Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/URc-IeD3MfL3NT0WNSSEPpQk_gM.roa
File: URc-IeD3MfL3NT0WNSSEPpQk_gM.roa (raw, json)
Hash identifier: vACbmugc58KehryzyHeg/0Zv0FYclgCXWNzgF9T9uoY=
Subject key identifier: 51:17:3E:21:E0:F7:31:F2:F7:35:3D:16:35:24:84:3E:94:24:FE:03
Certificate issuer: /CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Certificate serial: 018C82364E25240D6CA6377871B9A1B75BF1
Authority key identifier: 74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/URc-IeD3MfL3NT0WNSSEPpQk_gM.roa
Signing time: Tue 19 Dec 2023 13:14:06 +0000
ROA not before: Tue 19 Dec 2023 13:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215982
IP address blocks: 45.132.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:82:36:4e:25:24:0d:6c:a6:37:78:71:b9:a1:b7:5b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Validity
Not Before: Dec 19 13:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51173e21e0f731f2f7353d163524843e9424fe03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8e:5f:73:b8:0a:c7:c7:9d:7e:83:7f:2e:ce:
fb:25:0e:f6:c2:44:46:39:2a:25:7a:e6:8a:7b:f3:
3d:9b:a9:3b:62:61:f7:bf:c1:7b:86:e8:6a:ae:38:
3a:1a:57:a6:30:e7:22:a0:aa:e3:e3:3e:d3:fb:5c:
c9:00:84:83:36:23:7b:53:10:bb:47:a3:64:93:80:
c9:79:25:9e:5e:00:66:5f:79:27:69:a6:81:f0:ff:
ec:8b:3e:57:ed:6f:b0:56:bb:c2:af:c9:df:a1:9c:
dc:76:3b:2a:24:e3:0b:64:9a:0f:fe:f0:6a:10:fa:
69:5c:cf:17:b4:96:03:ac:fd:a2:b3:10:06:6f:d7:
9f:43:55:ef:5a:55:63:0c:dd:92:42:3a:a4:7f:3b:
82:14:9e:66:85:c0:05:b7:e7:d6:15:f8:19:2c:8c:
fa:2f:1d:a1:b8:94:21:9a:1b:e3:5e:1e:60:77:2f:
59:b1:b7:68:e4:59:7d:fd:49:75:28:10:b9:27:6c:
9c:c8:2d:59:73:bb:de:4b:12:c9:ac:59:42:58:1a:
57:c4:9e:be:c4:e6:e0:ad:2f:fb:a0:62:c1:66:17:
8c:73:ea:1a:9d:8a:7d:f2:77:bc:19:78:f6:da:3a:
56:95:ad:3c:f8:04:ac:53:56:08:0d:25:5c:57:6a:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:17:3E:21:E0:F7:31:F2:F7:35:3D:16:35:24:84:3E:94:24:FE:03
X509v3 Authority Key Identifier:
keyid:74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/URc-IeD3MfL3NT0WNSSEPpQk_gM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.152.0/22
Signature Algorithm: sha256WithRSAEncryption
81:7c:50:03:c6:36:42:10:4f:71:ac:76:2c:2c:dc:0d:1e:88:
09:99:a1:13:80:c4:52:66:a6:eb:2c:32:d5:4c:4a:ae:2f:18:
47:96:8e:4e:a7:ef:18:99:9c:1f:29:08:79:f8:f9:1c:b4:7c:
ee:69:cd:59:96:47:33:3a:71:26:d5:73:96:96:f9:52:0a:14:
65:fe:ac:45:dc:95:54:ce:2f:a7:7d:bc:9d:e4:86:e4:f0:39:
26:40:83:92:fd:1e:66:13:d6:0a:76:de:3c:09:3a:6f:83:dd:
97:0b:66:4c:38:95:f7:ea:d2:a0:18:7a:e7:96:af:28:f0:47:
46:d2:7b:48:26:26:d1:6f:1e:10:7b:6b:b8:6c:8e:f6:13:0a:
a8:1b:92:a0:e0:25:63:fe:f7:83:ad:0a:fc:56:c4:56:c8:89:
2a:e9:cb:93:0b:e0:49:a4:b2:7a:c0:70:5c:e5:28:9a:15:77:
44:a3:09:d8:7f:32:bd:bc:db:01:3b:59:46:e9:2f:58:29:8c:
64:2c:4c:35:47:e1:f5:9f:9e:ad:ec:bb:4c:c5:76:16:c8:47:
a8:6e:ec:3c:c5:3d:7b:4e:9f:e0:d2:13:c2:0d:24:b6:32:1d:
69:65:b4:ff:ae:b4:51:9d:18:06:fc:19:5f:ce:ef:63:6b:85:
3d:2d:1d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:20 2024 by rpki-client on console-ams.rpki-client.org