Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/RIS6NS1fDLE_78bwU0jzAlZ_KvM.roa
File: RIS6NS1fDLE_78bwU0jzAlZ_KvM.roa (raw, json)
Hash identifier: l04CxlA4DqAvRdP9JfdUoKUvvbtX+Gp73NE5gykkLOQ=
Subject key identifier: 44:84:BA:35:2D:5F:0C:B1:3F:EF:C6:F0:53:48:F3:02:56:7F:2A:F3
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018CC794FA44FA18901A4F682CF551D98F3B
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/RIS6NS1fDLE_78bwU0jzAlZ_KvM.roa
Signing time: Tue 02 Jan 2024 00:31:18 +0000
ROA not before: Tue 02 Jan 2024 00:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132335
IP address blocks: 45.84.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 15:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:fa:44:fa:18:90:1a:4f:68:2c:f5:51:d9:8f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 2 00:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4484ba352d5f0cb13fefc6f05348f302567f2af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:99:22:ad:d6:5d:b1:36:bc:00:cd:1b:e6:
87:35:4c:f0:f0:01:ab:dc:b0:94:f2:33:e0:32:93:
20:54:f0:09:8f:22:4b:b4:82:86:b9:5a:bc:cf:68:
d6:a4:4d:4f:27:a8:18:84:c7:65:46:9b:7c:ee:2e:
1a:1b:60:38:f4:40:47:a2:50:b4:de:33:aa:36:34:
b7:e7:5b:e1:d1:3c:5d:37:a2:cf:fa:e8:47:1b:f8:
0b:04:11:38:95:9b:af:3f:eb:fa:05:c4:79:c5:2c:
7d:a8:8e:ba:98:12:a8:82:09:1d:2a:8c:ab:c6:66:
de:6a:66:e7:15:04:aa:55:84:5e:63:ef:a3:66:1f:
69:19:44:8b:4e:b3:27:a7:73:5f:6d:25:1e:05:af:
8a:e8:61:51:5c:01:3b:48:6d:3e:39:0d:ae:8a:83:
09:1c:9c:20:03:a5:8f:b1:2b:ad:8a:03:db:c4:aa:
97:e5:31:73:db:f8:07:6a:73:d6:a0:c8:c5:70:ad:
33:45:37:08:f4:a7:c8:e4:79:3f:39:2d:e3:9e:6e:
a1:d9:c6:a7:65:f6:ec:a5:e6:e5:7b:49:bf:94:51:
a4:39:c7:9c:65:22:70:b3:0b:2e:be:93:a8:11:88:
80:3a:0e:23:1a:c9:a9:67:7a:40:81:d6:49:a1:25:
e7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:84:BA:35:2D:5F:0C:B1:3F:EF:C6:F0:53:48:F3:02:56:7F:2A:F3
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/RIS6NS1fDLE_78bwU0jzAlZ_KvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.240.0/24
Signature Algorithm: sha256WithRSAEncryption
53:fd:d8:6f:02:d5:69:1f:5f:d7:b2:40:15:1f:81:92:4f:32:
2c:ed:2c:2c:9b:df:8f:cf:b0:10:0f:38:59:4b:88:67:5c:ce:
c1:3d:d5:10:9e:c4:3a:eb:9e:0b:b4:02:4d:32:b1:5f:6f:98:
7b:2d:36:79:1c:d3:19:db:82:74:8e:0c:8b:fa:cb:d0:c5:e2:
a8:1a:9c:db:fd:38:a6:34:a3:53:7e:43:58:0c:9f:c9:b4:e3:
3d:03:ec:d4:84:1a:2d:a5:96:cb:8b:fd:a5:36:46:d4:fe:68:
66:59:a9:c4:e2:d5:0b:96:63:da:34:74:b0:83:1b:c2:5c:b4:
5c:5a:1b:2e:35:b8:09:1d:ad:ed:e4:1c:fa:e3:c0:fe:5a:c8:
4a:18:9d:56:28:af:d6:50:2f:d6:95:f0:be:f3:5b:73:76:41:
1e:ca:7a:fa:29:c9:dc:80:b0:4c:fc:2f:bc:2f:2e:b4:f7:04:
92:9b:43:1f:34:1a:e9:b4:34:a3:0f:d8:d9:a0:8c:86:e2:3d:
87:dc:25:b1:e7:a9:ed:51:2d:34:12:2a:3e:5d:2b:31:2a:4e:
dd:e0:0d:54:0e:63:d5:22:fb:6d:18:42:02:f7:4f:18:54:5e:
45:71:af:99:a7:57:3d:fe:07:42:1d:38:ab:9d:5a:5d:05:7b:
29:6b:b7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 24 19:02:20 2024 by rpki-client on console-fra.rpki-client.org