Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/mGHlOStRM4HuVgQiP516xjk7s-8.roa
File: mGHlOStRM4HuVgQiP516xjk7s-8.roa (raw, json)
Hash identifier: MWzSEpjU6pQ1uNKMB2fMAngU+hMdKMDq2XKcQtZWRvk=
Subject key identifier: 98:61:E5:39:2B:51:33:81:EE:56:04:22:3F:9D:7A:C6:39:3B:B3:EF
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 018E659DD15A09F6162F3278E6B462BE4500
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/mGHlOStRM4HuVgQiP516xjk7s-8.roa
Signing time: Fri 22 Mar 2024 10:03:45 +0000
ROA not before: Fri 22 Mar 2024 10:03:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44103
IP address blocks: 45.94.53.0/24 maxlen: 24
45.94.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 13:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:65:9d:d1:5a:09:f6:16:2f:32:78:e6:b4:62:be:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Mar 22 10:03:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9861e5392b513381ee5604223f9d7ac6393bb3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:31:e0:c9:1e:88:ce:63:1e:d0:21:ff:ff:
5f:31:c4:72:58:ef:6f:93:92:dd:62:9a:8f:d9:43:
c5:91:63:93:bb:77:d8:65:65:d6:40:ee:02:46:03:
d7:f1:2a:71:24:54:79:05:9d:c0:6f:1c:66:6c:ee:
77:91:b3:45:ff:37:06:94:1c:4e:c6:97:09:56:1d:
0f:57:da:11:f6:43:ec:ce:94:54:8b:64:f6:60:69:
00:5f:45:d1:b3:b2:b1:6c:69:e2:89:f4:23:f8:ea:
d7:fd:9f:6d:55:3a:62:c2:8a:b8:b4:85:eb:1f:e8:
3c:50:7c:16:56:9a:61:7f:62:70:91:5c:98:c6:0c:
fe:41:a1:0d:74:a1:d8:28:fb:09:8f:4e:59:cb:6a:
00:74:30:63:d3:89:b2:e5:47:71:8c:42:7e:11:11:
6a:cb:76:28:b9:7d:bf:da:e0:c9:cf:dd:6e:1a:ae:
53:5e:f0:bf:0c:58:b5:7f:91:0e:50:58:80:90:04:
60:77:cd:a5:7c:b3:d6:53:57:61:a5:ab:d9:45:b6:
4b:7f:24:ec:2b:49:1e:0d:67:35:11:63:12:32:92:
44:5c:75:55:58:3d:19:1e:83:90:bb:ea:1f:76:b2:
1f:d6:fc:ed:43:f2:74:b8:54:4d:56:ae:52:65:d2:
47:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:61:E5:39:2B:51:33:81:EE:56:04:22:3F:9D:7A:C6:39:3B:B3:EF
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/mGHlOStRM4HuVgQiP516xjk7s-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.53.0/24
45.94.55.0/24
Signature Algorithm: sha256WithRSAEncryption
30:95:c9:81:89:52:a2:46:a0:fb:4e:a5:fb:95:37:40:33:99:
57:b4:86:c2:23:29:d6:78:c0:37:a1:c8:4c:54:ae:6a:f1:76:
7e:69:b7:2d:5a:ab:12:78:c9:6b:d9:b6:2c:61:46:ea:3d:1c:
80:8f:9c:12:9d:e0:1b:d4:9a:d8:54:b0:29:5f:50:72:bc:b8:
4c:2c:a6:bd:ff:6e:84:f2:c8:83:22:b3:9e:3f:b2:be:ba:20:
0b:b8:16:9a:77:fb:4c:54:50:c5:ed:b4:48:66:3e:72:92:d0:
2a:00:7e:54:8a:53:44:85:f1:f5:bc:ec:86:11:fb:8b:13:84:
1b:e9:1f:2e:b8:cb:ec:25:d3:f4:73:26:23:63:7f:4c:72:6b:
1e:2a:18:59:47:c1:7d:4b:30:e5:1f:98:15:14:97:b2:d9:5a:
a8:59:fa:73:cc:f5:29:ed:c6:6c:a0:40:4c:22:19:5e:f4:8f:
d2:1c:36:8e:0b:a1:b3:c3:22:0e:b9:42:e8:2d:3a:e7:8a:8e:
53:31:82:97:b9:37:76:61:83:4a:33:13:29:55:e3:68:dd:70:
96:50:45:c5:96:99:34:f3:ea:6b:dc:2b:4c:50:d2:a0:37:e1:
8c:4f:97:09:c1:8a:88:56:d2:f5:96:9f:09:20:58:20:d3:25:
38:b6:f1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 17:41:38 2024 by rpki-client on console-ams.rpki-client.org