Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/x0MuDg_oklDwn8e5XKhCQrVOOAY.roa
File: x0MuDg_oklDwn8e5XKhCQrVOOAY.roa (raw, json)
Hash identifier: nV2hLYyKQINdA7weCUEMLbTid87o7ZTXdqQXwsltHNU=
Subject key identifier: C7:43:2E:0E:0F:E8:92:50:F0:9F:C7:B9:5C:A8:42:42:B5:4E:38:06
Certificate issuer: /CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253
Certificate serial: 01856EEFDFC31C7B8FFCE2619445061C8396
Authority key identifier: 10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/x0MuDg_oklDwn8e5XKhCQrVOOAY.roa
Signing time: Sun 01 Jan 2023 20:04:52 +0000
ROA not before: Sun 01 Jan 2023 20:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34934
IP address blocks: 45.152.252.0/24 maxlen: 24
45.152.253.0/24 maxlen: 24
45.152.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:df:c3:1c:7b:8f:fc:e2:61:94:45:06:1c:83:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253
Validity
Not Before: Jan 1 20:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7432e0e0fe89250f09fc7b95ca84242b54e3806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:b7:f1:15:62:ca:87:48:e7:2a:47:a7:af:
4f:85:43:d9:17:f8:ae:b1:9f:24:0b:d1:84:86:61:
18:30:29:4a:d9:bb:90:17:94:8c:7b:78:e2:03:d6:
b0:11:80:7f:09:03:f9:bd:4c:d5:9a:af:19:24:5a:
2d:13:15:05:73:86:56:ff:38:de:4e:f7:6b:a9:92:
11:08:7f:93:36:88:fc:f1:18:50:83:b1:f7:4c:d6:
37:e1:73:78:0e:28:17:18:38:e3:f0:0e:6c:a3:f9:
6d:0d:00:81:2e:13:29:f9:d9:0b:51:07:3d:ca:b6:
09:02:5f:0b:4a:8a:dd:04:ed:ba:ca:80:30:46:c0:
e8:ce:f2:7e:49:84:32:78:c5:d1:7b:58:0e:12:b4:
53:81:da:95:2b:ab:b2:4a:7a:9a:1a:7c:63:6a:07:
bf:15:9c:38:e5:4b:b5:aa:03:05:46:55:82:72:4d:
05:cd:fe:54:90:08:34:71:1d:4f:19:1e:ab:58:ce:
2d:35:89:92:35:fb:28:b2:0c:33:d1:36:80:66:94:
38:69:b3:ab:20:24:00:05:e2:d8:51:7a:33:bf:65:
42:10:c4:c1:1f:f1:3e:c6:de:8e:d2:2d:ed:26:44:
d6:95:11:50:08:4f:f2:ad:39:f4:e1:dd:ac:8c:cc:
aa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:43:2E:0E:0F:E8:92:50:F0:9F:C7:B9:5C:A8:42:42:B5:4E:38:06
X509v3 Authority Key Identifier:
keyid:10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/x0MuDg_oklDwn8e5XKhCQrVOOAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.252.0-45.152.254.255
Signature Algorithm: sha256WithRSAEncryption
87:74:f2:96:b4:4c:d9:c3:2c:f1:26:6a:86:3b:c7:d2:b7:58:
fa:b3:ec:25:d9:46:19:56:f2:c0:89:a8:06:cd:a3:e7:26:44:
2a:25:6f:72:1e:81:06:f4:ae:1c:28:37:94:9d:5a:a2:26:ce:
f6:a1:e3:e3:a6:45:dd:1d:db:20:af:cf:fc:b8:b7:02:c3:1b:
4f:73:d6:d2:7d:42:74:b2:4e:c8:bf:1c:83:2e:45:6b:f9:bd:
be:4f:8f:94:2b:99:68:16:7d:eb:c7:c1:5a:56:7b:46:b0:aa:
12:5f:cb:9e:f0:a8:80:1f:90:79:f0:0c:71:97:0b:98:ef:dc:
a1:9b:33:62:23:9e:ba:5f:15:6a:e3:4b:59:06:2c:11:20:e1:
eb:f9:e3:9d:c9:42:32:68:1b:44:ac:cf:e0:70:7c:9e:53:a1:
72:e4:4e:a6:62:fa:d3:2c:02:2b:34:ec:ef:be:7c:f2:07:1e:
02:e4:66:44:11:82:81:95:f1:1d:cc:81:db:4b:c3:3f:cc:da:
a0:97:8e:dc:b9:65:31:37:42:5a:5f:be:2c:2b:82:95:60:5b:
0a:99:c2:ba:03:5c:de:22:18:55:87:90:fe:47:19:f3:ca:a8:
9c:d8:67:ff:f6:3f:d2:29:21:71:10:18:0e:fe:79:70:3e:59:
69:52:80:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:16 2024 by rpki-client on console-ams.rpki-client.org