Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/xLVi3MuoT2HkBBXYllKFwhaGNwQ.roa
File: xLVi3MuoT2HkBBXYllKFwhaGNwQ.roa (raw, json)
Hash identifier: az3EXg1tMWHKOfG45mdslBA8JVQbsx1tQWGY1eA5BHA=
Subject key identifier: C4:B5:62:DC:CB:A8:4F:61:E4:04:15:D8:96:52:85:C2:16:86:37:04
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018CA316A09B3124F22A10EF05518975DCE6
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/xLVi3MuoT2HkBBXYllKFwhaGNwQ.roa
Signing time: Mon 25 Dec 2023 22:26:58 +0000
ROA not before: Mon 25 Dec 2023 22:26:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 45.139.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a3:16:a0:9b:31:24:f2:2a:10:ef:05:51:89:75:dc:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Dec 25 22:26:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4b562dccba84f61e40415d8965285c216863704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:1f:b2:ca:e5:de:e5:05:c9:30:73:b4:6e:
d6:b1:56:4a:46:35:e1:fe:7d:eb:81:68:64:26:14:
ca:d3:a8:50:ac:4b:e3:d6:94:43:db:3b:3d:27:58:
87:68:4d:34:65:64:a3:e1:a3:f2:fb:00:58:73:16:
a8:4a:f7:82:33:97:53:10:c7:1c:6c:46:ff:59:50:
dd:15:d0:cd:93:13:bc:ee:44:16:09:6e:a5:89:38:
8c:ce:67:aa:96:af:53:35:c4:92:45:63:69:1d:95:
ae:52:1c:e3:7a:e2:78:b8:b1:44:ad:7e:3e:95:9b:
b5:97:1e:87:e3:76:b5:be:6e:18:68:ab:bd:fe:e4:
46:bf:e4:7b:ca:03:08:0c:00:93:74:cb:ce:88:25:
e5:69:2f:b9:58:f8:3a:25:4b:dd:2d:07:d0:85:79:
d2:f6:f2:35:6c:27:e9:ab:aa:51:d3:40:85:fe:5f:
08:07:bc:43:83:ef:3d:cf:30:c8:3b:05:2b:cd:85:
86:bd:38:ce:6d:1d:26:43:7c:0d:ae:85:d3:53:81:
0a:50:d9:64:5e:ce:fc:0d:dd:39:68:1e:e5:41:a9:
bd:04:7d:9c:a1:1a:ea:09:dc:89:59:bd:5a:1f:87:
4d:8e:b1:0a:67:9b:cd:e5:88:6a:65:d1:15:2c:04:
1b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B5:62:DC:CB:A8:4F:61:E4:04:15:D8:96:52:85:C2:16:86:37:04
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/xLVi3MuoT2HkBBXYllKFwhaGNwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.199.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:b9:0b:e2:20:df:d8:d0:6b:6c:98:1a:25:b5:08:60:b0:50:
ff:95:29:df:7a:28:97:10:b4:45:49:a7:20:7a:91:bc:22:6f:
32:a7:c4:9c:05:bc:66:5e:b6:13:c1:6a:b7:67:ec:4a:4f:e2:
d3:2e:e8:b6:a8:3e:83:8b:b1:c2:c2:6d:30:aa:65:b4:5b:82:
ec:ef:b6:a1:ff:e2:7d:1b:c9:41:44:19:14:10:36:77:f7:80:
de:f9:f0:a3:42:7a:ce:c8:c2:6a:a5:f6:3a:a1:77:94:ac:90:
37:4f:31:5b:a8:13:fa:3a:26:d6:6b:a0:5e:c6:46:da:c3:b8:
75:3f:92:28:39:4e:8e:d2:d9:b8:83:5e:b2:54:f9:27:d8:bc:
39:f6:20:96:b3:d5:b8:bc:f2:9f:fd:46:03:cb:c6:04:d6:b7:
8c:d2:64:47:15:a4:2d:8c:70:87:57:50:58:f4:d5:b2:53:ed:
e7:83:c9:0c:38:32:04:6f:d2:ae:22:36:2a:25:dc:16:6e:d0:
d2:33:d9:50:7e:50:19:ab:99:a4:a5:55:7d:43:23:66:bf:e0:
5a:e7:2f:93:b1:96:e4:a5:39:2c:39:02:a3:93:f9:64:23:68:
b6:63:4c:c0:5d:d8:98:cc:92:aa:5d:a2:0e:cc:8e:20:15:1f:
63:dc:76:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:44 2024 by rpki-client on console-ams.rpki-client.org