Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_jH4E1VLK0ObvCj7hQyCbtbL4mQ.roa
File: _jH4E1VLK0ObvCj7hQyCbtbL4mQ.roa (raw, json)
Hash identifier: BPuOfG8xdAVPWvqQZ53xXmJItaHzml2JU+vvjPCxsJo=
Subject key identifier: FE:31:F8:13:55:4B:2B:43:9B:BC:28:FB:85:0C:82:6E:D6:CB:E2:64
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018C12E3177B7BC75F82DC40F93369D74B21
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_jH4E1VLK0ObvCj7hQyCbtbL4mQ.roa
Signing time: Mon 27 Nov 2023 22:25:21 +0000
ROA not before: Mon 27 Nov 2023 22:25:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 45.138.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:12:e3:17:7b:7b:c7:5f:82:dc:40:f9:33:69:d7:4b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 27 22:25:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe31f813554b2b439bbc28fb850c826ed6cbe264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:4f:1e:9e:55:2f:67:f3:f0:9b:e4:3b:72:
f6:20:7b:44:37:3f:7e:46:3c:e5:f3:c8:1d:02:e3:
1f:2e:88:b9:c9:53:52:5d:e8:66:35:4c:d3:57:ea:
1d:bf:40:af:23:57:7a:e3:84:7e:68:c7:75:c6:26:
c8:02:32:ee:84:70:53:f0:e5:c5:7b:6e:53:d1:55:
c5:39:05:3e:d4:51:fb:0a:38:e3:64:e3:6d:7f:df:
4b:44:6e:cf:8c:fa:0c:17:a3:66:5e:00:0c:60:48:
dd:8d:f9:13:5e:69:74:b6:50:2b:cd:45:9b:31:0f:
31:44:03:54:43:fc:8c:a7:3f:2c:99:84:fe:85:44:
98:a2:f8:e4:6a:0b:53:54:bb:91:22:9b:20:dd:06:
31:06:b9:be:2c:4c:ea:4c:9d:6d:67:16:69:32:f0:
83:19:7a:5d:7b:2e:e5:cc:32:7a:90:03:e8:0d:6d:
ca:d6:cb:ff:b6:ec:a6:59:32:23:df:8f:e9:f3:ff:
d4:b6:7d:40:7a:fc:fe:48:ee:b3:11:8c:f8:59:6c:
b7:82:dd:c1:b3:85:03:eb:37:e6:4f:3b:09:78:3b:
85:86:52:7f:a3:eb:3a:56:6f:b7:28:67:9a:53:dc:
af:58:aa:89:e7:60:80:e1:a4:83:85:e5:a9:21:1b:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:31:F8:13:55:4B:2B:43:9B:BC:28:FB:85:0C:82:6E:D6:CB:E2:64
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_jH4E1VLK0ObvCj7hQyCbtbL4mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.180.0/24
Signature Algorithm: sha256WithRSAEncryption
90:6c:75:81:63:85:75:a4:b9:69:04:a9:24:e7:57:bc:c7:a8:
a3:c5:1d:11:c9:67:72:5b:fe:a8:95:e9:3c:1e:31:6c:18:07:
da:71:ae:0c:8d:10:3d:bd:50:0b:7a:28:09:c0:6e:52:17:f6:
7e:d2:03:73:61:f6:91:26:75:dc:aa:c8:74:df:02:27:71:1c:
61:6a:e5:d7:01:e4:ae:20:8f:7f:b0:46:21:3b:65:14:5b:75:
51:d6:8f:25:8d:cf:41:76:09:ba:01:3d:22:8f:cc:52:59:5d:
b0:09:fb:70:50:a3:fb:0a:e3:44:49:9c:20:aa:28:7d:49:0a:
26:9f:d0:59:6f:1a:c5:aa:48:f5:5b:c2:62:a5:51:2e:41:06:
a3:ad:d4:1d:34:8f:02:49:91:a0:ae:ff:ea:b1:64:13:18:84:
e5:7b:bf:fb:77:b3:a7:55:74:87:48:4f:fd:bc:c1:9a:9b:30:
bb:9a:53:e8:93:e8:e2:88:2f:03:33:9f:55:a5:18:1f:46:af:
e8:9e:c2:10:f2:0b:f4:6b:0e:43:8f:a4:d5:08:d4:2d:ec:e5:
9c:50:1d:06:a4:34:af:cf:42:6f:89:f8:2b:b5:5e:6f:55:b5:
15:03:28:87:4b:d8:26:b6:50:09:0e:7a:3f:a8:8e:1f:25:a6:
da:71:ad:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:18 2024 by rpki-client on console-ams.rpki-client.org