Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/eCUZ4Qb_kaQ9513A1oT3XCBWevw.roa
File: eCUZ4Qb_kaQ9513A1oT3XCBWevw.roa (raw, json)
Hash identifier: Vum5ylJwTobt81EO+z3k52Pks8iTWiSSqqSR5kbFMuA=
Subject key identifier: 78:25:19:E1:06:FF:91:A4:3D:E7:5D:C0:D6:84:F7:5C:20:56:7A:FC
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 018BDDCED535260EA9DB0185EF483B584045
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/eCUZ4Qb_kaQ9513A1oT3XCBWevw.roa
Signing time: Fri 17 Nov 2023 15:03:21 +0000
ROA not before: Fri 17 Nov 2023 15:03:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 45.153.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 18:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:ce:d5:35:26:0e:a9:db:01:85:ef:48:3b:58:40:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Nov 17 15:03:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=782519e106ff91a43de75dc0d684f75c20567afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5d:f8:54:d3:10:4b:60:21:41:2a:c4:40:d8:
bd:95:86:90:b3:b1:8f:aa:96:fd:ee:fe:9f:67:b3:
de:1e:c7:61:40:0d:92:02:02:b9:1e:43:e9:57:28:
00:69:6f:56:b2:04:d1:a7:4a:63:cb:70:94:d6:04:
c8:2c:40:9b:e8:6c:9e:61:0e:13:77:27:be:78:77:
d8:0d:e3:8e:20:f2:f3:c2:68:e4:86:c1:dd:1a:7d:
54:2b:86:fe:16:37:c8:b6:60:cd:84:6d:04:62:d2:
87:3b:0e:68:65:d5:a1:30:80:f0:b6:5b:78:ce:d8:
f9:d1:d3:fe:6a:dc:67:ba:62:de:33:fb:74:ce:f5:
07:7a:d8:41:27:34:96:e0:b8:f0:00:82:9f:21:37:
86:77:49:b7:65:1e:1e:7d:00:66:e1:fc:1e:6d:87:
8a:ee:75:eb:93:3a:3b:32:fb:1b:f7:15:1c:31:22:
50:b3:3a:08:89:9d:bc:58:1a:d2:4a:c7:fc:e7:86:
82:24:6c:e9:26:10:df:4c:9b:5e:f5:b5:21:e1:45:
12:0f:6a:88:c7:ce:b3:14:ae:44:9c:cf:78:0e:e8:
7b:31:6d:02:fe:6c:11:be:a6:08:f2:36:ea:ed:cb:
de:03:00:ca:87:db:47:bb:be:9a:2a:fa:f5:a8:d3:
f2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:25:19:E1:06:FF:91:A4:3D:E7:5D:C0:D6:84:F7:5C:20:56:7A:FC
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/eCUZ4Qb_kaQ9513A1oT3XCBWevw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.124.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d5:ae:03:93:51:cb:23:4f:ac:1b:7a:4c:8d:c3:cd:9c:01:
86:40:ed:e6:76:3b:a8:5e:7e:10:25:05:d4:2e:bc:7b:98:29:
5a:ea:cd:c5:c2:5b:f9:bb:72:59:f4:14:c9:37:2d:e9:b3:f4:
0a:58:22:50:e9:69:c4:5f:66:c7:48:2c:88:68:79:b4:82:54:
0a:57:95:98:27:b3:35:b8:31:b8:4d:3f:52:8a:91:be:25:8f:
0b:ae:88:1a:75:b6:52:f7:54:d1:01:27:f3:c9:34:00:12:22:
bd:91:76:c8:c1:65:33:20:fa:70:45:c3:23:35:82:cc:8a:04:
d9:66:d2:95:33:ef:e6:2c:6f:a7:5b:01:65:33:57:3a:ff:fe:
82:0f:46:91:2e:f8:7b:1a:4c:96:29:b4:f2:e6:f1:59:d3:41:
bd:36:da:75:69:29:d3:95:a5:6b:51:da:d0:f4:00:cb:ed:37:
d1:5f:e4:b7:60:7e:fc:23:83:81:4f:02:bd:d3:d5:77:e4:cc:
29:59:03:53:36:14:1b:91:36:92:ad:d5:fc:1a:81:71:c2:50:
42:93:c4:21:56:49:18:e7:8b:37:c9:2d:a0:40:83:48:1a:be:
3f:87:89:8a:ba:23:73:a4:5e:ea:77:d2:b5:f6:3c:d9:2e:a7:
f2:a5:0a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:12 2024 by rpki-client on console-ams.rpki-client.org