Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/p0ddE7XpQY4jDS66wwKonDE-beo.roa
File: p0ddE7XpQY4jDS66wwKonDE-beo.roa (raw, json)
Hash identifier: /Dfaf8osEr43lFWXmL+pNULIw1BGAtNaV2sGeRyj/pA=
Subject key identifier: A7:47:5D:13:B5:E9:41:8E:23:0D:2E:BA:C3:02:A8:9C:31:3E:6D:EA
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 018F135D3E24F8680B3ACCEEDE4925C69DCC
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/p0ddE7XpQY4jDS66wwKonDE-beo.roa
Signing time: Thu 25 Apr 2024 03:47:08 +0000
ROA not before: Thu 25 Apr 2024 03:47:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 45.91.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 02:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:13:5d:3e:24:f8:68:0b:3a:cc:ee:de:49:25:c6:9d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Apr 25 03:47:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7475d13b5e9418e230d2ebac302a89c313e6dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c7:21:b0:ef:dd:5e:de:35:21:e9:b5:b7:c9:
a2:a2:17:1f:8a:3b:5f:51:1d:f8:d6:c3:5e:ee:1d:
f2:7a:89:a1:2e:f3:bc:b3:ad:a5:62:21:18:58:49:
57:70:6c:f9:28:db:79:80:c8:e3:43:5a:06:4b:ff:
e0:03:4f:19:86:e0:5b:45:5d:48:e4:05:20:94:2e:
1a:11:b7:07:44:4e:ab:17:f2:9e:ee:57:09:78:df:
f5:31:4b:fe:70:d2:69:e0:02:75:4a:f5:5a:de:12:
bd:4f:44:18:dc:5c:97:79:22:33:d7:74:68:80:57:
4f:d2:bb:6a:66:ec:ad:55:2a:ae:1e:df:42:0f:80:
e9:af:9e:40:18:8c:5c:4a:cf:b9:2c:00:dc:1b:7a:
60:05:6e:45:15:f3:86:c0:e6:3a:03:69:5e:c9:5d:
fd:38:50:e5:41:5e:9a:51:e9:97:9d:09:99:9c:df:
51:77:da:b4:37:11:39:ed:0d:bd:5d:1d:61:a8:c7:
d1:77:a5:60:40:06:17:30:7c:71:93:1a:1b:43:0c:
f1:57:df:3e:0b:cf:56:cb:59:d2:38:75:ef:47:5c:
5d:c9:ad:59:0c:33:87:a9:aa:12:76:a9:74:26:4e:
e8:53:49:98:68:94:99:e4:7f:24:ad:c9:18:17:62:
c9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:47:5D:13:B5:E9:41:8E:23:0D:2E:BA:C3:02:A8:9C:31:3E:6D:EA
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/p0ddE7XpQY4jDS66wwKonDE-beo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.224.0/24
Signature Algorithm: sha256WithRSAEncryption
26:9b:32:d9:11:8b:5e:a8:4f:cd:4f:be:26:80:70:5d:c1:cd:
12:b8:ab:d0:10:61:ea:48:f7:14:2b:00:17:89:a7:5c:c9:a5:
29:85:39:c1:e7:26:8f:43:e7:bd:8a:3c:e4:f0:12:36:36:27:
64:85:de:58:cc:d2:70:52:f3:0c:80:de:fc:80:b5:99:68:82:
69:8b:21:23:1f:88:e7:be:c9:6f:9a:30:b1:ea:0d:c7:be:29:
4f:b6:af:78:d3:b6:53:9b:e6:17:4e:38:1b:9d:4d:86:76:87:
98:5b:1b:60:bc:9f:ce:c9:e5:55:ea:75:1d:cb:98:33:8c:0d:
8b:ac:45:62:1b:88:c8:4d:07:f8:42:88:f7:ce:0f:8a:bd:69:
e2:69:42:89:64:78:35:ae:92:44:30:55:f5:c7:2e:d4:71:aa:
a0:5a:9b:d2:5f:af:99:02:76:49:31:7f:5e:a1:e3:38:a6:6c:
09:2a:02:37:71:64:82:8c:51:a0:9e:00:27:d5:eb:54:df:85:
36:7c:aa:2f:41:c7:45:3a:eb:d0:ba:28:53:fd:60:be:53:a3:
b7:82:7b:e6:76:ea:ed:dc:fd:fc:b8:f1:e2:cb:3d:f9:32:70:
6f:7a:3b:a9:41:82:21:71:57:6d:d7:76:53:30:53:d7:04:d5:
30:b5:8f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 06:48:41 2024 by rpki-client on console-fra.rpki-client.org