Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/Got704g8DPt-BbX3VbgycsdxXiI.roa
File: Got704g8DPt-BbX3VbgycsdxXiI.roa (raw, json)
Hash identifier: WyRhs2ThilPbbWcVzKKX2jkfqeEhhfaLv4qajiMdrYY=
Subject key identifier: 1A:8B:7B:D3:88:3C:0C:FB:7E:05:B5:F7:55:B8:32:72:C7:71:5E:22
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 018E55D598889B3497EE9043079140525242
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/Got704g8DPt-BbX3VbgycsdxXiI.roa
Signing time: Tue 19 Mar 2024 08:30:45 +0000
ROA not before: Tue 19 Mar 2024 08:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212853
IP address blocks: 45.81.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 13:16:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:55:d5:98:88:9b:34:97:ee:90:43:07:91:40:52:52:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Mar 19 08:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a8b7bd3883c0cfb7e05b5f755b83272c7715e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a3:fc:6c:67:5a:25:be:fa:6a:39:03:19:76:
85:2d:b4:47:32:78:63:be:85:a5:e0:46:46:b0:07:
b7:f8:98:91:07:a7:2c:38:c7:c5:5a:34:13:6c:1e:
82:ff:1b:da:95:d5:fb:d0:eb:93:f2:32:6d:49:f9:
8c:4e:93:de:a5:09:fc:d0:c0:32:49:66:03:68:a7:
41:ac:09:57:bb:fd:ba:87:04:77:f7:e9:3d:38:56:
65:40:7e:57:f8:0c:cc:27:38:b2:ef:e5:ba:89:53:
23:f4:26:ef:19:42:86:3c:db:43:2b:27:ba:8e:9b:
3d:1f:2d:a9:5d:b7:b4:b0:01:49:28:eb:da:c8:39:
f6:f3:1b:00:98:0d:07:9d:d0:ea:63:71:14:55:7c:
27:2f:70:c5:63:dc:14:4a:e6:70:7d:91:38:9c:73:
d5:91:c8:a8:c7:6a:77:37:b5:03:0e:cb:fa:ad:0e:
a3:4f:0b:6a:e6:f3:84:1e:b2:ed:bc:ff:c3:75:8e:
17:2e:82:6e:bc:45:22:ee:c9:b2:53:06:7d:9a:a2:
c5:cd:4e:0e:bc:3f:fc:23:19:bf:d3:d3:25:43:78:
df:6d:e8:f1:51:f8:c1:4e:10:e9:4d:52:02:2f:e4:
76:a8:52:fd:e1:37:c5:76:ee:6b:dd:a9:e8:ab:2f:
00:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8B:7B:D3:88:3C:0C:FB:7E:05:B5:F7:55:B8:32:72:C7:71:5E:22
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/Got704g8DPt-BbX3VbgycsdxXiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:43:3f:b5:70:5b:ea:6e:4c:07:cf:86:d7:11:48:bf:3d:d3:
89:4c:86:f5:c4:5a:46:28:60:11:46:46:59:ca:86:9a:f2:74:
cb:43:37:57:0e:df:f9:7f:e7:36:91:be:08:f3:a5:99:eb:4e:
ea:2b:ea:e5:3a:a6:80:75:c4:98:e4:66:b9:7a:90:02:73:04:
69:f8:4c:f9:88:02:07:e6:ae:f7:dc:a7:11:25:11:99:ea:df:
70:24:4e:dc:1e:88:bf:64:a6:30:09:b0:7b:2d:98:f3:bb:11:
42:a4:97:03:43:9a:27:41:5c:60:e6:0d:1a:00:68:d5:ea:6c:
e5:49:3e:88:11:01:0f:48:5d:fb:11:cf:4b:b9:c8:e8:1e:a4:
a5:8e:e1:71:69:c3:d9:62:da:03:b4:27:ee:54:a7:07:4f:1d:
b3:4e:66:bd:c3:12:24:ec:df:c1:93:dc:5a:41:a0:b2:6e:7b:
c6:7d:c4:10:ef:38:70:60:33:02:72:de:07:a7:97:7a:3e:1e:
31:00:e0:76:e5:01:aa:5a:8c:1c:16:e5:68:6a:6a:e8:09:ca:
0b:4d:e7:0c:27:f2:76:c4:97:7c:28:f4:2b:11:88:de:8a:64:
53:2b:fb:0a:9e:96:a9:21:84:68:81:f7:9c:55:61:1a:89:1a:
b4:62:34:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:15 2024 by rpki-client on console-fra.rpki-client.org