Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/a5meGlMP_4GiDLFLXgXPRaVeZCU.roa
File: a5meGlMP_4GiDLFLXgXPRaVeZCU.roa (raw, json)
Hash identifier: yh30Jhn3CvhKwNj2+3mdUbEh1LbgM+T7hV/ymNK4DuQ=
Subject key identifier: 6B:99:9E:1A:53:0F:FF:81:A2:0C:B1:4B:5E:05:CF:45:A5:5E:64:25
Certificate issuer: /CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Certificate serial: 018BAA07C56F13E729362DC7BF833BFFC63E
Authority key identifier: C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/a5meGlMP_4GiDLFLXgXPRaVeZCU.roa
Signing time: Tue 07 Nov 2023 13:45:17 +0000
ROA not before: Tue 07 Nov 2023 13:45:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 45.85.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:07:c5:6f:13:e7:29:36:2d:c7:bf:83:3b:ff:c6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Validity
Not Before: Nov 7 13:45:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b999e1a530fff81a20cb14b5e05cf45a55e6425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ea:50:ae:87:2b:d5:e5:f0:2d:9d:8b:5e:94:
4b:78:a7:7c:10:d2:75:ab:1a:67:de:62:b1:ff:10:
7f:8e:95:8c:d0:d7:7e:84:63:1f:51:07:d1:f1:f7:
0b:d4:10:ea:c6:fa:8b:a8:dd:86:97:8b:cc:46:43:
2f:76:15:9a:1d:21:1f:22:6c:e6:84:93:4b:88:90:
93:9e:65:6b:ce:82:04:ae:1c:9d:11:4c:a2:5a:55:
17:4d:06:a6:41:aa:1c:79:a6:0b:17:aa:11:16:40:
8d:92:44:03:05:87:95:bf:be:7a:ad:ea:11:50:6a:
5d:3d:72:71:d8:08:13:6e:32:36:64:a2:fd:75:90:
a2:f2:6a:aa:39:65:fe:d2:cd:ab:9e:89:4b:39:93:
df:45:6e:84:fa:fa:84:cd:13:03:d3:ff:e0:d7:bf:
95:1c:59:ad:27:58:fc:d8:2f:79:81:6a:51:48:ea:
84:31:89:3a:7a:95:83:a8:77:f0:a5:d9:5e:37:ae:
38:09:7c:a3:1e:13:f7:49:a2:86:78:e3:8c:ad:a9:
38:78:57:45:0b:6a:59:66:c0:13:d7:0f:10:c2:fb:
dc:4c:9b:59:62:ad:ec:e4:5b:bf:b4:f4:f0:5e:86:
5d:6b:ba:33:70:51:9d:d2:81:0e:ec:36:e3:24:7b:
32:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:99:9E:1A:53:0F:FF:81:A2:0C:B1:4B:5E:05:CF:45:A5:5E:64:25
X509v3 Authority Key Identifier:
keyid:C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/a5meGlMP_4GiDLFLXgXPRaVeZCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.99.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:59:59:dc:a6:0c:10:69:d4:1f:83:11:28:59:e0:23:1e:f7:
18:b8:00:59:2e:d8:98:8c:27:45:ba:d3:29:cb:3f:de:ae:29:
85:88:45:31:39:67:8e:4e:1c:af:69:7c:cf:4e:f5:a2:42:5d:
9e:d9:f0:aa:bb:ff:f9:67:e7:7a:9e:01:fd:8f:8b:b6:9a:80:
87:4d:0b:bc:cc:78:65:7d:0d:30:64:2c:71:95:89:7a:2f:d5:
d1:a1:bf:d5:22:a4:62:9a:83:dd:46:1b:21:70:b7:6e:e0:5c:
17:8b:c7:59:fe:98:de:cf:4b:cf:55:18:03:2d:6f:07:5f:fa:
21:bc:2d:74:44:34:b0:ee:ea:f3:45:bf:ab:44:2a:68:9b:3f:
52:cd:8c:6f:de:a7:e9:68:0c:a5:01:ee:2f:69:9f:47:66:55:
7e:56:2f:41:a8:79:b6:c9:05:4b:f9:52:5d:cf:6c:59:97:9d:
7e:1b:16:ad:55:3f:40:91:f4:38:c8:ab:d6:bd:a6:3f:ed:98:
11:21:c4:6a:a1:c0:8b:19:97:ca:31:b6:3c:07:6c:16:46:70:
17:e5:f4:28:4e:c7:68:63:9e:3c:7b:65:e0:62:a3:08:ca:5e:
ca:1f:de:2f:5f:f4:f5:43:43:4e:ea:9a:77:1b:d8:74:67:08:
34:f5:2a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:35 2024 by rpki-client on console-fra.rpki-client.org