Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DUogf5SbtEoebxdcj5nU0SpRvQc.roa
File: DUogf5SbtEoebxdcj5nU0SpRvQc.roa (raw, json)
Hash identifier: bJSisWNqQ8ucPh4/k0mV/OOWKRpBZ1i1L0FumzBlfYM=
Subject key identifier: 0D:4A:20:7F:94:9B:B4:4A:1E:6F:17:5C:8F:99:D4:D1:2A:51:BD:07
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 0191700467B011EB6650B154DEE7CA09B799
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DUogf5SbtEoebxdcj5nU0SpRvQc.roa
Signing time: Tue 20 Aug 2024 13:40:22 +0000
ROA not before: Tue 20 Aug 2024 13:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.134.23.0/24 maxlen: 24
45.152.150.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 07:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:70:04:67:b0:11:eb:66:50:b1:54:de:e7:ca:09:b7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Aug 20 13:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d4a207f949bb44a1e6f175c8f99d4d12a51bd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1a:f1:fa:02:3f:04:66:9f:03:c7:1a:49:40:
e0:16:03:26:55:30:9b:a4:56:9c:4a:64:e5:38:a6:
cd:10:bd:fc:b3:e5:44:c0:b2:87:12:16:23:76:ed:
c6:c8:45:0b:1d:06:e6:d3:57:14:04:10:d8:e5:bd:
2f:35:bc:ee:3e:69:9e:6d:48:3d:25:83:93:da:7f:
de:56:46:54:86:2c:74:d3:39:b8:f6:4c:94:5b:8f:
a3:6c:75:7f:df:7b:3b:a2:4f:d3:71:4f:99:49:59:
ec:bc:1e:c2:b7:e7:cb:b2:3e:32:f0:52:d1:02:c3:
df:a9:b2:5f:92:79:59:cf:b2:25:28:0c:57:36:8c:
54:f2:85:f9:a7:ca:ab:6d:d6:91:74:a2:88:85:4a:
f1:a6:ab:00:16:2a:a3:c2:de:13:94:f0:cc:cc:b7:
4e:d1:cf:a6:40:4e:e5:21:a5:5b:f2:6a:5a:2b:17:
3c:d4:fa:03:8e:57:71:b0:1c:98:61:54:50:2c:2a:
87:b2:1b:ab:9b:07:20:54:61:c9:c3:a6:09:2e:dd:
ef:50:ea:1b:78:0d:93:76:73:83:be:7d:fb:7a:38:
85:55:18:34:e5:b2:3b:d2:61:2d:55:6e:09:0c:f4:
f2:51:c7:39:8a:c8:e2:cd:1d:de:64:bc:eb:7e:2c:
67:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4A:20:7F:94:9B:B4:4A:1E:6F:17:5C:8F:99:D4:D1:2A:51:BD:07
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DUogf5SbtEoebxdcj5nU0SpRvQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.23.0/24
45.152.150.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:81:ec:64:03:5a:91:e6:0e:d1:55:b5:49:62:d7:31:0b:60:
b0:59:c9:d1:4d:26:ed:49:ad:28:a7:f6:77:3c:c5:d9:18:31:
d4:43:8d:0d:2a:d1:11:6f:2b:29:d7:70:1f:af:5c:ee:83:cd:
f7:12:29:6f:e9:cd:46:c6:0e:62:dd:86:b5:4f:86:a2:ca:d6:
d1:29:fe:54:e6:aa:67:dd:80:99:96:84:47:81:d3:23:1a:df:
ad:52:1d:07:23:17:17:c2:db:8c:a6:30:68:9a:e6:b9:cf:c9:
11:1c:fa:12:e7:f8:26:90:d7:8a:e9:44:e9:1f:a7:52:8d:ab:
41:1c:a3:72:06:92:15:06:c0:1d:ae:ac:d2:25:d8:b0:6f:40:
a4:a2:89:a5:1d:dc:8a:71:99:ff:e3:59:56:2d:5d:37:61:38:
5c:32:75:2c:3f:cf:cf:e1:19:f3:2e:70:05:ca:6a:ad:56:83:
16:12:0a:84:bd:e3:47:f1:81:ed:ca:ce:7d:6d:b9:07:e7:08:
9c:de:6a:eb:65:a8:7a:c6:0d:33:d8:e9:35:a6:f9:50:0a:82:
e5:b4:23:d0:74:7c:69:47:ff:d8:cc:20:c5:b2:9f:91:ae:7f:
af:a7:de:ff:7e:5c:16:dc:43:99:51:04:12:a7:b2:34:df:23:
a9:2d:7a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:10 2024 by rpki-client on console-ams.rpki-client.org