Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/4EfCzoZ-UZqgCR9FZI7wN5pKIrA.roa
File: 4EfCzoZ-UZqgCR9FZI7wN5pKIrA.roa (raw, json)
Hash identifier: V7USQhotgdtGmiyptJi/ZWSm9D+ntq+nZVv0uQ9yNlI=
Subject key identifier: E0:47:C2:CE:86:7E:51:9A:A0:09:1F:45:64:8E:F0:37:9A:4A:22:B0
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018E427545A9E8123F268DBD50B118D9CD90
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/4EfCzoZ-UZqgCR9FZI7wN5pKIrA.roa
Signing time: Fri 15 Mar 2024 14:12:45 +0000
ROA not before: Fri 15 Mar 2024 14:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47757
IP address blocks: 45.132.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 13:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:42:75:45:a9:e8:12:3f:26:8d:bd:50:b1:18:d9:cd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 15 14:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e047c2ce867e519aa0091f45648ef0379a4a22b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:24:9f:01:d2:ba:38:db:2f:5f:0b:2a:2d:7d:
3a:8b:1f:89:3a:31:0a:7f:ab:55:ec:de:67:e3:79:
97:23:3b:f8:e6:38:68:d9:2a:77:17:60:91:81:d2:
09:de:e9:de:e9:f6:d5:fc:f5:41:0f:3f:91:74:0e:
0a:0f:82:82:0a:54:22:c5:40:3b:71:51:ac:18:e5:
bb:b4:69:89:78:f1:35:9c:e6:6c:4e:d2:b3:e9:49:
ff:7a:1d:23:59:05:dc:b3:90:97:97:37:8a:f9:60:
84:4b:ac:c6:9f:34:5b:b2:b4:7b:0d:61:ee:17:cd:
76:fb:1a:ee:95:d7:93:21:04:a6:60:b9:d6:21:a9:
6a:c7:8b:61:78:d3:d2:2e:b5:d0:c4:6b:e9:77:ef:
0d:0b:79:83:43:c3:88:57:8d:c6:2b:eb:7b:c6:98:
7f:f2:8e:fe:4d:01:80:b3:64:07:8f:81:8e:3d:4b:
28:89:dd:98:30:15:b9:a9:99:23:7b:4e:0f:c9:b6:
94:fe:0b:87:92:5e:a9:ea:67:6c:e2:83:fb:66:67:
c1:c9:6c:1f:db:13:9b:80:24:ee:fa:08:d3:7f:f4:
3e:bf:3b:75:94:a2:06:22:8e:59:17:db:0c:58:f4:
c8:3e:dd:44:a8:44:9f:be:4d:ad:95:29:cb:d8:d6:
64:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:47:C2:CE:86:7E:51:9A:A0:09:1F:45:64:8E:F0:37:9A:4A:22:B0
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/4EfCzoZ-UZqgCR9FZI7wN5pKIrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.180.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c4:15:3d:9e:ac:42:6f:f4:ff:5e:8e:08:6b:37:02:23:6c:
4f:fd:24:09:26:d6:d3:52:f1:b6:39:3a:c4:de:26:c7:36:54:
6e:29:1d:6a:4a:b9:10:86:7b:f3:c8:c7:4d:82:f7:6b:73:99:
6b:d1:54:4b:ae:73:16:e8:06:8d:07:ac:d8:0d:b8:12:2a:c0:
ff:c2:4c:b3:45:6f:97:9a:10:4c:2b:47:99:52:de:5e:f5:ef:
bb:be:44:ca:9d:0b:c1:e7:d7:d5:f0:d6:82:5b:ed:8f:85:b4:
2b:ad:f9:5b:88:29:25:9e:6c:89:8b:42:ab:1e:37:22:23:e4:
be:34:79:4e:82:d9:3f:64:bd:7c:51:b6:b1:61:53:70:da:12:
32:fb:89:2e:90:26:f2:3f:51:d0:26:33:f9:de:1d:5b:a4:3f:
d8:ae:c7:de:4c:f5:3c:e7:2e:c9:29:30:85:39:34:b7:0f:4f:
03:5f:2a:ab:9c:ba:b3:0f:00:f8:27:7f:5d:a9:88:e7:14:1d:
71:33:f7:1b:55:af:97:8b:42:7b:5f:a9:5c:76:a3:09:10:c6:
37:63:6f:74:0f:b3:fa:d6:aa:94:17:07:a6:2a:9d:8f:ad:85:
79:d9:26:ef:85:08:4f:07:fb:59:c5:d3:65:74:b9:45:16:29:
98:ac:43:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 17:15:31 2024 by rpki-client on console-ams.rpki-client.org