Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/01HawDrY92REZB6mdETvxVZOlRg.roa
File: 01HawDrY92REZB6mdETvxVZOlRg.roa (raw, json)
Hash identifier: YXwvo/In+jqA884mgpY7r9+0sEvqLr0oj2Xr5NLiIhs=
Subject key identifier: D3:51:DA:C0:3A:D8:F7:64:44:64:1E:A6:74:44:EF:C5:56:4E:95:18
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018D65ACBE9BAD9E8A3DC59B7901F3625656
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/01HawDrY92REZB6mdETvxVZOlRg.roa
Signing time: Thu 01 Feb 2024 17:17:16 +0000
ROA not before: Thu 01 Feb 2024 17:17:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12722
IP address blocks: 45.80.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 02 Feb 2024 09:34:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:ac:be:9b:ad:9e:8a:3d:c5:9b:79:01:f3:62:56:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 1 17:17:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d351dac03ad8f76444641ea67444efc5564e9518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2a:72:43:b9:13:f1:91:88:e0:51:20:24:22:
25:be:ed:fc:54:26:1a:01:47:45:af:82:8a:45:30:
5a:8c:2c:83:34:9e:3a:78:6b:25:94:67:14:d2:5f:
d9:49:c5:9f:50:68:4b:e9:45:88:cd:0b:99:ea:92:
93:41:77:36:97:2c:46:f1:30:bc:90:4c:4a:b0:42:
20:fd:73:5b:74:b1:aa:04:83:07:ca:06:a5:aa:19:
85:5e:b1:bb:9c:1f:78:f1:a5:2d:6c:7e:62:6a:24:
8b:c4:6a:42:c1:bd:c2:e6:26:0d:9c:22:75:40:d2:
d0:44:b8:c8:bb:88:aa:e4:4e:21:e2:d1:ba:af:3d:
50:78:0b:45:95:9a:a8:a0:40:05:53:b1:59:3f:67:
09:e0:a3:43:cd:0d:ac:6e:c5:25:2d:e4:3f:16:b4:
30:b3:00:23:6c:f1:42:7d:43:b4:6e:54:00:85:07:
b9:49:2c:a8:e7:85:58:b2:3c:89:cf:b6:5f:0d:51:
cb:1c:af:d2:a8:1a:44:23:50:ed:51:06:de:3e:db:
a9:66:dd:8b:66:a8:c5:2d:9b:30:f4:8d:3f:4a:b3:
8c:d7:6e:f2:20:53:79:f8:36:6e:9b:bb:ba:c4:57:
25:ae:d3:d8:a7:e4:88:74:a0:84:e3:35:ec:32:11:
19:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:51:DA:C0:3A:D8:F7:64:44:64:1E:A6:74:44:EF:C5:56:4E:95:18
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/01HawDrY92REZB6mdETvxVZOlRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.120.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:e9:de:bb:d0:9c:89:e8:6d:ab:da:3d:6f:fe:ff:5a:66:5d:
e4:c1:49:aa:c4:47:2d:06:15:c4:5c:03:9b:dc:00:eb:cd:b8:
f7:3a:ac:de:ba:fd:41:ff:c8:ff:ee:40:81:84:46:62:7a:e0:
0e:23:59:00:39:b9:e4:02:69:6d:85:08:df:8a:c9:df:17:df:
4f:31:db:69:e8:c4:6c:c1:b7:ed:11:51:ab:3a:51:ae:74:e1:
21:dd:07:b2:b8:dc:24:cb:08:1a:f8:c4:87:31:b0:21:b7:f4:
9a:40:91:7a:c9:67:7e:fb:b7:24:e6:74:8b:98:bd:45:d7:5f:
af:7e:02:ef:b0:f6:4b:82:97:f5:1e:bd:41:9a:5e:b0:95:a6:
f1:e9:83:76:6f:54:65:fd:f1:ac:e5:57:65:51:28:35:89:1d:
7f:67:9d:89:99:40:34:56:9c:9d:91:46:17:d3:f2:79:95:25:
8c:de:28:43:b6:43:ef:d8:11:f9:18:84:d3:33:62:e7:a0:14:
60:ae:83:c7:0e:ab:b4:e2:59:50:2c:48:3c:eb:89:ea:21:5b:
15:18:dd:0f:26:14:fb:a2:de:4a:c9:e2:29:2c:7b:c2:c0:29:
35:02:71:27:eb:9a:04:07:0c:3b:a7:4d:40:e4:ba:5c:bd:6b:
eb:a5:f2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:48 2024 by rpki-client on console-ams.rpki-client.org