Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/EXSbEiSahcFQPOeoK-aBom9850s.roa
File: EXSbEiSahcFQPOeoK-aBom9850s.roa (raw, json)
Hash identifier: H1sMEG+bj8Fxay9NRbYm79qp/MuFlbCOvpHVMVbJrVE=
Subject key identifier: 11:74:9B:12:24:9A:85:C1:50:3C:E7:A8:2B:E6:81:A2:6F:7C:E7:4B
Certificate issuer: /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial: 01856C7827ADDA44FD0EBFF9D1EA978E1400
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/EXSbEiSahcFQPOeoK-aBom9850s.roa
Signing time: Sun 01 Jan 2023 08:34:51 +0000
ROA not before: Sun 01 Jan 2023 08:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208209
IP address blocks: 45.154.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:27:ad:da:44:fd:0e:bf:f9:d1:ea:97:8e:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
Validity
Not Before: Jan 1 08:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11749b12249a85c1503ce7a82be681a26f7ce74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:af:eb:26:81:50:47:f1:ae:01:d1:d8:e0:
b6:87:f8:6e:cb:bd:39:6b:cb:e8:1c:84:aa:2d:d0:
2d:24:ba:73:85:fc:8a:66:62:b9:1f:72:3e:f8:ef:
60:70:ad:c1:e7:3a:b6:35:08:f9:ff:ec:51:43:27:
22:89:57:90:26:0c:84:36:c6:be:91:61:d7:9e:96:
db:33:96:65:0c:93:61:02:cc:60:08:9e:7d:44:36:
db:19:60:9e:6a:3d:e9:5f:56:f9:91:c2:2c:f6:e5:
05:c6:1a:fd:8e:86:64:0b:fb:98:74:24:6a:1f:68:
9d:30:6b:5a:6f:3f:df:16:28:1e:95:bb:e8:eb:6c:
4b:18:36:19:a2:1c:b2:d2:0c:9a:5a:3c:2f:3b:8a:
71:e7:06:4b:a0:6e:fb:0b:19:c6:9a:ef:33:2e:09:
a4:a2:fa:cb:cd:5a:4a:b0:ca:30:6c:c4:9f:22:8c:
ac:06:54:11:43:4c:b2:92:97:c6:03:0d:67:2e:83:
c6:39:e0:7e:bc:fa:b4:cf:22:c2:85:f1:a2:63:fd:
6a:2e:2a:6c:f8:24:c1:67:ef:7e:6e:cc:e0:46:1c:
5e:42:75:9d:ce:92:55:58:31:71:99:81:7b:a5:ef:
6d:30:b1:d8:70:85:94:bc:5f:fc:d1:b2:1d:d1:34:
c6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:74:9B:12:24:9A:85:C1:50:3C:E7:A8:2B:E6:81:A2:6F:7C:E7:4B
X509v3 Authority Key Identifier:
keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/EXSbEiSahcFQPOeoK-aBom9850s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.8.0/24
Signature Algorithm: sha256WithRSAEncryption
be:db:46:85:7f:a4:72:14:22:53:e4:66:87:3d:31:46:b4:ef:
49:4c:6f:dd:5b:02:fa:2d:51:cb:6b:b5:39:7c:01:38:57:b2:
c3:dd:27:da:e1:4b:38:71:7a:e6:b9:17:8b:26:e7:ba:5b:90:
59:98:c6:52:fa:79:4e:cb:9f:88:84:1e:e4:b9:b8:05:71:78:
d4:4c:dd:1f:42:98:89:78:f7:98:2b:a5:55:00:13:e9:fa:ca:
2d:21:59:52:d4:6e:69:41:8e:4a:3d:61:c7:15:01:98:05:eb:
76:a3:44:ea:ff:86:80:be:37:c4:a2:75:d6:a3:24:74:ed:0f:
f9:0d:e0:67:74:e1:d6:0e:12:21:a0:58:ce:29:e6:6a:fc:2e:
37:ba:00:b3:87:5d:e7:fb:3c:db:6f:43:b1:bd:14:c6:54:31:
e7:f3:69:a2:7e:62:3e:08:39:89:7e:3b:96:31:ad:df:2e:b9:
e2:59:27:70:db:45:0b:40:50:e9:ac:80:dd:b3:88:cf:1c:d3:
91:7c:f4:a1:79:57:cc:b4:3a:69:3a:cd:93:cb:e8:aa:db:14:
a3:9e:3a:2c:a7:20:57:f8:c2:b1:9b:69:51:7b:85:29:14:d2:
c9:09:a6:61:e3:01:a2:bb:e0:a8:a9:ce:9a:33:24:11:bf:a8:
43:4d:a7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:21 2024 by rpki-client on console-fra.rpki-client.org