Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/JEkCsC1zntLAuKpBW9iLk5loEGg.roa
File: JEkCsC1zntLAuKpBW9iLk5loEGg.roa (raw, json)
Hash identifier: s9JrDH3SQuWA5fyfxE9XfJI57G2tXRbUCR5+4cK0JRc=
Subject key identifier: 24:49:02:B0:2D:73:9E:D2:C0:B8:AA:41:5B:D8:8B:93:99:68:10:68
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 018F34604A9CA9E836B4DFD0342CA2F86718
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/JEkCsC1zntLAuKpBW9iLk5loEGg.roa
Signing time: Wed 01 May 2024 13:37:56 +0000
ROA not before: Wed 01 May 2024 13:37:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214993
IP address blocks: 45.135.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 May 2024 08:52:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:34:60:4a:9c:a9:e8:36:b4:df:d0:34:2c:a2:f8:67:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: May 1 13:37:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=244902b02d739ed2c0b8aa415bd88b9399681068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:04:4c:c6:50:54:5b:17:db:45:b6:ae:66:3d:
7b:bd:0d:f5:94:5d:1e:32:32:9c:81:f1:96:e9:0c:
a0:70:95:dc:da:d6:80:b9:7a:4e:c8:e4:0b:a3:27:
1f:e8:ae:a7:db:06:fe:17:d3:be:b7:5e:71:9b:6a:
69:82:f8:ae:f6:24:55:34:ff:9a:10:c6:ed:8b:a5:
8f:bd:03:28:88:5d:2b:f5:c2:7c:ad:71:ae:70:35:
c8:9d:1f:21:e7:b3:58:ed:2a:1e:4d:b2:75:2f:a5:
e4:86:4b:5a:51:97:c1:9c:a2:b1:d2:a5:6f:8e:56:
ed:a5:30:48:35:e0:1b:5d:62:16:e6:dc:cb:33:44:
5f:10:2b:b1:ab:38:e5:64:92:08:c7:ad:71:7c:2b:
21:6b:5f:10:c3:98:26:ef:d8:b9:b1:b2:6d:57:75:
2c:fc:c0:fa:be:35:6e:ce:85:9a:96:45:9e:41:58:
62:8f:09:f6:25:21:49:55:6c:7b:9a:02:8e:55:1f:
78:6f:dc:5d:8b:93:60:d2:76:ea:61:ab:b8:6a:f8:
83:df:89:a5:12:0e:b1:7c:bb:49:7d:82:96:5d:51:
a2:13:b7:df:b4:55:3b:92:fb:a9:3b:16:2a:b9:48:
a5:ed:b3:36:cf:9a:e4:e8:4b:49:4d:3b:3a:23:f5:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:49:02:B0:2D:73:9E:D2:C0:B8:AA:41:5B:D8:8B:93:99:68:10:68
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/JEkCsC1zntLAuKpBW9iLk5loEGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.242.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:7a:c9:7d:6c:57:3f:92:c6:e3:9b:45:41:99:d8:4b:1b:0e:
73:b7:64:14:34:ec:52:32:47:84:af:07:51:5a:73:b1:a7:ba:
28:a5:19:e2:b1:cd:df:a8:3c:e3:19:68:37:03:ae:1a:68:bc:
79:9a:f3:74:2c:76:1c:99:6b:b2:ce:b6:d2:b9:0e:80:c7:b8:
fb:8f:77:24:b6:37:c9:55:7c:54:58:b5:29:60:12:eb:d1:af:
0b:a7:56:b4:2e:64:e4:f4:70:51:6d:5f:ee:b8:46:2e:37:0d:
50:1b:a4:de:55:47:07:71:f4:96:72:c9:76:9f:63:75:04:3f:
07:f8:e9:23:86:56:a5:e0:e3:6e:f5:88:ad:7d:6e:f3:10:93:
7a:d7:a1:20:3d:28:4d:53:c1:ba:3e:81:18:05:b2:c6:ad:fa:
b1:be:3f:20:f9:87:c7:cb:c3:c4:52:0a:1b:9c:de:44:ce:24:
47:16:28:be:a7:6a:54:57:d3:69:d6:a1:f4:09:11:43:c3:b3:
66:ce:f3:10:6e:96:aa:4d:6f:b4:73:b7:20:da:3f:03:58:69:
1d:81:c7:59:9c:ff:0f:cb:e8:8a:07:81:ce:ef:1f:48:fe:b3:
99:76:e4:c1:d4:49:b5:14:a1:fb:b9:72:b7:58:7d:56:a0:44:
2b:73:92:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:48 2024 by rpki-client on console-fra.rpki-client.org