9c:40:b0:
ac:f5:78:f6:c0:26:e0:94:3f:97:19:96:4b:4c:a0:
cd:e2:3d:8a:5a:1b:fa:d3:37:47:c2:e5:59:1c:1a:
86:6c:80:56:52:58:09:ee:8a:f2:c1:59:41:7b:d0:
23:04:25:da:db:4c:b3:64:88:d7:19:02:4a:99:e4:
d1:1b:8c:f1:a3:f4:e6:9f:d9:cf:aa:88:26:ba:11:
b1:9e:08:cf:30:19:b3:32:ef:6b:84:f1:52:f8:80:
f0:cc:d1:15:fc:f3:c1:4f:1d:07:06:b6:20:d3:dd:
e6:89:3b:e0:c6:39:28:4e:45:87:91:2b:80:fc:cf:
31:13:7d:18:76:de:a4:91:68:7f:6d:ca:f6:0a:c1:
f9:a6:62:84:9d:fb:4f:d7:11:31:99:5c:ec:85:62:
65:0f:1a:2c:4e:54:57:89:b4:f7:cd:36:64:bb:0f:
73:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3A:DB:02:3D:C1:EF:B2:D1:26:E9:5F:2C:31:69:B3:E6:94:DA:F5
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/FzrbAj3B77LRJulfLDFps-aU2vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.53.0-45.94.55.255
Signature Algorithm: sha256WithRSAEncryption
0e:1d:73:d7:1b:d0:74:4a:f2:c4:13:02:ea:f0:6c:89:e7:5e:
f1:dd:3d:f7:f1:b4:2a:3a:68:cd:d2:b4:e3:f7:c7:b9:03:15:
b1:8c:f2:ca:33:7c:92:2f:eb:73:04:1c:94:2a:97:1d:5c:3e:
b9:4e:f2:49:e8:46:59:16:0c:ef:e4:e3:64:63:78:3e:18:95:
a0:fa:1e:72:b5:b3:0a:be:9a:97:cb:f4:fe:a1:76:7b:d9:00:
f9:ec:fa:43:87:e7:2b:7f:dd:55:f6:e2:26:cd:00:57:15:97:
a3:1c:de:f8:d7:e9:9e:d6:36:8c:a7:e0:f7:5e:c2:65:f8:d0:
7e:a8:63:1e:2d:7f:f0:70:cf:76:8f:64:dc:fc:02:a7:0a:be:
60:43:73:a2:8c:2b:4c:14:64:84:05:45:0d:f2:2a:c6:49:82:
d0:10:12:87:9f:89:93:1a:a1:0d:51:2e:06:39:5e:c1:37:e1:
c6:5a:59:05:79:64:23:3d:01:42:7f:70:22:5c:40:e1:29:12:
80:3b:a2:3c:66:f0:e8:76:07:78:91:5d:f1:19:e6:07:56:92:
99:86:e8:35:03:90:d6:64:dc:bc:9d:5a:e5:b3:32:2c:bc:d1:
19:98:8a:16:54:cf:3d:59:45:a5:ca:73:50:56:44:f1:60:ea:
6f:cf:39:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 13:35:23 2024 by rpki-client on console-ams.rpki-client.org