Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/Ex6lxyCc0mNBWJAXc8y8b12nMik.roa
File: Ex6lxyCc0mNBWJAXc8y8b12nMik.roa (raw, json)
Hash identifier: 0AwOl1PChwy//AkoS/G+3xuiEstc7LydTOyCy76wVmU=
Subject key identifier: 13:1E:A5:C7:20:9C:D2:63:41:58:90:17:73:CC:BC:6F:5D:A7:32:29
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 018DD775A69D2230CD460C561443AB1EED5C
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/Ex6lxyCc0mNBWJAXc8y8b12nMik.roa
Signing time: Fri 23 Feb 2024 19:33:48 +0000
ROA not before: Fri 23 Feb 2024 19:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211448
IP address blocks: 45.95.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 08:45:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d7:75:a6:9d:22:30:cd:46:0c:56:14:43:ab:1e:ed:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Feb 23 19:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=131ea5c7209cd2634158901773ccbc6f5da73229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:51:61:61:59:34:08:ac:fe:66:a1:1c:86:d0:
ec:bf:48:94:b0:0d:d6:6c:5f:32:f3:be:08:21:b5:
b3:e9:7c:64:57:8f:e1:c7:f3:76:01:f8:ad:01:f4:
ab:04:29:25:e7:e6:a4:3d:ca:b4:b4:10:60:18:1e:
d1:6d:b4:f4:e1:5c:a0:15:7a:ef:89:4e:c5:88:d0:
e5:00:99:46:69:ee:90:03:2a:52:10:22:f0:0d:f0:
45:ce:f4:b0:7b:7d:de:f7:fc:1f:7d:ea:8e:b1:d0:
b7:1e:ca:50:04:79:9b:9a:19:4d:d3:3c:72:ff:ee:
f1:49:bd:4e:5d:67:71:9a:1e:73:f7:eb:a7:1b:b4:
01:fb:e4:49:61:e8:81:7b:ce:0f:49:fa:5d:e8:03:
f3:d6:15:d0:c9:b2:5b:62:a5:f0:82:22:27:30:8b:
c6:6b:79:0f:9e:34:43:d9:70:3c:c6:35:64:5a:92:
d8:96:f2:7f:f2:1d:32:ee:f3:cd:42:10:61:28:b9:
1a:c7:7d:1c:8d:9c:09:6b:ad:a1:6a:50:fd:63:61:
2b:bc:9f:e2:60:20:6d:d7:56:c6:1f:a4:55:d3:d2:
07:ed:41:b4:42:6e:04:e3:4b:d3:60:17:66:01:78:
70:a2:19:16:9a:10:71:51:fd:cb:56:41:72:d4:fe:
53:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1E:A5:C7:20:9C:D2:63:41:58:90:17:73:CC:BC:6F:5D:A7:32:29
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/Ex6lxyCc0mNBWJAXc8y8b12nMik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.113.0/24
Signature Algorithm: sha256WithRSAEncryption
86:9d:0b:a9:4f:98:15:54:42:48:ee:01:b1:10:33:40:64:85:
c0:72:32:55:b5:2e:1d:cf:83:1a:eb:d6:8f:c0:a3:a8:d7:2e:
72:af:aa:e6:b4:1c:c1:5e:fb:59:a5:0a:47:67:49:14:c5:a4:
45:38:13:16:11:2d:c9:00:c5:66:3d:bc:f9:f9:d0:1b:ce:b4:
60:30:40:5f:2e:77:9c:2d:fc:bc:bd:a7:43:09:b4:79:de:ba:
7d:a1:3c:27:85:d6:e8:9c:bf:ce:62:d1:6b:ab:56:2a:18:e7:
fe:48:cf:a3:aa:77:d8:19:82:36:48:0a:ce:e2:c6:eb:39:9c:
8e:4e:ea:42:56:ed:12:56:09:80:c7:56:68:c9:ac:c2:50:c3:
e5:a7:f5:1c:c2:08:1f:f3:c3:79:9e:9d:50:9c:5c:0e:76:68:
73:5d:4b:8b:66:36:93:e0:b7:ba:10:7c:0a:d9:4a:79:cb:0e:
dd:1d:33:7c:56:b2:7d:ae:b0:e2:03:87:44:29:59:ef:03:7c:
62:99:f8:4f:5a:23:73:37:cb:a9:de:3f:11:c2:ed:65:a0:da:
2f:71:05:9b:21:00:54:93:ff:96:0e:c2:43:98:b8:7d:d1:6e:
2d:f1:34:74:e9:e0:b0:e0:4b:ba:fe:d6:d9:5d:97:c7:9a:7e:
9b:ac:75:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 11:27:53 2024 by rpki-client on console-ams.rpki-client.org