Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tscjaRSHK8ljKv4CtJTzq0-7ajQ.roa
File: tscjaRSHK8ljKv4CtJTzq0-7ajQ.roa (raw, json)
Hash identifier: i53GCsKElyDCMyUf8vvBWLiMKW2NFk9R83RLuVkaS0E=
Subject key identifier: B6:C7:23:69:14:87:2B:C9:63:2A:FE:02:B4:94:F3:AB:4F:BB:6A:34
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018DDC25E8FB9F75C98128A0CFAC1C96D11E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tscjaRSHK8ljKv4CtJTzq0-7ajQ.roa
Signing time: Sat 24 Feb 2024 17:24:48 +0000
ROA not before: Sat 24 Feb 2024 17:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47757
IP address blocks: 45.132.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 17:56:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:dc:25:e8:fb:9f:75:c9:81:28:a0:cf:ac:1c:96:d1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 24 17:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6c7236914872bc9632afe02b494f3ab4fbb6a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:1b:71:ee:1c:a6:91:ce:ae:ac:b0:21:63:
6b:d1:ce:0a:08:c0:a0:b6:a1:ae:ad:21:ca:89:88:
b4:ae:08:9f:7e:91:cf:ba:8c:10:38:b5:db:13:12:
41:22:e2:40:35:5f:ce:80:0f:9a:d1:af:bc:8b:98:
ab:34:36:d9:0c:85:a5:ff:3d:2a:02:6e:0a:89:89:
16:08:b5:f4:3b:dc:7d:9f:4d:0b:de:92:5c:6c:9a:
4b:c1:86:55:a5:3f:b9:b8:03:a3:64:7c:36:cb:e9:
d9:4d:72:03:72:88:a7:f5:ec:1b:8d:ca:ec:09:75:
aa:d0:82:3d:9c:5c:a3:f8:ce:21:52:2c:82:71:e5:
f9:8e:93:8e:6b:71:34:3b:c6:93:2a:a1:6f:60:31:
fb:8a:23:1a:ce:ce:8c:60:6e:71:e7:0b:54:7e:13:
f4:a6:19:0a:00:ae:f7:ff:45:c5:f3:19:bf:8a:f8:
8e:ea:ad:79:d6:fa:28:f0:f4:e9:c8:fe:7a:65:d0:
1d:99:db:9a:72:01:45:57:00:e1:08:15:ec:02:78:
84:3f:c8:53:5e:76:1a:20:9e:13:77:ee:f0:81:9e:
1e:ed:2c:35:a5:3f:5c:f5:29:0d:31:2d:52:0f:cb:
3f:e7:2d:1c:10:fe:92:33:6a:c0:16:3f:a1:bb:bc:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C7:23:69:14:87:2B:C9:63:2A:FE:02:B4:94:F3:AB:4F:BB:6A:34
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tscjaRSHK8ljKv4CtJTzq0-7ajQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.180.0/24
Signature Algorithm: sha256WithRSAEncryption
51:5e:3f:d2:23:45:bd:ff:84:04:1d:b2:78:c2:dc:8e:1a:1b:
41:a3:c0:cf:17:7a:7f:9a:37:25:02:c0:cd:08:cd:84:1e:a3:
96:f7:cf:9f:44:88:0a:1c:55:3d:6b:2f:cd:35:2b:dc:0a:4b:
d6:ae:0d:41:e3:95:5c:bc:f9:44:34:ce:f0:32:57:56:44:63:
e5:07:e5:e4:f6:33:ef:2f:56:7b:d0:dc:93:48:fa:c1:84:b6:
62:76:8a:c7:e0:05:57:44:ae:5f:62:4e:a5:29:49:cf:dc:d6:
95:07:03:cd:e6:77:d1:3d:74:01:6b:3c:1c:78:ab:67:70:66:
7c:bb:14:b6:c7:c6:38:dc:47:af:42:26:0b:75:0c:ca:fc:7d:
3f:17:8f:ae:56:24:71:e4:bc:ee:6b:56:3a:e1:ea:08:25:e7:
9a:f6:e8:b2:d7:64:fd:1e:a9:a4:91:ed:ca:13:28:e4:d2:37:
73:4a:7f:1e:ea:8a:a2:eb:a7:74:4c:c1:90:7d:2c:16:33:3d:
63:5e:c5:ff:ba:03:1d:dc:72:08:06:7c:0a:d5:f8:73:ad:4f:
63:e0:ba:46:8b:d2:c4:8a:3a:2d:ec:4c:cb:7e:ba:7c:d1:24:
a8:a1:a6:45:a2:91:b0:d3:2c:20:d9:cb:73:cb:9a:86:a1:3b:
91:57:e0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 22:23:10 2024 by rpki-client on console-fra.rpki-client.org