Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/rJnsMbqloHUmAZLBhRDR-EgyKqg.roa
File: rJnsMbqloHUmAZLBhRDR-EgyKqg.roa (raw, json)
Hash identifier: kLuCnUPCcBltF0daPiUOEijfr4n4Auv9OezHENL+Dj8=
Subject key identifier: AC:99:EC:31:BA:A5:A0:75:26:01:92:C1:85:10:D1:F8:48:32:2A:A8
Certificate issuer: /CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Certificate serial: 018570CBF4C97F5AFECE4EAE3F2FFCD6B369
Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/rJnsMbqloHUmAZLBhRDR-EgyKqg.roa
Signing time: Mon 02 Jan 2023 04:44:52 +0000
ROA not before: Mon 02 Jan 2023 04:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201150
IP address blocks: 45.132.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:f4:c9:7f:5a:fe:ce:4e:ae:3f:2f:fc:d6:b3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Validity
Not Before: Jan 2 04:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac99ec31baa5a075260192c18510d1f848322aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:28:6b:54:a3:0d:5c:9b:97:63:8d:0a:df:2b:
bc:ba:ae:85:bc:1b:9f:1c:64:3f:be:37:c4:eb:63:
60:1d:d2:54:cd:57:0b:76:53:60:1a:a6:fa:01:d8:
45:b6:91:ab:79:60:e4:3a:5c:e4:c2:50:3c:3a:c2:
46:7f:ae:19:17:3d:d6:09:c3:d1:aa:cf:0f:df:6f:
90:4b:5b:d7:12:5d:93:84:bd:35:53:e9:d6:c5:dc:
17:9c:b6:28:8c:0b:d4:12:55:41:50:2d:a6:61:e6:
6d:24:ff:11:d8:d8:5d:e5:de:b4:2c:17:f5:ca:f6:
91:fb:79:0b:c3:01:c4:54:08:51:8d:48:e7:ac:6a:
7d:50:6c:bc:c7:f4:0c:4f:da:07:81:07:fa:61:c8:
9d:c1:31:2c:cb:60:27:40:5d:8a:31:1f:2e:0e:c9:
5e:5b:2d:9a:a9:31:1f:5b:a8:c6:cd:bf:6a:9e:53:
36:c2:48:fb:b1:a0:cd:db:a3:6c:5b:f6:9f:ce:53:
6e:40:79:4c:19:db:43:c7:5b:4c:86:85:0b:c7:a1:
f0:eb:fe:50:2b:18:2c:d3:61:69:dc:4c:b6:20:44:
30:90:b0:e6:06:3b:83:45:4b:72:e7:88:4a:0f:34:
7d:ac:0c:a0:5d:72:f3:c6:8a:58:76:79:f7:08:85:
58:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:99:EC:31:BA:A5:A0:75:26:01:92:C1:85:10:D1:F8:48:32:2A:A8
X509v3 Authority Key Identifier:
keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/rJnsMbqloHUmAZLBhRDR-EgyKqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.32.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:74:35:8e:4d:a3:d4:3e:ef:f1:a6:bb:96:a6:53:eb:47:bc:
f3:ba:28:7a:87:50:38:4e:8c:a8:bf:2a:9f:e7:2c:1a:a8:a5:
d4:82:6b:4e:b6:d9:66:92:f7:b5:b4:11:45:fb:db:80:ff:a1:
ea:7f:13:81:1d:14:1d:72:0c:d7:3b:b0:4e:7c:86:00:e7:e0:
d6:8e:23:0b:9e:8b:b1:e7:c5:c4:16:04:6a:c8:90:59:45:10:
a8:6c:61:b4:81:32:ad:20:9c:e4:6b:cf:12:1e:4d:8b:9e:bd:
df:8a:18:b2:cf:86:56:b9:d4:46:7d:cf:83:ee:90:91:a2:ed:
d6:3b:9e:63:d4:42:0d:66:ea:f8:41:eb:51:15:45:93:ea:c2:
c0:0d:1c:8d:c5:7c:9b:11:21:f8:57:7d:84:2b:37:cd:1f:f0:
8b:c4:00:e0:49:b8:2e:6f:e3:15:f6:4a:2f:97:73:7a:a0:bf:
e8:68:ee:a9:0c:f1:c0:d4:24:0c:eb:49:c8:76:32:23:6e:d4:
00:6f:ab:fe:3e:1a:1e:8a:5b:67:c5:5b:ef:1d:3e:80:2b:d7:
e5:63:4c:4b:16:8f:37:d4:64:8b:1b:9b:42:62:90:55:e8:98:
03:6c:b9:55:bf:ca:38:73:c4:ef:ee:b1:b3:5a:47:88:0d:ea:
6d:03:8f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:41 2024 by rpki-client on console-fra.rpki-client.org