Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Ac4A2cnv3pSZVTQiyQEgzMVu-AM.roa
File: Ac4A2cnv3pSZVTQiyQEgzMVu-AM.roa (raw, json)
Hash identifier: JdG1Icj1nnQuUk+n2I+LVuAOFp7JLrF2PUBf/TfM7fI=
Subject key identifier: 01:CE:00:D9:C9:EF:DE:94:99:55:34:22:C9:01:20:CC:C5:6E:F8:03
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018D37D2B31AC85871A24DD6B70506AF54E4
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Ac4A2cnv3pSZVTQiyQEgzMVu-AM.roa
Signing time: Tue 23 Jan 2024 19:36:11 +0000
ROA not before: Tue 23 Jan 2024 19:36:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 45.157.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 00:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:37:d2:b3:1a:c8:58:71:a2:4d:d6:b7:05:06:af:54:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 23 19:36:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01ce00d9c9efde9499553422c90120ccc56ef803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6a:df:0d:44:f4:4d:c5:81:77:1c:28:09:95:
f9:7a:23:b4:d4:21:ec:25:14:7d:c3:d8:19:e5:62:
98:65:c8:20:10:4b:8f:11:8f:00:74:8d:05:52:56:
93:d6:d6:72:57:b3:a4:8b:f7:68:f4:60:5e:8c:db:
02:67:d1:14:91:a8:2f:72:1b:17:5b:0c:8e:03:9f:
2c:11:35:05:2a:65:4f:4d:30:27:0f:91:b4:26:22:
40:1a:24:ee:bc:61:e2:89:80:07:b2:6a:e1:91:bf:
95:66:d7:44:b1:4f:6e:ab:ab:f0:21:cc:49:fa:31:
66:a2:4d:42:22:e8:48:7d:f7:76:07:82:32:ad:f4:
82:86:4e:3b:a2:f1:cb:24:4d:a2:3a:0c:8e:e7:a3:
9d:52:f9:a7:7b:10:04:02:1b:f7:e4:c5:31:5d:ad:
d9:60:04:f5:06:0a:19:aa:7c:07:ca:be:56:5d:25:
c8:3f:5f:71:c6:25:44:b9:25:ee:e9:3b:9e:84:3c:
b3:5f:65:ec:be:1d:21:12:93:02:0c:88:fa:9a:5e:
4d:47:76:a9:5e:e8:54:e1:5e:a7:77:37:a9:90:4c:
91:5a:61:fb:de:43:6f:4b:3c:4d:22:b8:cf:6c:57:
43:0e:61:63:c9:62:ef:ce:ec:da:59:83:19:91:f4:
8f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CE:00:D9:C9:EF:DE:94:99:55:34:22:C9:01:20:CC:C5:6E:F8:03
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Ac4A2cnv3pSZVTQiyQEgzMVu-AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.210.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ea:b8:fc:d1:7e:76:d1:7a:27:c7:f8:47:22:63:f9:5b:ac:
13:95:7f:29:07:df:d9:03:66:64:79:2f:21:ab:b9:f4:22:fb:
8d:97:a5:34:42:42:72:2c:2f:56:3c:41:12:9f:c7:62:41:30:
a2:17:4f:80:bd:e3:60:be:b5:42:9d:de:9b:a6:41:8b:3c:1a:
a3:5a:c1:aa:8c:24:5a:de:d7:18:ae:4f:a7:0e:7b:06:de:60:
b6:a1:be:73:c5:53:a9:b5:40:a4:8b:03:d5:21:b5:7e:e4:12:
d1:e6:35:6b:cd:01:c9:2f:0c:1f:25:6a:81:76:ab:c7:76:ce:
45:ab:1d:f0:f8:16:d2:45:cf:20:9a:55:42:3f:88:64:52:c2:
93:b6:1b:8f:5f:30:67:ca:9d:cb:57:e8:1a:60:11:e8:b8:20:
19:1c:54:8b:f9:42:28:f2:6e:e2:a8:c3:0f:ce:ed:47:2f:85:
65:ef:c7:3d:cd:bc:5d:2b:cc:cd:73:a5:be:7a:ac:94:cb:f4:
d7:ff:f6:a7:71:47:a4:09:e2:5b:14:e4:47:6e:1a:9b:24:4b:
28:76:11:ee:7d:0f:cf:53:6d:54:6f:99:02:c3:91:cb:16:c2:
0a:c1:9e:7e:3d:c1:0e:d4:91:0f:d6:02:21:e2:2b:da:7e:82:
78:28:67:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org